$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/aafd7741-2bae-302f-8e07-d3cbfecf336c.roa File: aafd7741-2bae-302f-8e07-d3cbfecf336c.roa (raw, json) Hash identifier: aS3T/ua+YAz9t3O/br/93NCIENevqJKhvQ4Ka1zi+a8= Subject key identifier: 32:00:90:49:C8:50:55:62:BE:28:DC:E5:0D:8C:EA:48:44:CE:3D:95 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584F3FAD219B4F5E30425920BD80 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/aafd7741-2bae-302f-8e07-d3cbfecf336c.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 399138 IP address blocks: 216.24.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:21:9b:4f:5e:30:42:59:20:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=f1c980d0-3b8a-4374-adf3-4eaedfa53ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:eb:c1:90:0a:17:e7:74:90:16:9e:e3:74: 7d:2d:7d:1c:bc:c2:d0:86:70:a9:fb:33:75:05:4f: 50:65:81:5f:32:40:21:9a:5c:0a:6c:ff:b0:62:5c: e5:ce:95:d5:f4:38:5b:e1:1e:7f:0d:b7:93:82:a4: 6a:eb:03:9c:e5:b6:b7:f8:8d:fe:52:7e:ab:21:1e: e6:b5:20:58:58:86:c9:99:e9:90:54:65:66:e0:b7: ae:34:fb:87:9d:9e:86:69:22:c2:f6:96:3f:16:29: 00:1e:5c:4c:89:5d:94:d2:25:76:15:a7:ac:25:95: 8b:93:8b:5e:a5:76:7c:cc:cf:87:77:fb:ed:51:0d: e1:ce:f3:d4:c0:70:29:04:91:da:c0:55:cf:bd:da: d9:0a:ec:b9:48:58:83:d1:20:cb:f5:2f:5c:65:3d: 9a:e9:8d:83:bd:20:55:4b:62:da:4b:c8:a7:d2:39: 53:35:7a:12:17:3f:9f:71:7c:c9:1b:f5:15:fc:2b: 78:35:27:13:fd:f8:4a:2c:aa:4d:c2:92:3b:4c:39: 3d:87:23:cf:c5:b4:e6:c4:c8:99:d6:fc:ac:1a:15: eb:5c:5f:4a:9d:82:18:b2:b9:ea:e6:63:ef:8b:d1: 2b:3d:b5:62:54:23:7d:c8:80:7f:c2:4d:2a:1c:9f: 53:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:00:90:49:C8:50:55:62:BE:28:DC:E5:0D:8C:EA:48:44:CE:3D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/aafd7741-2bae-302f-8e07-d3cbfecf336c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.24.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:47:8b:cc:8e:60:34:28:c8:6d:41:58:0d:ea:eb:5e:8b:ce: 82:3b:92:50:7d:b8:7f:5e:51:fe:6d:ac:3c:a8:4e:ed:2b:40: 39:c2:12:60:b9:29:bf:d6:e5:c3:31:58:d8:a9:dc:39:76:ef: 0e:0f:7a:40:6e:bc:0d:52:0e:fb:fe:3f:76:f4:3f:99:6c:3b: 82:24:d1:c6:ae:3a:db:27:37:7f:a3:5e:c9:07:b4:bf:9b:f7: 04:83:11:ec:b6:ea:f2:3e:0b:11:e1:16:26:c1:8d:05:35:02: 7d:a2:48:94:54:a3:5e:6c:c7:b6:25:0f:b9:91:2d:e4:d5:f4: d1:87:0e:6b:00:2e:02:31:69:63:ff:6e:70:ee:ac:8b:cf:c5: 8b:ba:ab:d7:ba:3c:f9:26:34:ad:ab:5f:c2:80:fc:3e:46:0c: 63:ba:3e:b1:da:59:a0:29:4d:a7:23:d7:e8:5f:b9:a1:af:3a: 4c:16:ad:7d:1e:29:bd:6b:0b:24:fe:9a:11:a5:11:67:2b:6b: 8f:23:c1:e2:74:8a:02:be:13:9e:26:ee:53:d1:2c:ba:85:05: 58:60:44:6f:62:35:0e:32:df:a7:02:e0:7c:f2:ef:76:02:fe: 66:70:66:43:e4:26:c5:dc:8b:92:84:cd:44:06:98:24:a4:58: 52:83:f4:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSGbT14wQlkgvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZjFjOTgwZDAtM2I4YS00Mzc0LWFkZjMtNGVhZWRmYTUzYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqXrwZAKF+d0kBae43R9LX0cvMLQhnCp+zN1 BU9QZYFfMkAhmlwKbP+wYlzlzpXV9Dhb4R5/DbeTgqRq6wOc5ba3+I3+Un6rIR7m tSBYWIbJmemQVGVm4LeuNPuHnZ6GaSLC9pY/FikAHlxMiV2U0iV2FaesJZWLk4te pXZ8zM+Hd/vtUQ3hzvPUwHApBJHawFXPvdrZCuy5SFiD0SDL9S9cZT2a6Y2DvSBV S2LaS8in0jlTNXoSFz+fcXzJG/UV/Ct4NScT/fhKLKpNwpI7TDk9hyPPxbTmxMiZ 1vysGhXrXF9KnYIYsrnq5mPvi9ErPbViVCN9yIB/wk0qHJ9TTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIAkEnIUFVivijc5Q2M6khEzj2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYWFmZDc3NDEtMmJhZS0z MDJmLThlMDctZDNjYmZlY2YzMzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtHi8yOYDQoyG1BWA3q616LzoI7klB9uH9eUf5trDyoTu0rQDnCEmC5 Kb/W5cMxWNip3Dl27w4PekBuvA1SDvv+P3b0P5lsO4Ik0cauOtsnN3+jXskHtL+b 9wSDEey26vI+CxHhFibBjQU1An2iSJRUo15sx7YlD7mRLeTV9NGHDmsALgIxaWP/ bnDurIvPxYu6q9e6PPkmNK2rX8KA/D5GDGO6PrHaWaApTacj1+hfuaGvOkwWrX0e Kb1rCyT+mhGlEWcra48jweJ0igK+E54m7lPRLLqFBVhgRG9iNQ4y36cC4Hzy73YC /mZwZkPkJsXci5KEzUQGmCSkWFKD9GQ= -----END CERTIFICATE-----Generated at Thu Sep 24 17:44:08 2026 by rpki-client