$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/db03df6a-63f5-3beb-a5ff-ff5c58afda99.roa File: db03df6a-63f5-3beb-a5ff-ff5c58afda99.roa (raw, json) Hash identifier: i7JdVlD/WSM32LHkdhTXRUglBKyeNdXHD+fejCowCSM= Subject key identifier: 15:CE:95:5B:65:A6:6B:88:DE:39:17:AC:87:1B:66:2A:63:D3:AB:97 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584F979DB175C9027430E8573780 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/db03df6a-63f5-3beb-a5ff-ff5c58afda99.roa Signing time: Fri 23 Oct 2026 01:00:12 +0000 ROA not before: Fri 23 Oct 2026 01:00:12 +0000 ROA not after: Thu 21 Jan 2027 02:00:12 +0000 asID: 399839 IP address blocks: 216.24.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:9d:b1:75:c9:02:74:30:e8:57:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Oct 23 01:00:12 2026 GMT Not After : Jan 21 02:00:12 2027 GMT Subject: CN=6b2ed249-ceef-4491-bb8c-cc989eaa4615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b2:36:07:cd:d8:24:2b:95:0b:22:95:77:41: 33:04:fa:27:22:80:07:c6:07:af:c6:45:0d:77:2b: c9:55:a6:07:8b:63:b0:c0:d1:9e:dc:a8:bd:96:cb: cf:35:d0:2d:5f:e2:eb:cc:fc:9a:65:e2:c2:9c:9c: 21:cd:7b:e0:51:9c:ed:eb:92:cc:11:c8:4f:fa:7f: 99:5f:9a:6c:92:2e:fa:c5:cc:a7:13:aa:57:7d:1e: 69:d4:01:4c:6e:17:f9:df:02:ac:ba:d0:44:af:ed: 1e:eb:d1:50:1e:a1:e9:50:fc:70:4a:c5:05:02:f2: aa:57:3e:a6:67:dd:4e:cb:c6:15:fa:aa:9c:fe:e7: b5:31:54:8a:42:53:52:51:00:47:7b:83:1e:ed:12: 1e:98:17:49:b4:05:26:f2:8c:dc:2a:81:2a:9e:2c: a1:14:29:a8:77:d9:3f:3e:22:27:15:9f:48:77:78: 00:2b:7c:99:6c:64:04:5c:eb:eb:ba:b4:89:49:ec: ed:4d:74:92:91:85:c5:51:b5:be:50:64:b6:0f:97: 1f:73:57:1a:56:1a:07:e0:56:50:70:00:c3:08:90: 89:bd:7b:bf:5f:0e:4d:4b:85:c5:e8:29:68:ed:86: 39:35:ae:c1:2e:aa:8f:8f:c4:ad:4a:58:9e:d7:a5: 87:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CE:95:5B:65:A6:6B:88:DE:39:17:AC:87:1B:66:2A:63:D3:AB:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/db03df6a-63f5-3beb-a5ff-ff5c58afda99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.24.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b6:bf:ec:d8:3d:1c:5c:50:93:3e:c7:c6:a9:fe:61:2a:d5: b4:6c:6c:2c:3b:8c:1b:93:c4:da:50:2d:35:6e:7b:20:32:03: 3b:1e:9a:bc:30:cf:45:65:a2:18:af:ad:36:44:58:8c:ee:0a: 4e:a4:79:24:e7:5a:5f:7a:a1:e9:af:c2:b4:37:93:d6:67:b8: fa:4a:a6:fe:8a:47:ff:2c:00:e2:84:84:10:0d:b2:1c:7a:25: ad:1c:7f:34:19:5e:c5:4e:6e:20:8e:2f:6e:39:67:2b:be:a4: c2:42:c3:7c:ce:77:cd:4d:e8:3e:ad:eb:98:dd:66:4f:f1:a8: 24:e6:52:a4:dc:62:55:4d:63:15:64:bb:80:28:88:89:eb:df: 50:67:66:c2:00:3d:2c:9e:70:07:c8:bb:86:5e:23:0d:cc:d7: 88:fd:a5:c5:c6:25:d2:ca:e8:47:8c:07:20:0b:de:8e:94:66: cf:4b:fc:ba:02:e6:12:1b:f6:8b:a3:c5:30:a6:34:09:cf:c8: bd:c2:e3:6c:d2:47:33:93:07:8e:20:d5:46:23:da:83:54:2e: f0:83:2e:06:70:dc:b0:63:6a:40:c2:d0:b5:28:6c:46:39:6a: e8:87:45:a9:41:be:39:c2:79:5f:68:6b:5c:f0:db:a0:a6:10: 7b:d5:39:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+XnbF1yQJ0MOhXN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MTAyMzAxMDAxMloXDTI3MDEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NmIyZWQyNDktY2VlZi00NDkxLWJiOGMtY2M5ODllYWE0NjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rI2B83YJCuVCyKVd0EzBPonIoAHxgevxkUN dyvJVaYHi2OwwNGe3Ki9lsvPNdAtX+LrzPyaZeLCnJwhzXvgUZzt65LMEchP+n+Z X5pski76xcynE6pXfR5p1AFMbhf53wKsutBEr+0e69FQHqHpUPxwSsUFAvKqVz6m Z91Oy8YV+qqc/ue1MVSKQlNSUQBHe4Me7RIemBdJtAUm8ozcKoEqniyhFCmod9k/ PiInFZ9Id3gAK3yZbGQEXOvrurSJSeztTXSSkYXFUbW+UGS2D5cfc1caVhoH4FZQ cADDCJCJvXu/Xw5NS4XF6Clo7YY5Na7BLqqPj8StSlie16WH9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXOlVtlpmuI3jkXrIcbZipj06uXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZGIwM2RmNmEtNjNmNS0z YmViLWE1ZmYtZmY1YzU4YWZkYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+2v+zYPRxcUJM+x8ap/mEq1bRsbCw7jBuTxNpQLTVueyAyAzsemrww z0VlohivrTZEWIzuCk6keSTnWl96oemvwrQ3k9ZnuPpKpv6KR/8sAOKEhBANshx6 Ja0cfzQZXsVObiCOL245Zyu+pMJCw3zOd81N6D6t65jdZk/xqCTmUqTcYlVNYxVk u4AoiInr31BnZsIAPSyecAfIu4ZeIw3M14j9pcXGJdLK6EeMByAL3o6UZs9L/LoC 5hIb9oujxTCmNAnPyL3C42zSRzOTB44g1UYj2oNULvCDLgZw3LBjakDC0LUobEY5 auiHRalBvjnCeV9oa1zw26CmEHvVOck= -----END CERTIFICATE-----Generated at Sun Oct 25 13:47:36 2026 by rpki-client