$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/aec6d3e8-69bf-313b-a751-5f614d2e765e.roa File: aec6d3e8-69bf-313b-a751-5f614d2e765e.roa (raw, json) Hash identifier: tLJAhLBimfJDLDcRsWsakmNUrLV6fOkLP7K5G9vP82Q= Subject key identifier: 50:C9:E5:B3:6E:0E:08:54:9D:05:11:38:BE:C8:40:2D:AC:3F:9F:42 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584D85A90C0189E513DF07E3A7A0 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/aec6d3e8-69bf-313b-a751-5f614d2e765e.roa Signing time: Thu 16 Apr 2026 05:04:42 +0000 ROA not before: Thu 16 Apr 2026 05:04:42 +0000 ROA not after: Wed 15 Jul 2026 05:04:42 +0000 asID: 3503 IP address blocks: 216.24.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:85:a9:0c:01:89:e5:13:df:07:e3:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Apr 16 05:04:42 2026 GMT Not After : Jul 15 05:04:42 2026 GMT Subject: CN=6e8bbd0f-c110-4329-9f8a-14d0a91d9970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:b2:94:80:2d:b5:55:eb:da:cb:5a:99:94: ab:c6:8d:24:49:8c:be:93:0f:15:aa:89:e5:3c:f7: fa:4d:64:a1:22:df:f6:78:30:3b:49:8b:ad:c8:17: 95:3b:73:83:28:77:c4:28:09:f1:36:ba:81:b8:43: 08:f7:86:0d:fa:1d:91:cf:81:c2:f1:36:de:d7:c7: ad:ac:ee:40:fd:97:1a:23:c1:7f:66:f5:8e:74:ef: a2:92:f8:a4:1d:42:39:31:02:98:c1:6d:2a:20:6b: 13:e8:a5:41:6b:0c:eb:50:42:77:6a:ce:de:eb:20: d0:e8:a5:f1:86:b8:2d:2c:5c:02:73:da:ed:79:a7: ca:a5:f8:3d:3a:db:1a:be:14:c4:62:4b:53:af:df: 6a:4c:05:fd:9a:67:ce:32:3c:2b:85:15:9b:76:da: c5:b0:15:a6:aa:43:41:c6:35:81:fc:e2:3b:d6:cf: e2:78:fd:fc:30:06:ad:9c:95:4c:21:24:1d:40:d4: 19:81:40:b0:c1:a5:c2:7d:c6:02:2c:20:1f:53:1f: 91:4f:92:93:41:80:b0:a0:1b:49:70:ca:c1:41:3e: f1:5a:be:df:f3:66:0f:4a:24:71:ec:68:5c:d1:ec: 4f:69:eb:5e:d3:aa:f6:02:17:eb:d2:99:4f:b1:fe: 48:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C9:E5:B3:6E:0E:08:54:9D:05:11:38:BE:C8:40:2D:AC:3F:9F:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/aec6d3e8-69bf-313b-a751-5f614d2e765e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.24.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:70:c2:57:2b:2e:ed:62:44:1c:52:c5:3f:92:14:c8:81:65: 83:1c:27:4d:be:12:a1:53:33:68:8e:5d:78:de:e4:ba:e5:35: cd:93:c7:4f:4d:96:99:3d:3a:51:c2:0e:f1:ed:1b:bb:cb:f9: bf:ce:8e:32:d3:b8:d6:70:8a:26:cf:57:fb:47:3d:e7:ed:62: 75:98:b8:1b:be:48:86:a6:0d:b7:83:2d:2f:e0:2a:49:12:ea: 05:bf:b9:7e:d6:91:82:a0:c8:ee:ba:03:37:66:83:ef:d4:1e: 3c:7a:80:e7:8d:81:af:d3:22:7e:1a:a0:d3:62:08:87:4e:c4: 51:b5:40:89:9d:f5:2b:54:f3:37:6c:21:1d:a1:82:70:1d:0b: 87:08:01:94:74:a9:3c:8a:0d:66:3c:7d:4a:14:33:67:d8:7f: 27:12:6d:bf:78:e6:5c:24:c6:3c:fb:76:4c:b0:cb:65:9d:c8: 33:17:89:b2:7a:fe:e5:15:c0:ad:dc:d6:a1:9b:ff:ad:d9:0a: 77:49:bd:5e:74:42:8c:b3:9a:88:9c:42:6d:05:8e:ac:ee:48: c8:c2:73:ef:2e:72:10:23:28:1e:87:65:0b:4c:1d:1a:f1:3f: 88:a9:88:c6:f4:cc:ae:b3:32:fa:8d:17:8f:62:c8:0c:5e:0b: 7e:cf:48:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2FqQwBieUT3wfjp6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDQxNjA1MDQ0MloXDTI2MDcxNTA1MDQ0MlowLzEtMCsGA1UEAxMk NmU4YmJkMGYtYzExMC00MzI5LTlmOGEtMTRkMGE5MWQ5OTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVWylIAttVXr2stamZSrxo0kSYy+kw8Vqonl PPf6TWShIt/2eDA7SYutyBeVO3ODKHfEKAnxNrqBuEMI94YN+h2Rz4HC8Tbe18et rO5A/ZcaI8F/ZvWOdO+ikvikHUI5MQKYwW0qIGsT6KVBawzrUEJ3as7e6yDQ6KXx hrgtLFwCc9rteafKpfg9OtsavhTEYktTr99qTAX9mmfOMjwrhRWbdtrFsBWmqkNB xjWB/OI71s/ieP38MAatnJVMISQdQNQZgUCwwaXCfcYCLCAfUx+RT5KTQYCwoBtJ cMrBQT7xWr7f82YPSiRx7Ghc0exPaete06r2Ahfr0plPsf5ITwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDJ5bNuDghUnQUROL7IQC2sP59CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYWVjNmQzZTgtNjliZi0z MTNiLWE3NTEtNWY2MTRkMmU3NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxwwlcrLu1iRBxSxT+SFMiBZYMcJ02+EqFTM2iOXXje5LrlNc2Tx09N lpk9OlHCDvHtG7vL+b/OjjLTuNZwiibPV/tHPeftYnWYuBu+SIamDbeDLS/gKkkS 6gW/uX7WkYKgyO66Azdmg+/UHjx6gOeNga/TIn4aoNNiCIdOxFG1QImd9StU8zds IR2hgnAdC4cIAZR0qTyKDWY8fUoUM2fYfycSbb945lwkxjz7dkywy2WdyDMXibJ6 /uUVwK3c1qGb/63ZCndJvV50QoyzmoicQm0FjqzuSMjCc+8uchAjKB6HZQtMHRrx P4ipiMb0zK6zMvqNF49iyAxeC37PSMM= -----END CERTIFICATE-----Generated at Fri Apr 17 13:30:25 2026 by rpki-client