$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/54a4b509-5d06-38d4-9ca8-39416123a460.roa File: 54a4b509-5d06-38d4-9ca8-39416123a460.roa (raw, json) Hash identifier: qwdaAS2ozz7GIS8wCksiX13kg4wVx6qlYKXYutzP9v0= Subject key identifier: 6E:A6:58:2D:50:7E:CD:D2:8A:EF:D4:0B:F5:77:FF:EC:94:26:59:A4 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584DE5D95FB48941C57A1EF37980 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/54a4b509-5d06-38d4-9ca8-39416123a460.roa Signing time: Wed 20 May 2026 15:59:40 +0000 ROA not before: Wed 20 May 2026 15:59:40 +0000 ROA not after: Tue 18 Aug 2026 15:59:40 +0000 asID: 3503 IP address blocks: 216.24.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:d9:5f:b4:89:41:c5:7a:1e:f3:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: May 20 15:59:40 2026 GMT Not After : Aug 18 15:59:40 2026 GMT Subject: CN=672af6bf-495d-46db-837e-d1d2943cf1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:20:46:26:df:3e:bb:dc:d8:0c:cd:74:a9:61: ae:46:e4:80:e7:29:36:74:3b:d5:2f:bb:44:bf:f7: 36:12:71:f7:7a:42:b0:84:85:ea:6f:77:7f:9d:f9: 61:c1:29:9e:0c:c2:aa:2a:ad:f7:bd:21:4e:fd:ae: 35:67:0e:df:87:cf:2a:03:b9:95:4a:98:ea:55:f5: ff:70:72:6b:d6:f6:ef:02:59:ec:04:6f:6c:f2:0d: 1a:6c:97:d0:f7:81:bc:fe:6e:a1:04:45:c8:ec:ef: 6e:88:06:ef:88:9d:fd:c2:87:f8:14:20:c8:c1:cb: 29:7f:cf:32:95:4d:74:5d:84:f4:51:c7:75:c6:cb: 56:0a:b1:2d:12:c2:ab:be:a6:1c:5c:21:0c:da:c7: 70:1f:05:55:72:3d:c7:fb:3d:e6:8f:a4:9c:34:f4: a5:b9:b8:c5:67:39:94:47:a7:fa:d8:ed:f0:01:c5: eb:de:22:69:cd:fe:d7:56:37:1a:1e:4d:52:e2:38: e4:a5:9f:af:39:06:fd:30:97:ec:a6:0e:4b:fe:19: b1:1d:18:69:26:5d:37:5c:b7:f6:b6:6f:02:80:ba: 06:54:15:19:08:f9:ac:92:fb:0b:ad:26:04:f7:82: a7:8d:2d:67:59:44:48:62:c8:3c:a0:9e:01:89:c8: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A6:58:2D:50:7E:CD:D2:8A:EF:D4:0B:F5:77:FF:EC:94:26:59:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/54a4b509-5d06-38d4-9ca8-39416123a460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.24.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:47:0f:a1:b6:a0:99:90:ec:4f:95:b2:45:33:22:b6:a3:c2: 0f:6f:63:2b:c5:d5:0f:fa:0a:f3:58:52:6f:60:78:30:ea:f2: ee:a5:15:1c:96:b9:0b:bc:ea:62:69:6f:85:b1:2c:90:08:d8: 54:cf:fe:4c:28:ae:48:f7:cb:f1:3a:4c:3a:0e:c0:54:1f:5b: 35:19:84:36:ef:ef:3a:26:67:47:a8:57:e9:7b:19:4e:8d:c8: 9d:ae:81:0f:f3:92:f1:ab:cd:b8:fc:53:f0:ce:f6:0e:5e:b7: 39:d5:5c:e0:72:cd:b4:d3:6a:bc:1a:fa:90:84:60:82:fd:33: eb:98:ad:84:51:ce:40:13:c5:e3:ef:75:14:f1:f9:30:a1:b8: b6:9e:ab:88:4a:3d:65:fd:48:12:1f:0a:06:17:2c:a6:a8:bb: bc:98:cc:80:c5:ca:69:18:0d:8d:29:a7:32:3a:ad:ef:7e:37: fb:3f:db:15:b6:a2:6e:88:4f:1a:74:c6:5c:9c:e5:fc:84:44: ae:de:d5:b4:30:f5:36:cc:c2:d0:a8:bb:19:6b:17:33:15:b2: 44:53:48:a1:2b:3a:62:9b:27:7d:74:72:64:41:83:96:9c:11: f5:fe:e3:8c:85:c0:3f:5b:72:fd:43:bf:34:49:e6:f4:86:05: ca:c0:db:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3l2V+0iUHFeh7zeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDUyMDE1NTk0MFoXDTI2MDgxODE1NTk0MFowLzEtMCsGA1UEAxMk NjcyYWY2YmYtNDk1ZC00NmRiLTgzN2UtZDFkMjk0M2NmMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCBGJt8+u9zYDM10qWGuRuSA5yk2dDvVL7tE v/c2EnH3ekKwhIXqb3d/nflhwSmeDMKqKq33vSFO/a41Zw7fh88qA7mVSpjqVfX/ cHJr1vbvAlnsBG9s8g0abJfQ94G8/m6hBEXI7O9uiAbviJ39wof4FCDIwcspf88y lU10XYT0Ucd1xstWCrEtEsKrvqYcXCEM2sdwHwVVcj3H+z3mj6ScNPSlubjFZzmU R6f62O3wAcXr3iJpzf7XVjcaHk1S4jjkpZ+vOQb9MJfspg5L/hmxHRhpJl03XLf2 tm8CgLoGVBUZCPmskvsLrSYE94KnjS1nWURIYsg8oJ4BichiwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6mWC1Qfs3Siu/UC/V3/+yUJlmkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNTRhNGI1MDktNWQwNi0z OGQ0LTljYTgtMzk0MTYxMjNhNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARHD6G2oJmQ7E+VskUzIrajwg9vYyvF1Q/6CvNYUm9geDDq8u6lFRyW uQu86mJpb4WxLJAI2FTP/kworkj3y/E6TDoOwFQfWzUZhDbv7zomZ0eoV+l7GU6N yJ2ugQ/zkvGrzbj8U/DO9g5etznVXOByzbTTarwa+pCEYIL9M+uYrYRRzkATxePv dRTx+TChuLaeq4hKPWX9SBIfCgYXLKaou7yYzIDFymkYDY0ppzI6re9+N/s/2xW2 om6ITxp0xlyc5fyERK7e1bQw9TbMwtCouxlrFzMVskRTSKErOmKbJ310cmRBg5ac EfX+44yFwD9bcv1DvzRJ5vSGBcrA29c= -----END CERTIFICATE-----Generated at Mon May 25 04:38:47 2026 by rpki-client