$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/81238bd3-138b-35af-8f31-4a9cfa4671ed.roa File: 81238bd3-138b-35af-8f31-4a9cfa4671ed.roa (raw, json) Hash identifier: 3BwxP/uVxYd9ANC+H/nxnsTrzoxHt9xXjzN6SmU0ca0= Subject key identifier: 31:0A:AB:37:23:70:10:5B:D6:C1:DE:B4:AF:8C:44:50:D9:FA:FF:58 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584F07D77D69D41B4D43119C7D00 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/81238bd3-138b-35af-8f31-4a9cfa4671ed.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 3503 IP address blocks: 216.24.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:7d:69:d4:1b:4d:43:11:9c:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=ad8346c1-7cf8-4771-84a1-b966b6a7303f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:c1:b5:5d:ad:8a:69:60:27:ad:12:e1:0b: 19:e7:94:32:24:5d:94:55:55:cd:b8:4b:df:8b:73: 09:ef:b8:40:26:f4:a7:53:77:8c:51:70:73:a8:97: a9:df:12:72:5d:1c:79:0a:54:b9:24:ce:7e:79:ca: de:01:97:b0:ba:c5:4b:9d:1c:04:ef:a7:56:84:3c: 0b:1d:ee:10:a6:3d:7d:60:f9:0d:1a:a3:01:7b:7a: 05:2d:7c:69:42:21:49:9f:b5:65:8c:e0:b3:e0:0d: 27:7b:29:0b:30:e7:f6:4d:23:d5:05:26:60:87:9a: 9a:7f:41:15:27:73:61:43:72:9b:db:df:20:fd:f0: b7:32:0b:55:81:68:d8:15:e4:6b:68:4b:2d:62:b9: 07:09:2c:88:19:22:42:ac:33:43:d9:5c:79:c8:0e: 08:d3:58:77:a0:45:0a:77:c1:fb:30:1d:0e:f6:3f: 1e:f7:57:b6:b1:63:78:02:cc:c1:cd:37:37:d2:49: 11:90:1e:b5:5e:15:14:86:7a:5f:ba:4c:70:06:2a: 24:bb:21:e0:78:d2:4d:35:33:41:ce:65:38:00:c3: 03:93:3c:80:53:9d:2d:10:0d:3f:59:c3:f7:97:b7: ae:4f:52:69:f2:b5:f6:89:9c:8c:64:45:84:df:b1: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0A:AB:37:23:70:10:5B:D6:C1:DE:B4:AF:8C:44:50:D9:FA:FF:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/81238bd3-138b-35af-8f31-4a9cfa4671ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.24.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9f:96:84:aa:2a:61:95:d2:60:a3:a7:92:27:a7:e3:62:f7: 42:f4:18:7a:6f:77:19:93:27:86:20:c4:56:51:64:fe:7e:22: a8:1c:0e:3e:df:db:bf:91:6a:84:8f:ae:f3:6b:fa:d5:73:62: d3:1d:2d:61:81:fb:84:3a:04:cb:6d:5c:fd:15:91:6e:d9:b7: 43:91:77:8f:e9:28:fb:cc:67:a2:8c:ec:15:a8:44:ee:39:27: 83:90:17:be:1e:3e:4c:b4:0a:92:16:28:64:f6:7f:d0:f5:ca: 1f:78:70:02:31:af:24:00:2d:9a:15:9d:38:03:a7:58:10:06: f3:2c:30:fe:4c:62:b5:7d:0e:c1:db:64:f0:d1:88:17:75:43: 73:fd:a9:3c:37:3f:e7:90:36:c1:21:68:8e:52:af:65:06:e3: b0:52:04:d9:d4:f1:56:3a:e3:87:b1:bc:64:86:fa:89:d2:05: d4:44:20:42:3a:2d:1d:c8:9a:dc:76:b8:46:90:7b:bb:8c:84: 76:50:4d:f2:a6:46:dc:8b:da:b0:c1:b6:17:73:b8:59:e8:fb: 64:a8:de:9b:35:38:1e:d3:77:42:7e:ae:b5:18:dd:18:7b:bb: db:d3:de:14:e0:ff:e9:b4:1e:2d:9d:9c:c6:fd:50:82:62:46: f7:19:8c:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H131p1BtNQxGcfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk YWQ4MzQ2YzEtN2NmOC00NzcxLTg0YTEtYjk2NmI2YTczMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHrBtV2timlgJ60S4QsZ55QyJF2UVVXNuEvf i3MJ77hAJvSnU3eMUXBzqJep3xJyXRx5ClS5JM5+ecreAZewusVLnRwE76dWhDwL He4Qpj19YPkNGqMBe3oFLXxpQiFJn7VljOCz4A0neykLMOf2TSPVBSZgh5qaf0EV J3NhQ3Kb298g/fC3MgtVgWjYFeRraEstYrkHCSyIGSJCrDND2Vx5yA4I01h3oEUK d8H7MB0O9j8e91e2sWN4AszBzTc30kkRkB61XhUUhnpfukxwBiokuyHgeNJNNTNB zmU4AMMDkzyAU50tEA0/WcP3l7euT1Jp8rX2iZyMZEWE37En0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEKqzcjcBBb1sHetK+MRFDZ+v9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvODEyMzhiZDMtMTM4Yi0z NWFmLThmMzEtNGE5Y2ZhNDY3MWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyfloSqKmGV0mCjp5Inp+Ni90L0GHpvdxmTJ4YgxFZRZP5+IqgcDj7f 27+RaoSPrvNr+tVzYtMdLWGB+4Q6BMttXP0VkW7Zt0ORd4/pKPvMZ6KM7BWoRO45 J4OQF74ePky0CpIWKGT2f9D1yh94cAIxryQALZoVnTgDp1gQBvMsMP5MYrV9DsHb ZPDRiBd1Q3P9qTw3P+eQNsEhaI5Sr2UG47BSBNnU8VY644exvGSG+onSBdREIEI6 LR3Imtx2uEaQe7uMhHZQTfKmRtyL2rDBthdzuFno+2So3ps1OB7Td0J+rrUY3Rh7 u9vT3hTg/+m0Hi2dnMb9UIJiRvcZjOw= -----END CERTIFICATE-----Generated at Sat Sep 5 00:46:22 2026 by rpki-client