$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/920c6ec6-7efb-3c87-816c-5a28d6317241.roa File: 920c6ec6-7efb-3c87-816c-5a28d6317241.roa (raw, json) Hash identifier: cnBZCnV+LGbclbQhX3ju2ogXj+x/JVlh4fDhg7olixs= Subject key identifier: 2B:E4:DD:03:70:5F:EE:52:56:5F:EF:F4:63:F4:BB:EB:DD:04:DC:8E Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584F71ED7EE18B42A6EDCFD85F10 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/920c6ec6-7efb-3c87-816c-5a28d6317241.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 18526 IP address blocks: 200.229.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:7e:e1:8b:42:a6:ed:cf:d8:5f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=63ef0917-5405-4329-b2d9-3b5435d9fc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8c:62:27:df:0b:f1:8b:a9:ba:0c:9e:32:62: 22:55:30:6e:f4:3b:47:f1:17:1c:d4:37:12:d3:8f: 28:f6:0b:2f:54:6c:74:dd:74:67:36:3b:68:a9:4d: 87:86:54:94:e8:5c:30:e4:d7:ff:c2:ba:a9:38:e6: e8:cb:d3:34:fe:19:70:fc:3b:c2:91:b2:fe:1d:d9: dd:66:64:b7:90:e2:03:c4:2d:5a:a5:b1:40:1b:01: 32:70:2d:e8:cd:c5:b7:ec:5c:24:60:d0:ce:3a:b1: 26:cf:f0:3b:2f:b3:ab:d9:e2:0b:3f:f9:7f:f2:5c: 65:6d:05:31:db:d7:2a:3e:bd:89:17:f3:60:52:f2: c5:aa:0f:45:9e:fc:bf:2a:e2:b2:97:36:d1:4f:71: c6:9e:88:c7:d7:56:af:69:58:e8:35:52:dc:79:a5: de:cb:91:7d:b4:aa:c6:62:34:bf:26:66:ee:08:8c: 7c:39:cd:99:ab:86:c3:77:1c:83:62:2f:03:36:d7: 48:35:f4:10:7a:e8:e8:ca:da:e6:31:1c:b5:cd:f1: 5f:b3:8f:ec:c1:dc:66:ca:2c:e7:38:32:6a:48:ea: cb:85:cd:77:37:1b:06:21:41:bd:d7:2c:91:98:b5: 10:cc:77:fa:b2:30:41:f0:8e:80:a4:54:1c:f6:06: 40:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E4:DD:03:70:5F:EE:52:56:5F:EF:F4:63:F4:BB:EB:DD:04:DC:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/920c6ec6-7efb-3c87-816c-5a28d6317241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d3:d6:bd:04:44:fe:09:42:9c:45:a7:01:8a:dd:d5:5c:65: d2:cf:16:83:98:69:b3:48:1c:f5:39:ab:6d:ab:a4:b8:3d:1c: 67:b2:dc:2a:7f:3b:12:b9:86:2e:1d:04:14:a4:f0:9f:b7:c9: af:d2:81:a5:65:24:f3:40:78:4e:0e:84:51:63:43:27:c7:c0: c9:af:4a:cc:8d:1f:67:31:58:d8:2d:ec:a2:60:95:fd:39:60: f1:11:7f:d6:29:b3:ce:5a:06:24:d1:e4:48:07:9c:eb:cc:07: ed:02:74:09:4a:6d:b6:d8:fe:04:c6:30:ab:35:22:89:cb:9d: 89:7a:2d:8a:c7:3d:7f:a7:3d:b0:df:5f:f3:fa:2c:3c:da:80: 33:14:8a:da:78:4c:4a:8d:c2:f7:42:8c:b9:75:42:c4:5e:42: 18:68:a8:2e:91:64:17:27:79:3b:ac:a1:2e:d6:4b:24:5c:30: 81:74:1d:4e:03:4c:c1:f0:98:4a:69:e2:c5:b8:94:47:6e:45: 3c:32:0b:29:de:12:26:e8:73:20:ec:63:f2:9d:f9:53:79:8f: 51:ae:61:44:c2:92:b0:78:0d:83:d4:df:c2:ae:b3:8a:45:5f: e7:d4:b7:b6:31:f6:e5:6c:2a:3e:5a:d0:dd:a0:04:fd:8a:8b: 7e:ef:41:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7X7hi0Km7c/YXxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NjNlZjA5MTctNTQwNS00MzI5LWIyZDktM2I1NDM1ZDlmYzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YxiJ98L8YupugyeMmIiVTBu9DtH8Rcc1DcS 048o9gsvVGx03XRnNjtoqU2HhlSU6Fww5Nf/wrqpOOboy9M0/hlw/DvCkbL+Hdnd ZmS3kOIDxC1apbFAGwEycC3ozcW37FwkYNDOOrEmz/A7L7Or2eILP/l/8lxlbQUx 29cqPr2JF/NgUvLFqg9Fnvy/KuKylzbRT3HGnojH11avaVjoNVLceaXey5F9tKrG YjS/JmbuCIx8Oc2Zq4bDdxyDYi8DNtdINfQQeujoytrmMRy1zfFfs4/swdxmyizn ODJqSOrLhc13NxsGIUG91yyRmLUQzHf6sjBB8I6ApFQc9gZA5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvk3QNwX+5SVl/v9GP0u+vdBNyOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvOTIwYzZlYzYtN2VmYi0z Yzg3LTgxNmMtNWEyOGQ2MzE3MjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrT1r0ERP4JQpxFpwGK3dVcZdLPFoOYabNIHPU5q22rpLg9HGey3Cp/ OxK5hi4dBBSk8J+3ya/SgaVlJPNAeE4OhFFjQyfHwMmvSsyNH2cxWNgt7KJglf05 YPERf9Yps85aBiTR5EgHnOvMB+0CdAlKbbbY/gTGMKs1IonLnYl6LYrHPX+nPbDf X/P6LDzagDMUitp4TEqNwvdCjLl1QsReQhhoqC6RZBcneTusoS7WSyRcMIF0HU4D TMHwmEpp4sW4lEduRTwyCyneEibocyDsY/Kd+VN5j1GuYUTCkrB4DYPU38Kus4pF X+fUt7Yx9uVsKj5a0N2gBP2Ki37vQSo= -----END CERTIFICATE-----Generated at Tue Oct 27 17:36:08 2026 by rpki-client