$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1351aab4-c24b-3671-9b9f-9fe1e5982c34.roa File: 1351aab4-c24b-3671-9b9f-9fe1e5982c34.roa (raw, json) Hash identifier: mCbM9SYS8qSrg81t7A627+TlQTMMrnlKEtEFIfn5eI8= Subject key identifier: 3E:20:1F:3B:8F:BE:D5:0F:43:DD:02:17:24:86:EF:F3:4F:39:BB:6E Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B64B2270C1B12AAB7E80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1351aab4-c24b-3671-9b9f-9fe1e5982c34.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b6:4b:22:70:c1:b1:2a:ab:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=a090d250-5ab7-4e94-a960-4713f4b5a8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:61:bb:60:9d:51:0a:3c:de:4e:a7:a6:1e: e0:ad:84:70:b2:f4:4c:c6:96:00:b6:47:a7:80:1e: 51:cf:0b:62:72:ac:0d:24:c6:e9:b9:bb:ff:b6:d6: b9:92:c4:95:bd:6d:d9:eb:ce:44:31:15:79:81:f0: 41:b5:5e:5b:77:2e:56:cd:d3:87:6e:04:a4:ac:38: d6:ff:3d:cf:7f:93:06:cc:65:55:88:ae:93:07:24: ef:c8:2a:80:86:28:86:24:47:c8:87:c6:fd:b3:b3: 83:94:c4:cb:97:45:b8:9c:c7:92:1f:93:4b:d6:37: ce:ed:69:fe:95:f0:3d:90:92:32:d2:af:17:c5:2c: 72:58:ce:a2:92:fc:06:f4:fb:d1:f3:2b:51:cd:e8: 91:37:00:8b:85:74:46:7c:d2:4d:27:4b:99:6e:ce: 4e:b9:a2:36:de:cf:7a:cb:da:98:18:d2:ab:ca:d8: 2e:01:37:67:26:a7:42:15:61:20:5c:16:70:ec:cf: 98:8e:82:3f:80:04:cb:6e:79:a3:6d:0e:19:f0:56: 26:09:bc:91:df:c5:1e:2d:09:7e:89:81:56:7b:de: da:43:c8:87:a2:5d:18:5c:b3:78:52:ca:fe:f7:f2: f6:d8:4b:13:f0:df:3d:f1:3f:57:2b:18:54:03:73: 92:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:20:1F:3B:8F:BE:D5:0F:43:DD:02:17:24:86:EF:F3:4F:39:BB:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1351aab4-c24b-3671-9b9f-9fe1e5982c34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e2:2e:cc:1f:49:07:e4:22:64:09:57:85:21:32:f1:f6:01: bb:24:60:59:ed:20:de:34:3a:a8:af:79:8b:75:70:54:9d:ee: 75:5a:ca:db:4a:87:b6:ae:30:d6:26:b9:73:1c:cc:82:15:6c: de:22:83:c4:fb:e2:ad:01:2f:7c:eb:88:8c:44:11:3a:03:9d: 79:69:a1:e4:9d:fc:7d:51:74:bb:c6:40:f4:e9:ec:d4:5b:48: 2d:3e:89:32:cb:fe:03:db:0e:b2:af:49:b0:b7:c3:8a:d2:ff: 7e:ec:ad:40:3a:d6:52:79:5b:96:f7:a2:d4:73:37:5b:be:fe: b6:48:0e:43:45:f1:6d:6b:ba:11:3a:c5:c9:3d:c2:a0:7e:27: b8:b6:d9:9f:1a:d6:73:1f:ae:a2:66:72:cc:70:57:df:ca:ef: ad:99:04:c7:98:bb:3e:48:07:d4:bb:47:bb:61:10:d3:9a:f3: ac:14:64:67:b7:1c:bd:ec:f8:0c:4d:9f:b9:9a:2b:1d:a6:ff: 55:b0:3f:b8:88:0b:54:78:ab:b7:04:2d:68:fd:9a:5e:ab:be: f1:c2:33:e6:4c:f6:61:49:c0:92:0b:6b:50:1c:fd:59:19:24: 04:e0:32:bc:4c:27:b3:99:ce:38:34:b5:dd:c9:52:66:0a:27: a7:9d:77:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97ZLInDBsSqrfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YTA5MGQyNTAtNWFiNy00ZTk0LWE5NjAtNDcxM2Y0YjVhOGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwadhu2CdUQo83k6nph7grYRwsvRMxpYAtken gB5RzwticqwNJMbpubv/tta5ksSVvW3Z685EMRV5gfBBtV5bdy5WzdOHbgSkrDjW /z3Pf5MGzGVViK6TByTvyCqAhiiGJEfIh8b9s7ODlMTLl0W4nMeSH5NL1jfO7Wn+ lfA9kJIy0q8XxSxyWM6ikvwG9PvR8ytRzeiRNwCLhXRGfNJNJ0uZbs5OuaI23s96 y9qYGNKrytguATdnJqdCFWEgXBZw7M+YjoI/gATLbnmjbQ4Z8FYmCbyR38UeLQl+ iYFWe97aQ8iHol0YXLN4Usr+9/L22EsT8N898T9XKxhUA3OS5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4gHzuPvtUPQ90CFySG7/NPObtuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMTM1MWFhYjQtYzI0Yi0z NjcxLTliOWYtOWZlMWU1OTgyYzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABviLswfSQfkImQJV4UhMvH2AbskYFntIN40OqiveYt1cFSd7nVayttK h7auMNYmuXMczIIVbN4ig8T74q0BL3zriIxEEToDnXlpoeSd/H1RdLvGQPTp7NRb SC0+iTLL/gPbDrKvSbC3w4rS/37srUA61lJ5W5b3otRzN1u+/rZIDkNF8W1ruhE6 xck9wqB+J7i22Z8a1nMfrqJmcsxwV9/K762ZBMeYuz5IB9S7R7thENOa86wUZGe3 HL3s+AxNn7maKx2m/1WwP7iIC1R4q7cELWj9ml6rvvHCM+ZM9mFJwJILa1Ac/VkZ JATgMrxMJ7OZzjg0td3JUmYKJ6edd4A= -----END CERTIFICATE-----Generated at Sun Oct 11 19:30:50 2026 by rpki-client