$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1652fed3-32ae-39b3-ba12-292f985309b0.roa File: 1652fed3-32ae-39b3-ba12-292f985309b0.roa (raw, json) Hash identifier: UM4sK3ZobZdiSCfjNanSAG6ZkXS8Az5mHnppzIC8mZQ= Subject key identifier: 13:D1:18:54:96:EB:69:4F:FC:9A:99:DB:AC:DF:3B:B2:74:84:BE:59 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D0896714AAB3B860EC80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1652fed3-32ae-39b3-ba12-292f985309b0.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d0:89:67:14:aa:b3:b8:60:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=b934cf89-0dbd-44ad-9f9e-ee1d168b253e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:16:90:f2:04:b6:fd:bf:41:f4:e8:35:1f:05: dc:e2:73:e0:10:4b:db:26:07:e4:d5:51:a2:54:b5: 8a:dc:d3:74:84:1b:7f:60:43:63:09:49:8f:e1:05: 62:d2:95:3e:8c:d4:9f:21:24:fe:3c:13:fe:95:7d: 00:a2:9e:33:af:85:5f:5d:1e:1c:28:ff:0b:09:15: fe:6b:26:e1:4f:a0:32:46:47:0b:9f:a3:a9:2d:09: d9:10:0c:7d:aa:43:43:b8:0e:3e:bc:b3:19:33:04: a3:75:2a:1b:ee:64:ef:21:1a:b1:12:cb:c8:82:65: 4a:59:0f:b0:a3:5d:3e:14:df:37:cf:ad:23:ec:f2: b1:7c:9b:1a:61:39:e7:02:c3:36:e9:42:cd:79:92: 58:43:a9:6d:8e:f2:9c:d1:d5:97:6d:3d:22:0c:01: 03:93:8f:c6:46:93:58:24:f5:ee:f6:b4:cc:00:c7: 46:aa:d8:a7:35:12:d8:47:4f:8f:43:8d:a6:de:33: 78:30:71:67:da:ad:eb:a6:a6:f5:b8:c7:47:59:97: 10:22:e5:7c:bb:fe:f6:f1:23:0e:34:07:35:ba:54: 49:04:ae:6f:18:df:53:47:73:01:e3:dc:0d:11:66: bf:86:f9:14:d7:53:d5:0a:8d:cf:40:29:18:25:6b: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D1:18:54:96:EB:69:4F:FC:9A:99:DB:AC:DF:3B:B2:74:84:BE:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1652fed3-32ae-39b3-ba12-292f985309b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:4d:7b:0c:eb:39:23:85:ef:3f:42:33:3b:55:29:ff:45:a9: 53:71:f5:8a:32:cb:d6:7c:b7:b9:e6:8d:2c:e9:bc:21:95:0e: 1b:50:db:c2:0f:db:ef:6e:82:26:95:70:38:15:a4:eb:0e:c5: b4:d2:bc:ef:f5:b8:b0:04:18:70:2b:65:e6:4b:91:e8:06:7e: 98:9b:26:b8:2e:a3:08:f1:9b:91:a4:e5:33:08:b2:50:d0:43: a0:9b:b8:fa:d8:7a:86:ff:8c:d4:57:94:87:1d:18:36:72:70: d2:7b:cb:0a:f0:b1:64:0e:37:42:41:72:ce:48:c3:dd:f8:33: f6:0e:38:7c:31:f5:49:89:c3:52:ae:5d:ad:f4:d3:bb:84:86: 28:b9:e8:d3:71:96:fd:ab:e4:72:ff:48:8a:40:29:8a:73:38: 21:8e:0d:62:0c:f2:cd:9e:8d:2d:d6:c6:72:bd:ec:ed:01:c7: 9d:93:c5:53:f4:df:de:a5:9b:e3:f8:55:1b:4c:94:a1:d2:24: b2:ac:f3:92:b1:ec:ca:cb:1e:52:ef:21:ad:d4:79:f6:b9:c8: bc:62:a6:a8:a3:fc:e9:ab:95:e9:f5:8f:c3:03:30:65:d2:08: 8a:98:7a:1c:9a:90:a3:56:b5:6f:e0:54:52:8a:af:28:53:00: 07:ab:c3:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99CJZxSqs7hg7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YjkzNGNmODktMGRiZC00NGFkLTlmOWUtZWUxZDE2OGIyNTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhaQ8gS2/b9B9Og1HwXc4nPgEEvbJgfk1VGi VLWK3NN0hBt/YENjCUmP4QVi0pU+jNSfIST+PBP+lX0Aop4zr4VfXR4cKP8LCRX+ aybhT6AyRkcLn6OpLQnZEAx9qkNDuA4+vLMZMwSjdSob7mTvIRqxEsvIgmVKWQ+w o10+FN83z60j7PKxfJsaYTnnAsM26ULNeZJYQ6ltjvKc0dWXbT0iDAEDk4/GRpNY JPXu9rTMAMdGqtinNRLYR0+PQ42m3jN4MHFn2q3rpqb1uMdHWZcQIuV8u/728SMO NAc1ulRJBK5vGN9TR3MB49wNEWa/hvkU11PVCo3PQCkYJWtXhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPRGFSW62lP/JqZ26zfO7J0hL5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMTY1MmZlZDMtMzJhZS0z OWIzLWJhMTItMjkyZjk4NTMwOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERNewzrOSOF7z9CMztVKf9FqVNx9Yoyy9Z8t7nmjSzpvCGVDhtQ28IP 2+9ugiaVcDgVpOsOxbTSvO/1uLAEGHArZeZLkegGfpibJrguowjxm5Gk5TMIslDQ Q6CbuPrYeob/jNRXlIcdGDZycNJ7ywrwsWQON0JBcs5Iw934M/YOOHwx9UmJw1Ku Xa3007uEhii56NNxlv2r5HL/SIpAKYpzOCGODWIM8s2ejS3WxnK97O0Bx52TxVP0 396lm+P4VRtMlKHSJLKs85Kx7MrLHlLvIa3Uefa5yLxipqij/Omrlen1j8MDMGXS CIqYehyakKNWtW/gVFKKryhTAAerwzs= -----END CERTIFICATE-----Generated at Sun Oct 4 19:40:34 2026 by rpki-client