$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/804ef55f-16ef-36d7-851a-f40ec93a302c.roa File: 804ef55f-16ef-36d7-851a-f40ec93a302c.roa (raw, json) Hash identifier: xFJhZR0yTrI6rJT0hxap+z2YDcd7zSpVTIZszTHyaE4= Subject key identifier: A0:C1:C0:37:9C:B0:1A:84:CF:7E:D4:13:2F:16:78:76:E5:87:55:E0 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584B2496CA0239B77018E8778C00 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/804ef55f-16ef-36d7-851a-f40ec93a302c.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 61317 IP address blocks: 216.24.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:ca:02:39:b7:70:18:e8:77:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=861271fb-c8f8-4c10-9191-57dd2880314e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c3:21:4e:e6:09:2a:b9:0c:e1:bb:f0:b1:ae: 56:01:fc:83:01:c7:87:66:18:ac:4a:63:e9:34:0a: dd:74:39:25:f0:ce:e3:61:aa:3b:a2:c5:92:25:1e: 76:f2:a4:a2:a0:8a:b0:3c:69:6f:79:58:d5:c7:77: 70:67:f0:89:49:29:4c:3f:f4:97:cb:d2:91:6d:b0: 6e:5c:ac:f5:a4:f4:5a:b0:9d:76:c8:d2:a4:75:40: 4d:29:a0:21:31:88:20:12:10:32:c0:c1:c3:ae:3c: 61:dd:03:a8:16:12:24:9c:57:05:b9:9f:f7:2b:17: 67:f2:ad:27:e7:e5:b8:f2:f2:19:e0:1c:97:83:b9: 01:dc:eb:ca:ad:19:6f:b9:97:f4:32:41:68:e2:1a: b9:5d:23:c4:75:35:13:33:79:72:25:7f:02:bc:d4: 2a:57:4c:29:ed:82:31:e2:9a:d8:91:5e:f7:7e:d9: 17:14:e9:08:b1:92:c0:e6:6c:75:94:85:d8:b1:ef: ce:5e:fd:31:46:50:6a:59:03:55:9e:ee:27:5b:db: 5a:06:21:fc:13:d0:59:ec:f7:e2:4d:f8:01:ab:ac: b4:fd:ec:39:1a:b6:32:dc:1c:63:d9:c4:c4:28:c4: 44:e7:b2:30:57:b6:ab:09:98:84:1e:1b:cf:9c:30: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C1:C0:37:9C:B0:1A:84:CF:7E:D4:13:2F:16:78:76:E5:87:55:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/804ef55f-16ef-36d7-851a-f40ec93a302c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.24.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b9:14:d4:85:01:59:b0:1f:e1:59:41:0d:0a:86:3a:4f:3b: 47:25:e9:50:d8:cb:c8:96:74:58:e8:ec:8d:73:9b:af:67:54: f0:25:c0:ff:93:1e:49:43:a9:15:83:99:f0:20:4f:49:fe:2d: 5b:50:3d:10:7e:11:9d:3a:ee:eb:da:c4:82:f8:f8:6e:d0:32: 27:57:60:18:d0:af:4f:37:2e:10:9a:2a:c4:9e:ee:d9:1f:cf: 7b:0f:1e:2d:5e:52:61:0e:3d:6d:8c:19:30:4d:c2:84:0b:ac: 83:af:0d:9f:97:d8:21:25:84:fa:be:ab:9e:86:2f:f0:6c:38: c6:c0:9c:c9:c1:d8:34:48:33:9f:a8:34:95:50:5f:51:c0:93: 78:b9:b8:4e:8b:ae:99:fb:d6:40:03:4d:c9:96:cb:bd:7b:c2: 21:1b:1a:38:61:43:f8:8b:1d:1b:08:c4:69:f1:5b:65:95:ff: 80:bc:e2:53:a5:e2:69:87:e6:8c:2d:1c:9a:c6:a7:f8:15:a6: fa:06:5a:8d:31:43:1d:0e:fa:72:f6:ff:e2:bd:d2:53:ac:91: 22:52:74:7b:dc:70:75:5b:b6:03:85:0a:3d:e4:99:3e:a9:02: ac:1b:cd:e8:e4:88:a9:52:9c:3e:52:8c:92:5d:9a:2b:cc:1c: 24:44:af:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsoCObdwGOh3jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ODYxMjcxZmItYzhmOC00YzEwLTkxOTEtNTdkZDI4ODAzMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcMhTuYJKrkM4bvwsa5WAfyDAceHZhisSmPp NArddDkl8M7jYao7osWSJR528qSioIqwPGlveVjVx3dwZ/CJSSlMP/SXy9KRbbBu XKz1pPRasJ12yNKkdUBNKaAhMYggEhAywMHDrjxh3QOoFhIknFcFuZ/3Kxdn8q0n 5+W48vIZ4ByXg7kB3OvKrRlvuZf0MkFo4hq5XSPEdTUTM3lyJX8CvNQqV0wp7YIx 4prYkV73ftkXFOkIsZLA5mx1lIXYse/OXv0xRlBqWQNVnu4nW9taBiH8E9BZ7Pfi TfgBq6y0/ew5GrYy3Bxj2cTEKMRE57IwV7arCZiEHhvPnDDn2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDBwDecsBqEz37UEy8WeHblh1XgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvODA0ZWY1NWYtMTZlZi0z NmQ3LTg1MWEtZjQwZWM5M2EzMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC25FNSFAVmwH+FZQQ0KhjpPO0cl6VDYy8iWdFjo7I1zm69nVPAlwP+T HklDqRWDmfAgT0n+LVtQPRB+EZ067uvaxIL4+G7QMidXYBjQr083LhCaKsSe7tkf z3sPHi1eUmEOPW2MGTBNwoQLrIOvDZ+X2CElhPq+q56GL/BsOMbAnMnB2DRIM5+o NJVQX1HAk3i5uE6Lrpn71kADTcmWy717wiEbGjhhQ/iLHRsIxGnxW2WV/4C84lOl 4mmH5owtHJrGp/gVpvoGWo0xQx0O+nL2/+K90lOskSJSdHvccHVbtgOFCj3kmT6p AqwbzejkiKlSnD5SjJJdmivMHCRErz0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:38:51 2025 by rpki-client