$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/23daa862-ec9b-360b-83d6-ba0998ff26cf.roa File: 23daa862-ec9b-360b-83d6-ba0998ff26cf.roa (raw, json) Hash identifier: LiJO6iT5PB5Lxo1mb6Lg0GoEuKvGiardVFFLEYKHu5E= Subject key identifier: EF:38:19:D4:10:7D:F9:E4:72:A7:CF:E1:A6:E8:A3:7A:5A:8B:BB:CB Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584BA0D2504F4CF3FD88130E1300 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/23daa862-ec9b-360b-83d6-ba0998ff26cf.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 20473 IP address blocks: 216.24.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:50:4f:4c:f3:fd:88:13:0e:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=1689cc0e-5976-4d55-ad51-e182f5468ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:c3:bf:d2:0d:dd:d8:a3:76:74:10:0c:d3: 63:d7:52:43:fc:01:d8:cb:b7:6d:96:50:61:c2:df: 3c:d7:9e:95:f1:12:0d:68:b0:05:82:eb:7d:97:44: 5f:2d:77:d9:07:dc:21:10:e8:c4:64:5c:20:1a:91: 2d:95:99:73:5c:28:80:84:a6:64:2f:09:5f:45:6a: 5f:eb:a7:51:cd:20:9a:68:4f:24:88:f4:af:d5:8b: 31:d1:7d:ce:9b:c1:20:f1:29:41:7b:ec:9a:d9:f3: 7a:de:3c:84:81:d1:db:43:20:9b:f0:66:a6:c5:0f: 0d:3e:6a:f1:24:72:36:d6:49:99:8b:60:7c:c6:12: f3:2d:94:6a:ff:44:c1:e5:26:86:bf:9b:8b:89:4a: 84:cd:98:83:1d:3f:8b:03:16:99:ec:8f:73:3f:8e: 71:37:23:6e:25:d2:bd:cc:3b:2c:50:49:9a:dc:a0: 68:42:6e:d2:43:37:35:38:cd:6e:3c:cd:87:ed:99: 75:8b:b6:58:e9:80:c4:b2:5d:07:7d:27:74:18:36: 58:8b:32:5e:38:ab:17:2b:27:e6:77:de:66:6d:fa: 5e:80:4d:66:94:e5:c8:66:54:b1:ee:15:e2:7b:5a: 58:85:4c:60:ff:8e:c9:cc:c1:1e:04:15:a9:cb:2d: 34:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:38:19:D4:10:7D:F9:E4:72:A7:CF:E1:A6:E8:A3:7A:5A:8B:BB:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/23daa862-ec9b-360b-83d6-ba0998ff26cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.24.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:62:63:52:f7:6b:57:98:72:b4:ea:a7:85:f4:8c:1a:14:d3: d3:46:3d:88:d4:30:97:33:17:99:26:be:05:23:2e:05:20:c9: df:72:c5:b2:68:b5:26:33:68:6c:56:10:e8:7f:3e:ca:79:c3: 85:86:41:25:13:95:43:06:bc:05:a3:a5:7f:95:aa:82:bb:1d: 42:aa:e0:20:7a:9e:0b:64:be:fa:ed:44:63:a1:84:8b:ef:d9: 7b:82:82:a8:0f:ee:9a:68:c6:a7:56:5b:d1:d9:a2:0a:11:d5: 30:e1:d9:4d:6c:d4:33:cb:61:69:89:91:43:5a:bf:1e:29:30: d8:51:f2:fa:30:aa:af:2b:a9:3c:08:0a:3e:60:6a:90:9e:2f: a6:d5:a4:1c:59:21:4e:eb:2c:94:e7:f2:08:cb:2c:d3:e7:73: 9e:56:db:c9:81:80:9e:24:0a:4c:2a:9a:1a:0f:24:ef:dc:0c: 97:24:3c:a8:72:80:19:81:10:de:2c:96:72:23:35:b8:f8:86: 27:4f:ec:0b:49:3a:04:52:be:b0:85:82:12:02:b6:9f:00:1d: 8c:76:53:8c:f0:a5:fe:a6:40:98:72:b5:e5:f6:af:f4:83:9f: fe:2f:5c:f3:6d:7a:c9:39:26:8b:a5:00:9c:ca:0a:55:55:d2: 8c:de:45:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lBPTPP9iBMOEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MTY4OWNjMGUtNTk3Ni00ZDU1LWFkNTEtZTE4MmY1NDY4Y2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRrDv9IN3dijdnQQDNNj11JD/AHYy7dtllBh wt88156V8RINaLAFgut9l0RfLXfZB9whEOjEZFwgGpEtlZlzXCiAhKZkLwlfRWpf 66dRzSCaaE8kiPSv1Ysx0X3Om8Eg8SlBe+ya2fN63jyEgdHbQyCb8GamxQ8NPmrx JHI21kmZi2B8xhLzLZRq/0TB5SaGv5uLiUqEzZiDHT+LAxaZ7I9zP45xNyNuJdK9 zDssUEma3KBoQm7SQzc1OM1uPM2H7Zl1i7ZY6YDEsl0HfSd0GDZYizJeOKsXKyfm d95mbfpegE1mlOXIZlSx7hXie1pYhUxg/47JzMEeBBWpyy00bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO84GdQQffnkcqfP4aboo3pai7vLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMjNkYWE4NjItZWM5Yi0z NjBiLTgzZDYtYmEwOTk4ZmYyNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFiY1L3a1eYcrTqp4X0jBoU09NGPYjUMJczF5kmvgUjLgUgyd9yxbJo tSYzaGxWEOh/Psp5w4WGQSUTlUMGvAWjpX+VqoK7HUKq4CB6ngtkvvrtRGOhhIvv 2XuCgqgP7ppoxqdWW9HZogoR1TDh2U1s1DPLYWmJkUNavx4pMNhR8vowqq8rqTwI Cj5gapCeL6bVpBxZIU7rLJTn8gjLLNPnc55W28mBgJ4kCkwqmhoPJO/cDJckPKhy gBmBEN4slnIjNbj4hidP7AtJOgRSvrCFghICtp8AHYx2U4zwpf6mQJhyteX2r/SD n/4vXPNtesk5JoulAJzKClVV0ozeRVE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:04:10 2025 by rpki-client