$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/54a4b509-5d06-38d4-9ca8-39416123a460.roa File: 54a4b509-5d06-38d4-9ca8-39416123a460.roa (raw, json) Hash identifier: 9aZAR/glzV3NWVhcBXCtyRWY+yK2A/CF4j+TbL+PKd8= Subject key identifier: 38:43:A5:8C:24:3A:4B:B2:8B:6F:32:9F:18:77:D6:3D:44:FF:00:11 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584F4974475246A21A950BBDFEB8 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/54a4b509-5d06-38d4-9ca8-39416123a460.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3503 IP address blocks: 216.24.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:47:52:46:a2:1a:95:0b:bd:fe:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bfe9d7ba-c0e3-4b97-8e83-e4941a93c236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:74:ae:c4:09:3a:09:20:97:4b:28:3d:a0: 84:17:5e:7e:cd:63:44:ba:da:e0:15:73:72:f5:b1: 26:e3:67:0f:fa:f9:13:44:8d:67:32:2a:4c:1b:da: e7:73:04:c3:f9:21:71:fb:66:48:37:60:e7:ab:a6: e4:fb:62:a3:f6:ee:22:7e:bf:b7:f3:bf:4f:86:53: 9f:40:af:da:56:45:fc:dc:a9:9c:d3:e4:a5:19:83: 8d:86:85:8b:04:d0:d4:e2:df:19:1f:58:cf:85:5a: 98:3e:eb:e6:f2:59:84:90:d8:4c:50:07:b6:10:06: c8:c7:48:4c:c4:1d:b2:41:ef:5a:d0:e7:06:13:24: 73:a7:a5:d6:7e:1d:5f:50:9d:ed:a2:63:3b:18:58: 1e:47:c5:b6:09:e6:82:39:50:1b:df:f5:8a:90:a4: aa:95:32:dd:41:e6:8d:08:b6:96:ab:74:bf:03:bd: 9b:a5:12:9d:a7:29:e8:d6:9c:43:c0:d6:f9:8b:b5: b0:8c:05:29:56:69:8f:09:26:58:5f:b7:c9:7e:ce: 5d:88:e9:10:ed:4e:27:df:40:3d:1b:be:ae:c6:57: cd:1c:01:02:e9:3a:bb:ee:9c:00:b1:c7:1d:14:5b: 04:d8:88:7b:75:59:6b:c5:ae:45:ea:37:71:e1:19: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:43:A5:8C:24:3A:4B:B2:8B:6F:32:9F:18:77:D6:3D:44:FF:00:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/54a4b509-5d06-38d4-9ca8-39416123a460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.24.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:53:fa:5a:e3:be:b1:6a:64:c9:5f:ed:87:fd:09:bf:4f:ea: dd:c4:b2:fd:7b:ab:26:f6:91:85:6f:cf:49:7d:9a:e0:f2:d4: c7:e7:06:ef:32:57:c9:5e:cc:19:f3:b7:1a:f7:43:bb:a6:a4: a1:65:7e:a6:33:5b:89:9f:c0:e7:0a:0f:47:e9:03:05:0e:ac: d1:17:82:0e:fd:26:95:69:95:fb:99:2b:b3:a1:3e:bb:1d:a6: 69:e0:ad:ae:2c:62:89:51:91:f7:66:28:45:79:c8:57:d0:e3: 78:8e:21:11:71:e8:1a:22:fb:51:4c:64:1f:e1:91:e6:49:b2: f8:e0:0d:34:87:cf:c7:8c:6d:b8:89:96:00:1b:84:e1:65:5a: 83:e1:f5:d4:da:05:81:cf:ca:27:cd:00:54:95:7d:67:f4:ec: 3a:88:d3:cb:68:c6:7e:a1:33:d7:f1:4c:f6:c1:36:46:0d:11: 92:3f:cf:3d:c2:8d:77:79:23:5b:74:2f:88:93:ac:75:b8:13: a5:a7:9b:fe:2e:74:f3:c9:9b:60:e0:a2:fc:a7:78:ee:0c:88: ee:85:39:ec:72:e8:6b:ab:82:28:82:e7:c4:13:97:3c:59:22: 67:5d:8d:9c:d6:b4:d9:51:95:c3:a3:13:28:5e:98:2e:2e:e6: 7c:80:da:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdEdSRqIalQu9/rgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmZlOWQ3YmEtYzBlMy00Yjk3LThlODMtZTQ5NDFhOTNjMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso90rsQJOgkgl0soPaCEF15+zWNEutrgFXNy 9bEm42cP+vkTRI1nMipMG9rncwTD+SFx+2ZIN2Dnq6bk+2Kj9u4ifr+3879PhlOf QK/aVkX83Kmc0+SlGYONhoWLBNDU4t8ZH1jPhVqYPuvm8lmEkNhMUAe2EAbIx0hM xB2yQe9a0OcGEyRzp6XWfh1fUJ3tomM7GFgeR8W2CeaCOVAb3/WKkKSqlTLdQeaN CLaWq3S/A72bpRKdpyno1pxDwNb5i7WwjAUpVmmPCSZYX7fJfs5diOkQ7U4n30A9 G76uxlfNHAEC6Tq77pwAsccdFFsE2Ih7dVlrxa5F6jdx4RnJ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhDpYwkOkuyi28ynxh31j1E/wARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNTRhNGI1MDktNWQwNi0z OGQ0LTljYTgtMzk0MTYxMjNhNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxT+lrjvrFqZMlf7Yf9Cb9P6t3Esv17qyb2kYVvz0l9muDy1MfnBu8y V8lezBnztxr3Q7umpKFlfqYzW4mfwOcKD0fpAwUOrNEXgg79JpVplfuZK7OhPrsd pmngra4sYolRkfdmKEV5yFfQ43iOIRFx6Boi+1FMZB/hkeZJsvjgDTSHz8eMbbiJ lgAbhOFlWoPh9dTaBYHPyifNAFSVfWf07DqI08toxn6hM9fxTPbBNkYNEZI/zz3C jXd5I1t0L4iTrHW4E6Wnm/4udPPJm2DgovyneO4MiO6FOexy6GurgiiC58QTlzxZ ImddjZzWtNlRlcOjEyhemC4u5nyA2so= -----END CERTIFICATE-----Generated at Thu Oct 8 19:26:46 2026 by rpki-client