$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa77bbfa-ed54-3041-958c-d4556f3f285c.roa File: aa77bbfa-ed54-3041-958c-d4556f3f285c.roa (raw, json) Hash identifier: TbsKk1HP0tYCDse7ihZg+bmpbOs8VrLjfP1/pcC9LSM= Subject key identifier: 75:B8:59:41:31:43:9A:CD:98:95:8E:13:33:FB:98:AE:6A:01:4B:FF Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Certificate serial: 010D0C9F4328584E425D0D4F49418EEE1BD6DD00 Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa77bbfa-ed54-3041-958c-d4556f3f285c.roa Signing time: Mon 22 Jun 2026 19:19:21 +0000 ROA not before: Mon 22 Jun 2026 19:19:21 +0000 ROA not after: Sun 06 Sep 2026 15:16:46 +0000 asID: 11776 IP address blocks: 24.153.36.0/23 maxlen: 23 24.153.44.0/23 maxlen: 23 24.153.46.0/23 maxlen: 23 24.233.202.0/23 maxlen: 23 24.245.109.0/24 maxlen: 24 24.245.110.0/23 maxlen: 23 24.245.116.0/22 maxlen: 22 65.99.116.0/23 maxlen: 23 65.99.120.0/24 maxlen: 24 65.99.127.0/24 maxlen: 24 66.85.4.0/24 maxlen: 24 72.9.17.0/24 maxlen: 24 72.9.18.0/23 maxlen: 23 72.9.20.0/23 maxlen: 23 72.9.22.0/23 maxlen: 23 72.9.24.0/22 maxlen: 22 72.9.28.0/23 maxlen: 23 72.9.30.0/23 maxlen: 23 74.214.32.0/23 maxlen: 23 74.214.34.0/24 maxlen: 24 74.214.35.0/24 maxlen: 24 74.214.36.0/24 maxlen: 24 74.214.37.0/24 maxlen: 24 74.214.38.0/24 maxlen: 24 74.214.50.0/23 maxlen: 23 74.214.56.0/24 maxlen: 24 146.168.18.0/23 maxlen: 23 146.168.20.0/23 maxlen: 23 146.168.25.0/24 maxlen: 24 146.168.26.0/24 maxlen: 24 146.168.32.0/20 maxlen: 20 146.168.48.0/21 maxlen: 21 146.168.132.0/23 maxlen: 23 146.168.142.0/23 maxlen: 23 159.250.66.0/23 maxlen: 23 159.250.70.0/23 maxlen: 23 162.223.182.0/23 maxlen: 23 162.247.106.0/24 maxlen: 24 173.44.70.0/24 maxlen: 24 173.44.71.0/24 maxlen: 24 173.44.74.0/24 maxlen: 24 173.44.108.0/23 maxlen: 23 173.44.110.0/24 maxlen: 24 173.44.111.0/24 maxlen: 24 198.52.11.0/24 maxlen: 24 209.42.132.0/23 maxlen: 23 209.42.137.0/24 maxlen: 24 209.42.158.0/24 maxlen: 24 216.10.190.0/24 maxlen: 24 216.10.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:42:5d:0d:4f:49:41:8e:ee:1b:d6:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Validity Not Before: Jun 22 19:19:21 2026 GMT Not After : Sep 6 15:16:46 2026 GMT Subject: CN=fc633146-96d6-470d-b26b-c8317a9929f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:28:48:47:8c:d3:a7:e4:fa:8b:a1:90:ab: 5e:69:b0:ee:6f:fb:59:43:2f:fa:26:50:dd:ff:ca: aa:44:68:10:37:7f:e3:13:b4:1f:3f:1a:bb:21:e5: b7:79:eb:63:8b:24:d1:04:32:43:ec:ec:7f:bf:0b: 50:10:10:26:42:32:2a:0a:63:4c:57:d5:f5:7f:0f: 2f:57:e7:61:f7:ca:f9:c7:59:c4:a9:9c:f0:dd:95: cf:06:70:d1:88:cf:4a:9e:1d:6f:ab:c8:57:84:bc: c3:61:c7:dd:8f:a9:2a:84:b1:2d:bf:b3:60:1a:4e: 5b:83:4c:c2:97:d4:2a:23:8f:7c:52:0f:ec:0c:12: c7:48:a6:10:fc:74:08:9d:29:fe:44:17:17:fd:3a: 72:9d:9c:88:69:59:6d:75:b1:b3:67:a4:24:97:59: 6e:68:a7:f9:67:89:24:d1:11:45:5d:b4:13:b2:4a: 64:59:37:8b:d2:d4:da:52:46:7d:7d:cf:e1:13:a4: 9f:30:89:09:d8:7b:ed:9c:e0:94:98:62:22:77:6a: ca:19:f5:63:90:e2:f8:f3:ae:eb:6d:66:0e:10:a7: 0b:fa:3e:f7:ee:ce:a8:04:74:d9:f1:be:d8:6c:aa: 48:6e:7a:30:65:81:b9:5c:70:f0:3d:d9:c0:3c:35: 77:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B8:59:41:31:43:9A:CD:98:95:8E:13:33:FB:98:AE:6A:01:4B:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa77bbfa-ed54-3041-958c-d4556f3f285c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl X509v3 Authority Key Identifier: keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer sbgp-ipAddrBlock: critical IPv4: 24.153.36.0/23 24.153.44.0/22 24.233.202.0/23 24.245.109.0-24.245.111.255 24.245.116.0/22 65.99.116.0/23 65.99.120.0/24 65.99.127.0/24 66.85.4.0/24 72.9.17.0-72.9.31.255 74.214.32.0-74.214.38.255 74.214.50.0/23 74.214.56.0/24 146.168.18.0-146.168.21.255 146.168.25.0-146.168.26.255 146.168.32.0-146.168.55.255 146.168.132.0/23 146.168.142.0/23 159.250.66.0/23 159.250.70.0/23 162.223.182.0/23 162.247.106.0/24 173.44.70.0/23 173.44.74.0/24 173.44.108.0/22 198.52.11.0/24 209.42.132.0/23 209.42.137.0/24 209.42.158.0/24 216.10.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:77:5e:77:5a:14:81:38:9c:56:bc:e9:7f:9c:c6:bf:60:32: 49:a3:0a:9f:e3:57:87:68:e2:9b:e0:35:0f:25:27:f5:5b:56: eb:45:44:e4:5b:d5:bb:8f:4b:b6:07:31:4f:38:36:9d:1c:fd: 7a:f8:d9:70:6b:68:36:8d:97:c1:82:3d:93:83:c3:7d:6e:10: f7:bf:67:e8:70:ae:94:ab:63:60:26:bb:45:96:e7:e8:35:46: 13:70:46:6a:66:56:f4:c0:5b:79:67:78:14:55:32:e8:85:80: b6:d5:d0:4d:52:8a:59:ea:63:d5:8c:ca:77:5c:f8:34:b3:d7: fe:66:c6:88:e8:72:f0:d1:3a:48:3f:5c:c8:f6:38:ea:28:d7: 51:b1:d0:0f:36:d5:6e:7b:8c:73:14:cd:45:63:4c:ea:34:09: 18:63:5a:19:c1:9e:3a:57:e9:b4:cb:1a:9f:f2:96:9a:95:8a: 26:b1:4a:7d:20:78:b2:f6:a4:c8:79:89:fc:95:d4:71:27:3e: 17:01:2b:14:dd:c2:cf:58:4f:f2:aa:57:10:5a:df:78:75:8c: 36:e0:ba:25:36:d9:ac:12:84:69:36:bb:8d:d3:60:58:00:69: 13:24:c6:b6:d5:3b:ed:8b:75:d0:48:e8:61:88:61:ab:90:ea: 19:ea:2b:c2 -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWE5CXQ1PSUGO7hvW3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx ZGM3MB4XDTI2MDYyMjE5MTkyMVoXDTI2MDkwNjE1MTY0NlowLzEtMCsGA1UEAxMk ZmM2MzMxNDYtOTZkNi00NzBkLWIyNmItYzgzMTdhOTkyOWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphgoSEeM06fk+ouhkKteabDub/tZQy/6JlDd /8qqRGgQN3/jE7QfPxq7IeW3eetjiyTRBDJD7Ox/vwtQEBAmQjIqCmNMV9X1fw8v V+dh98r5x1nEqZzw3ZXPBnDRiM9Knh1vq8hXhLzDYcfdj6kqhLEtv7NgGk5bg0zC l9QqI498Ug/sDBLHSKYQ/HQInSn+RBcX/TpynZyIaVltdbGzZ6Qkl1luaKf5Z4kk 0RFFXbQTskpkWTeL0tTaUkZ9fc/hE6SfMIkJ2HvtnOCUmGIid2rKGfVjkOL4867r bWYOEKcL+j737s6oBHTZ8b7YbKpIbnowZYG5XHDwPdnAPDV3FwIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFHW4WUExQ5rNmJWOEzP7mK5qAUv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvYWE3N2JiZmEtZWQ1NC0z MDQxLTk1OGMtZDQ1NTZmM2YyODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2 MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw MTJjMDFkYzcuY2VyMIIBAQYIKwYBBQUHAQcBAf8EgfEwge4wgesEAgABMIHkAwQB GJkkAwQCGJksAwQBGOnKMAwDBAAY9W0DBAQY9WADBAIY9XQDBAFBY3QDBABBY3gD BABBY38DBABCVQQwDAMEAEgJEQMEBUgJADAMAwQFStYgAwQAStYmAwQBStYyAwQA StY4MAwDBAGSqBIDBAGSqBQwDAMEAJKoGQMEAJKoGjAMAwQFkqggAwQDkqgwAwQB kqiEAwQBkqiOAwQBn/pCAwQBn/pGAwQBot+2AwQAovdqAwQBrSxGAwQArSxKAwQC rSxsAwQAxjQLAwQB0SqEAwQA0SqJAwQA0SqeAwQB2Aq+MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADl3Xnda FIE4nFa86X+cxr9gMkmjCp/jV4do4pvgNQ8lJ/VbVutFRORb1buPS7YHMU84Np0c /Xr42XBraDaNl8GCPZODw31uEPe/Z+hwrpSrY2Amu0WW5+g1RhNwRmpmVvTAW3ln eBRVMuiFgLbV0E1SilnqY9WMyndc+DSz1/5mxojocvDROkg/XMj2OOoo11Gx0A82 1W57jHMUzUVjTOo0CRhjWhnBnjpX6bTLGp/ylpqViiaxSn0geLL2pMh5ifyV1HEn PhcBKxTdws9YT/KqVxBa33h1jDbguiU22awShGk2u43TYFgAaRMkxrbVO+2LddBI 6GGIYauQ6hnqK8I= -----END CERTIFICATE-----Generated at Fri Jul 24 04:27:35 2026 by rpki-client