$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4070b2b1-0b7c-3020-81b7-e686351002d0.roa File: 4070b2b1-0b7c-3020-81b7-e686351002d0.roa (raw, json) Hash identifier: +wqY1FcrL8JvArsp7vmBlXKyaa76VH1w3BRsh0oLgEw= Subject key identifier: 20:34:BA:37:3A:72:B9:AA:C0:30:C2:35:98:81:B5:69:75:53:7D:EA Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584F15CCEFDF4CECBCB989FD6880 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4070b2b1-0b7c-3020-81b7-e686351002d0.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 48925 IP address blocks: 217.20.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:ef:df:4c:ec:bc:b9:89:fd:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=72856160-cf12-4719-a016-b1c960b0695b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:89:e1:fd:f5:f0:00:27:95:03:5b:08:d3: 02:1a:90:ac:86:1a:99:48:d4:85:23:87:16:ec:98: d1:13:96:55:14:a2:92:9d:74:54:b6:9e:7a:2b:4d: bf:b8:c4:6e:d0:3a:d9:60:63:b5:35:3b:e5:19:96: b7:33:c4:f0:23:e3:9b:ad:4e:db:88:73:96:4e:d3: c1:07:74:a2:e2:d7:c3:73:23:52:d9:79:18:ce:dc: 55:be:86:e6:23:0d:16:9f:48:fc:43:08:bb:4c:e8: d9:86:23:70:3b:0d:3c:51:a4:88:2e:b7:9a:a0:59: 2d:44:63:9f:02:39:12:03:a1:ae:29:16:08:6b:4a: c2:a6:c6:3c:bf:5e:fe:a9:43:b1:65:35:3f:db:ed: 88:82:3b:49:9d:f0:0e:ec:18:3b:16:ab:cb:a0:75: f8:b3:63:c4:63:7f:a1:ca:d4:c0:7a:c3:af:6e:63: d9:68:0e:e8:ee:e6:b9:88:d2:72:2b:ba:d3:af:29: f0:b9:62:e9:76:36:3b:6d:9d:4c:8c:26:ac:73:3b: 49:84:1a:2b:64:00:3d:50:86:ae:21:1c:28:5a:07: bf:53:7b:82:4b:3c:6f:93:15:65:6e:34:69:bc:92: bf:35:01:34:32:4c:80:4b:66:1a:3e:c7:dd:69:e6: b4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:34:BA:37:3A:72:B9:AA:C0:30:C2:35:98:81:B5:69:75:53:7D:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4070b2b1-0b7c-3020-81b7-e686351002d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 217.20.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:12:06:21:83:b0:95:91:72:08:79:b7:1a:49:5e:48:db:c8: 7c:36:69:cb:54:67:24:d3:8b:0c:39:48:87:dc:40:03:fc:85: 66:5a:01:d0:40:47:a4:d9:fb:85:0c:c1:bf:3a:ec:70:73:18: b0:aa:c3:95:ca:e1:c3:b9:11:9a:5b:15:9f:ef:c4:29:23:50: 09:81:aa:89:75:f5:97:b6:48:a4:b6:5b:d7:54:7f:a0:2b:1b: b9:05:e5:f4:75:f0:2a:e5:36:98:4e:af:5b:8e:2f:61:01:5c: 41:35:ea:38:cd:c0:0c:63:c6:e0:27:55:47:27:38:ea:30:ae: b3:fa:ee:2c:56:ff:96:dd:81:0f:b4:b8:c5:f1:30:c2:40:3a: 89:ff:ac:34:51:59:6c:ea:4e:96:a4:d7:f8:e5:d1:61:06:b3: f9:1d:f6:75:fe:ff:a0:00:c8:99:e7:62:50:41:9e:0e:ae:1d: e4:c2:c1:d4:c9:82:60:db:ae:56:e0:28:4a:6c:76:81:c4:d7: 78:a2:9e:a3:61:c4:15:b6:66:a0:9d:32:dc:18:ae:a6:48:69: 1c:1e:24:3d:87:a2:1b:53:0a:dc:2c:8b:7a:06:0c:30:d4:a4: a3:96:44:42:14:b3:8b:0e:20:a6:0d:77:c7:1b:74:3d:4f:0d: 4c:6a:c0:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzO/fTOy8uYn9aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk NzI4NTYxNjAtY2YxMi00NzE5LWEwMTYtYjFjOTYwYjA2OTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2iJ4f318AAnlQNbCNMCGpCshhqZSNSFI4cW 7JjRE5ZVFKKSnXRUtp56K02/uMRu0DrZYGO1NTvlGZa3M8TwI+ObrU7biHOWTtPB B3Si4tfDcyNS2XkYztxVvobmIw0Wn0j8Qwi7TOjZhiNwOw08UaSILreaoFktRGOf AjkSA6GuKRYIa0rCpsY8v17+qUOxZTU/2+2IgjtJnfAO7Bg7FqvLoHX4s2PEY3+h ytTAesOvbmPZaA7o7ua5iNJyK7rTrynwuWLpdjY7bZ1MjCascztJhBorZAA9UIau IRwoWge/U3uCSzxvkxVlbjRpvJK/NQE0MkyAS2YaPsfdaea0fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA0ujc6crmqwDDCNZiBtWl1U33qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNDA3MGIyYjEtMGI3Yy0z MDIwLTgxYjctZTY4NjM1MTAwMmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RTyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgSBiGDsJWRcgh5txpJXkjbyHw2actUZyTTiww5SIfcQAP8hWZaAdBA R6TZ+4UMwb867HBzGLCqw5XK4cO5EZpbFZ/vxCkjUAmBqol19Ze2SKS2W9dUf6Ar G7kF5fR18CrlNphOr1uOL2EBXEE16jjNwAxjxuAnVUcnOOowrrP67ixW/5bdgQ+0 uMXxMMJAOon/rDRRWWzqTpak1/jl0WEGs/kd9nX+/6AAyJnnYlBBng6uHeTCwdTJ gmDbrlbgKEpsdoHE13iinqNhxBW2ZqCdMtwYrqZIaRweJD2HohtTCtwsi3oGDDDU pKOWREIUs4sOIKYNd8cbdD1PDUxqwFQ= -----END CERTIFICATE-----Generated at Sun Sep 27 06:45:47 2026 by rpki-client