$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b0af857f-33c3-32a0-9e32-f2b6e0088900.roa File: b0af857f-33c3-32a0-9e32-f2b6e0088900.roa (raw, json) Hash identifier: gjrHPAaK4aQLswzz8lNRJ09H1TrksztXi2dMd+jNJRo= Subject key identifier: 26:71:D2:6D:AD:9C:01:13:EC:C9:88:17:58:B4:42:F2:80:12:D6:48 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584F497413C8AA88C0CB8CC2B200 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b0af857f-33c3-32a0-9e32-f2b6e0088900.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19437 IP address blocks: 216.24.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:13:c8:aa:88:c0:cb:8c:c2:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b39d75bf-9099-4135-8f2a-2f990ef8bea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:00:20:5e:78:0d:e9:51:a0:17:08:8f:95:e6: 76:38:bc:08:ba:21:c1:65:49:4b:b5:92:f9:5c:1b: a8:27:a5:df:0c:01:f1:47:2d:af:cc:2e:29:76:b2: 8f:92:5e:b8:be:a0:7e:13:c7:e0:34:28:67:ee:0c: c3:d3:8b:f0:cb:6c:96:97:bc:8e:78:5e:8c:ba:40: 38:e6:8d:3e:ed:a9:26:f0:40:6f:42:cc:13:6f:65: 8c:4f:14:44:36:1c:4f:0f:9a:d1:df:a3:cd:07:82: 92:61:3c:08:b1:7c:c0:0b:6f:12:2a:38:84:21:d7: 17:ba:92:0b:b5:29:97:5a:1b:e4:b3:10:99:91:bc: 8b:12:fe:26:92:cd:a6:46:b4:48:eb:6a:30:32:57: ab:7b:05:2b:f0:03:db:f6:91:31:47:2a:94:e1:e7: 10:a6:0a:15:0b:fe:d4:b3:bc:40:e0:d0:11:e2:85: 07:a3:8e:32:18:9d:b4:e4:26:65:fe:9d:4d:00:86: 09:d9:a3:3e:22:ea:3e:9f:60:c0:c8:0e:2c:da:e6: d1:5d:49:16:17:c0:d6:43:06:ce:41:64:bc:16:ea: c6:34:d7:fb:fe:42:e6:11:5c:38:fe:ee:7d:8b:59: 09:43:4e:e5:de:b1:f3:09:e0:ab:17:ed:d7:15:f3: 27:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:71:D2:6D:AD:9C:01:13:EC:C9:88:17:58:B4:42:F2:80:12:D6:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b0af857f-33c3-32a0-9e32-f2b6e0088900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.24.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:aa:98:29:71:cc:c2:de:f3:65:fc:8e:a2:15:fd:a0:42:29: 61:06:54:25:28:62:1c:f5:0e:5e:fc:eb:df:9e:9f:a3:9c:15: 1b:3b:a4:9f:83:8b:2e:3c:d6:17:d0:8e:79:4b:43:d6:e4:2d: 7a:8a:4c:57:6e:ef:98:7a:cd:a1:3e:f1:62:43:69:e2:3b:b1: e1:fc:3f:76:92:4e:48:46:6b:62:b4:29:b6:ff:37:a3:51:b1: a0:da:9a:1a:58:13:8d:61:d4:4e:72:df:fb:ed:c0:5e:93:5f: ef:e8:64:05:2d:71:6c:5e:ff:6b:55:ad:2f:2e:d7:00:83:6b: ec:ef:5e:de:11:9b:71:2b:d1:1d:d8:be:8f:8d:b9:f0:7d:8a: 62:81:28:af:d8:30:db:05:c0:7f:16:6d:fa:d9:cb:16:3f:6e: 02:24:82:15:29:98:38:58:4e:b6:c3:50:83:14:df:bd:40:30: 4c:75:c9:e5:21:2b:23:39:41:e3:23:58:8a:1b:82:13:eb:96: 59:f3:bb:6e:ed:2d:05:b3:48:92:74:ec:f4:6e:41:2f:c9:30: 9c:81:44:54:95:37:34:8b:b8:b7:0b:93:2f:98:b8:2a:2a:89: b0:4b:cf:eb:8a:88:a2:9e:57:d7:3a:e8:d0:db:11:aa:dc:28: 59:68:2c:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBPIqojAy4zCsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjM5ZDc1YmYtOTA5OS00MTM1LThmMmEtMmY5OTBlZjhiZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQAgXngN6VGgFwiPleZ2OLwIuiHBZUlLtZL5 XBuoJ6XfDAHxRy2vzC4pdrKPkl64vqB+E8fgNChn7gzD04vwy2yWl7yOeF6MukA4 5o0+7akm8EBvQswTb2WMTxRENhxPD5rR36PNB4KSYTwIsXzAC28SKjiEIdcXupIL tSmXWhvksxCZkbyLEv4mks2mRrRI62owMlerewUr8APb9pExRyqU4ecQpgoVC/7U s7xA4NAR4oUHo44yGJ205CZl/p1NAIYJ2aM+Iuo+n2DAyA4s2ubRXUkWF8DWQwbO QWS8FurGNNf7/kLmEVw4/u59i1kJQ07l3rHzCeCrF+3XFfMnrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZx0m2tnAET7MmIF1i0QvKAEtZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYjBhZjg1N2YtMzNjMy0z MmEwLTllMzItZjJiNmUwMDg4OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2qmClxzMLe82X8jqIV/aBCKWEGVCUoYhz1Dl7869+en6OcFRs7pJ+D iy481hfQjnlLQ9bkLXqKTFdu75h6zaE+8WJDaeI7seH8P3aSTkhGa2K0Kbb/N6NR saDamhpYE41h1E5y3/vtwF6TX+/oZAUtcWxe/2tVrS8u1wCDa+zvXt4Rm3Er0R3Y vo+NufB9imKBKK/YMNsFwH8WbfrZyxY/bgIkghUpmDhYTrbDUIMU371AMEx1yeUh KyM5QeMjWIobghPrllnzu27tLQWzSJJ07PRuQS/JMJyBRFSVNzSLuLcLky+YuCoq ibBLz+uKiKKeV9c66NDbEarcKFloLB4= -----END CERTIFICATE-----Generated at Mon Oct 12 19:39:51 2026 by rpki-client