$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/00344ee4-c036-3a65-84db-9184ba4ec639.roa File: 00344ee4-c036-3a65-84db-9184ba4ec639.roa (raw, json) Hash identifier: vEei4hbOM3GsXj+atKQA8osgV+oQigbohTMeMSx5Kzs= Subject key identifier: E6:B8:FC:5C:4E:CC:F4:DB:02:B3:19:07:23:2B:4C:37:F8:C1:82:3F Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B77543FD94FA90ED83E0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/00344ee4-c036-3a65-84db-9184ba4ec639.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 64.16.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b7:75:43:fd:94:fa:90:ed:83:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=4dc71f4c-251a-4b87-b32e-24263b2686af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:22:e8:fc:ef:de:5d:c6:5d:bd:ac:20:ef:a7: 7f:be:ee:92:15:12:3d:b8:5b:cf:ab:f1:e3:de:7f: 34:b0:18:02:b0:2e:69:34:23:a2:6d:b7:80:b5:89: 64:f2:99:b8:66:41:28:40:71:60:cb:ed:21:fc:5d: 84:7f:f6:89:d2:eb:2c:69:5f:28:bf:38:5b:90:bc: e5:09:1e:49:c7:b4:b1:f2:c1:05:9b:f1:d3:d8:66: ca:06:cc:6b:3b:07:ab:80:ec:ad:c7:d4:69:e4:6f: 93:29:7b:77:b7:50:d4:73:97:82:0f:5a:ed:49:0d: ce:04:f2:f3:16:22:0f:9d:0b:4b:a5:d2:f6:cc:d5: ae:d0:10:4c:fb:e7:b1:4e:62:37:57:99:8c:9e:c8: f6:3d:63:c4:4d:3c:9c:7f:54:6a:6d:21:ac:ae:09: 1b:8f:09:da:74:a3:aa:9c:a5:ca:1c:fb:f2:3e:12: 5c:1e:6b:91:bb:72:fb:29:05:8b:44:4b:d4:fc:69: 9a:ce:e8:0e:d2:55:3c:48:14:f7:32:11:7f:71:30: 8d:01:15:c9:d3:74:db:30:47:e4:c4:6f:ec:b3:35: 26:4b:20:54:3a:f3:4c:5b:50:74:23:46:d5:78:89: 29:fb:5b:49:88:32:22:11:39:e1:9e:86:91:db:9f: 51:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B8:FC:5C:4E:CC:F4:DB:02:B3:19:07:23:2B:4C:37:F8:C1:82:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/00344ee4-c036-3a65-84db-9184ba4ec639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:53:a4:4c:d9:5c:b9:8c:36:84:5f:3a:9f:3a:87:96:df:4c: 78:7e:f9:fd:80:04:d3:3f:67:a3:58:e7:5a:09:3a:ed:8f:2d: f4:d8:6e:4f:63:29:e3:5f:89:3a:a8:09:53:0b:33:b5:48:30: 21:72:10:ea:49:3a:56:69:2f:8f:45:d6:b4:a8:a1:36:1a:5c: 0d:d3:dc:14:5d:b1:95:35:84:56:cd:93:5f:52:f6:89:7e:16: 25:4e:74:2c:d1:77:2b:3e:67:eb:dc:63:59:8b:42:0c:a0:0a: dc:06:27:b2:48:d1:da:33:da:c8:86:2b:de:96:04:d0:92:35: 63:16:03:6e:d2:a9:f9:35:c9:05:fa:06:54:99:0c:99:00:8b: 5c:24:46:d7:b3:60:d2:b3:b8:3a:cc:df:56:18:a3:5c:40:14: a4:4f:3a:47:f9:9d:88:3a:2e:0c:aa:3d:52:6a:0e:2a:42:b7: bd:e9:cb:d9:f1:26:f6:4b:21:89:14:ab:2c:20:62:03:2a:0e: e1:e8:a1:ad:ce:79:f0:a5:e4:9d:5f:e6:ba:1f:32:f9:dd:03: a5:db:3f:c5:8d:ee:14:7f:c5:94:f6:ed:cb:38:8b:af:e3:64: 22:9c:ee:0b:8c:7d:6d:dd:e7:83:e2:c3:49:90:1a:07:31:44: da:b1:f8:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97d1Q/2U+pDtg+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NGRjNzFmNGMtMjUxYS00Yjg3LWIzMmUtMjQyNjNiMjY4NmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyLo/O/eXcZdvawg76d/vu6SFRI9uFvPq/Hj 3n80sBgCsC5pNCOibbeAtYlk8pm4ZkEoQHFgy+0h/F2Ef/aJ0ussaV8ovzhbkLzl CR5Jx7Sx8sEFm/HT2GbKBsxrOwergOytx9Rp5G+TKXt3t1DUc5eCD1rtSQ3OBPLz FiIPnQtLpdL2zNWu0BBM++exTmI3V5mMnsj2PWPETTycf1RqbSGsrgkbjwnadKOq nKXKHPvyPhJcHmuRu3L7KQWLREvU/GmazugO0lU8SBT3MhF/cTCNARXJ03TbMEfk xG/sszUmSyBUOvNMW1B0I0bVeIkp+1tJiDIiETnhnoaR259RgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOa4/FxOzPTbArMZByMrTDf4wYI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMDAzNDRlZTQtYzAzNi0z YTY1LTg0ZGItOTE4NGJhNGVjNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJTpEzZXLmMNoRfOp86h5bfTHh++f2ABNM/Z6NY51oJOu2PLfTYbk9j KeNfiTqoCVMLM7VIMCFyEOpJOlZpL49F1rSooTYaXA3T3BRdsZU1hFbNk19S9ol+ FiVOdCzRdys+Z+vcY1mLQgygCtwGJ7JI0doz2siGK96WBNCSNWMWA27Sqfk1yQX6 BlSZDJkAi1wkRtezYNKzuDrM31YYo1xAFKRPOkf5nYg6LgyqPVJqDipCt73py9nx JvZLIYkUqywgYgMqDuHooa3OefCl5J1f5rofMvndA6XbP8WN7hR/xZT27cs4i6/j ZCKc7guMfW3d54Piw0mQGgcxRNqx+C0= -----END CERTIFICATE-----Generated at Sun Sep 27 04:04:19 2026 by rpki-client