$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1e30ad90-6de1-3e20-b795-8fbb8f15dc86.roa File: 1e30ad90-6de1-3e20-b795-8fbb8f15dc86.roa (raw, json) Hash identifier: atssr/azsfmopP4W6Ac+sORDtDE90uWlQWx9+9JMK3c= Subject key identifier: 95:4F:21:69:27:DC:82:C1:92:88:E9:73:22:C6:88:6F:CD:00:F7:0C Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B4F2E395497F93D76980 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1e30ad90-6de1-3e20-b795-8fbb8f15dc86.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b4:f2:e3:95:49:7f:93:d7:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=ae590b67-87fa-42c1-8cf9-49f1416726a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:39:f7:13:73:ec:df:23:b1:5e:ea:c8:40:32: 07:d4:ac:54:a2:31:26:3e:20:03:97:46:13:7e:b1: c3:0e:52:b2:55:b3:5b:2a:29:c3:c4:dd:f9:f7:c5: 36:7d:0e:02:01:ba:1e:09:52:31:5b:ae:ef:f8:ec: 8f:5a:e6:05:46:75:95:74:7c:30:f4:e3:5e:ea:59: 7b:64:7e:7a:3d:99:af:ca:4c:e7:70:cc:9f:55:4d: 20:0c:75:9f:14:e8:83:71:64:6e:a2:2a:5b:41:53: 24:42:df:6a:e0:72:ad:6d:30:5b:ba:77:d0:2e:59: 2e:cd:79:60:a7:cb:ed:aa:dc:fd:15:96:e0:55:4e: a7:61:2a:c0:d3:60:d1:67:fe:92:ef:8a:38:30:54: 97:f1:b7:0a:e8:b3:33:48:da:c6:88:85:6e:c2:cf: e1:b4:31:62:7f:b7:d9:52:0d:7c:b0:e7:8f:75:3c: 18:bb:32:53:83:87:5b:9e:89:ec:e7:7e:1a:50:1a: e1:c8:0a:a1:c7:c3:f6:8a:91:75:7a:a7:23:c6:45: 87:65:ab:ed:9a:a6:aa:74:65:77:10:aa:e1:d0:67: 4b:0e:ca:ab:d9:75:ba:95:b1:48:fb:67:5f:2c:8a: 7c:a4:97:c8:75:e0:6b:08:5b:51:81:b6:15:10:01: 1c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4F:21:69:27:DC:82:C1:92:88:E9:73:22:C6:88:6F:CD:00:F7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1e30ad90-6de1-3e20-b795-8fbb8f15dc86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:bc:28:6a:db:f0:10:ed:fd:cf:e3:0b:37:a6:5b:fc:fc:d1: d4:13:b5:e0:ee:4d:46:a8:68:6a:cd:5a:c4:41:00:96:0f:01: 4b:47:7f:4a:12:76:7f:22:62:13:a2:bf:7f:16:81:ba:d2:e5: 55:38:78:ef:9f:c1:55:77:af:6c:9e:f5:67:e6:8e:83:8d:e2: 00:07:63:b1:17:6a:90:18:4e:1e:c5:f3:df:d9:94:8b:4d:ac: 3b:85:5c:3a:92:ab:ad:2e:28:b0:c2:eb:75:7e:4b:20:20:0e: ab:48:88:88:5c:86:03:aa:62:3b:96:3e:75:8a:82:92:d8:d4: c5:d8:3a:fc:e2:c6:76:8e:e3:5a:e4:eb:e7:ad:d4:52:71:b4: 92:51:88:4f:d2:96:28:2b:25:39:c1:b7:2c:7c:32:21:c6:75: 9b:51:c9:67:05:c5:ca:3f:13:b9:d5:56:9d:2a:12:13:42:19: 94:ff:d9:ea:9e:a6:51:91:dd:8e:fe:f1:05:df:87:bc:38:3f: df:5c:ed:9b:6e:d4:cb:c2:b6:35:57:4f:ac:d0:06:08:d3:1e: f3:df:06:37:85:a9:96:e7:85:6a:a8:e9:68:f3:03:ff:f3:e3: ac:a6:0b:68:3b:b8:f0:89:0d:f5:43:e5:95:f6:72:55:04:bd: 7d:88:2d:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97Ty45VJf5PXaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YWU1OTBiNjctODdmYS00MmMxLThjZjktNDlmMTQxNjcyNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijn3E3Ps3yOxXurIQDIH1KxUojEmPiADl0YT frHDDlKyVbNbKinDxN3598U2fQ4CAboeCVIxW67v+OyPWuYFRnWVdHww9ONe6ll7 ZH56PZmvykzncMyfVU0gDHWfFOiDcWRuoipbQVMkQt9q4HKtbTBbunfQLlkuzXlg p8vtqtz9FZbgVU6nYSrA02DRZ/6S74o4MFSX8bcK6LMzSNrGiIVuws/htDFif7fZ Ug18sOePdTwYuzJTg4dbnons534aUBrhyAqhx8P2ipF1eqcjxkWHZavtmqaqdGV3 EKrh0GdLDsqr2XW6lbFI+2dfLIp8pJfIdeBrCFtRgbYVEAEclwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVPIWkn3ILBkojpcyLGiG/NAPcMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMWUzMGFkOTAtNmRlMS0z ZTIwLWI3OTUtOGZiYjhmMTVkYzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu8KGrb8BDt/c/jCzemW/z80dQTteDuTUaoaGrNWsRBAJYPAUtHf0oS dn8iYhOiv38WgbrS5VU4eO+fwVV3r2ye9WfmjoON4gAHY7EXapAYTh7F89/ZlItN rDuFXDqSq60uKLDC63V+SyAgDqtIiIhchgOqYjuWPnWKgpLY1MXYOvzixnaO41rk 6+et1FJxtJJRiE/SligrJTnBtyx8MiHGdZtRyWcFxco/E7nVVp0qEhNCGZT/2eqe plGR3Y7+8QXfh7w4P99c7Ztu1MvCtjVXT6zQBgjTHvPfBjeFqZbnhWqo6WjzA//z 46ymC2g7uPCJDfVD5ZX2clUEvX2ILYc= -----END CERTIFICATE-----Generated at Sun Oct 4 08:28:44 2026 by rpki-client