$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1fb96ef9-75fc-391b-953a-855085ac3d0e.roa File: 1fb96ef9-75fc-391b-953a-855085ac3d0e.roa (raw, json) Hash identifier: /QikW432do1beAuWU27y9FHbOHLYWuCKOnmmES5VoBQ= Subject key identifier: 4D:4A:79:EA:C9:90:EE:F6:2E:6D:1B:CD:C3:39:DA:09:BA:35:B7:43 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D07DFBCAB0C34B59FE60 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1fb96ef9-75fc-391b-953a-855085ac3d0e.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 64.16.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d0:7d:fb:ca:b0:c3:4b:59:fe:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=0661ba32-33b5-4c83-9a71-51ca7ae8dfe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:2c:cc:cd:6c:05:08:cf:6b:2c:ec:ba:d3: 8d:29:ff:67:38:b8:c1:fc:b9:f4:2d:6e:04:56:78: 66:31:e9:d8:ae:c7:32:ff:56:60:84:69:5e:3f:24: 83:1b:c8:9c:a9:1e:ad:ad:1b:1b:26:d6:bf:10:53: 80:30:cf:af:97:2f:7a:79:bc:23:8c:cd:bb:03:1c: 0b:40:47:87:18:05:5e:f4:75:29:5e:b2:c2:a7:5f: f2:34:64:41:70:66:a8:4f:4b:ff:8e:d2:52:df:09: ba:a1:a1:38:be:66:30:10:6c:46:24:73:dc:ad:18: 38:16:ab:17:2e:13:fe:7e:05:c7:33:8c:0e:39:4b: e4:d9:34:0c:13:c1:12:16:b9:fc:a7:5b:9f:95:bf: 12:7a:3e:f2:46:51:82:10:c0:80:26:89:a7:a1:14: 47:64:26:12:60:7d:46:0d:a4:42:14:7a:a1:d2:c1: e7:3e:66:32:a3:c0:b3:9e:52:a9:1c:45:8e:70:27: 76:fe:5d:30:50:68:0e:3f:8a:49:2a:8d:fd:cb:d1: 42:ae:36:a4:57:b4:cc:fa:c7:66:d5:43:77:cf:b1: 15:32:eb:28:45:c4:cc:1a:fa:5d:cc:39:89:ab:1d: 56:61:17:c3:04:fc:b2:34:03:e2:59:2a:43:0a:47: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4A:79:EA:C9:90:EE:F6:2E:6D:1B:CD:C3:39:DA:09:BA:35:B7:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1fb96ef9-75fc-391b-953a-855085ac3d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:f1:60:3b:35:27:d7:a1:2a:b4:2e:1c:8d:75:bc:92:31:1e: 2f:1d:be:7f:3b:40:4f:26:6d:90:bf:b4:f8:e2:04:12:eb:ed: 7a:33:25:90:d2:5f:f0:fa:43:67:8b:3a:8b:63:f8:a5:ef:96: a3:99:04:3f:36:01:ef:fd:66:7e:ca:57:69:55:31:ab:ef:8b: 79:6e:8b:41:13:2b:bf:bd:42:40:84:09:73:c5:8d:12:bc:f4: 73:a8:fc:85:fd:67:d5:7b:1e:a1:32:5b:72:b0:a2:ec:7e:ee: ab:98:f2:10:4d:65:c3:1c:01:cc:ce:7a:44:20:09:de:5f:49: c9:45:69:70:9c:49:49:67:b7:d5:70:cb:57:14:5c:1e:6b:17: 7a:5d:a1:62:6f:8b:13:cf:1e:64:fa:b5:42:1f:0e:c3:48:1f: fe:63:97:f8:31:ff:50:b3:7c:56:95:11:f0:2f:7c:12:78:93: 09:de:3e:23:35:f4:76:74:4e:5b:f5:4c:12:da:f9:8e:9f:73: cb:c9:6f:4b:b0:48:6b:b4:43:57:ae:56:a8:a0:5f:e7:f1:a1: 52:d0:76:78:a8:fd:41:58:9d:7e:11:9f:9e:69:d3:8e:51:30: f1:f5:40:bc:ab:c1:6f:93:c0:c8:1e:2d:6d:56:37:82:96:d2: 70:05:1b:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99B9+8qww0tZ/mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MDY2MWJhMzItMzNiNS00YzgzLTlhNzEtNTFjYTdhZThkZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHkszM1sBQjPayzsutONKf9nOLjB/Ln0LW4E VnhmMenYrscy/1ZghGlePySDG8icqR6trRsbJta/EFOAMM+vly96ebwjjM27AxwL QEeHGAVe9HUpXrLCp1/yNGRBcGaoT0v/jtJS3wm6oaE4vmYwEGxGJHPcrRg4FqsX LhP+fgXHM4wOOUvk2TQME8ESFrn8p1uflb8Sej7yRlGCEMCAJomnoRRHZCYSYH1G DaRCFHqh0sHnPmYyo8CznlKpHEWOcCd2/l0wUGgOP4pJKo39y9FCrjakV7TM+sdm 1UN3z7EVMusoRcTMGvpdzDmJqx1WYRfDBPyyNAPiWSpDCke6/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1KeerJkO72Lm0bzcM52gm6NbdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMWZiOTZlZjktNzVmYy0z OTFiLTk1M2EtODU1MDg1YWMzZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXxYDs1J9ehKrQuHI11vJIxHi8dvn87QE8mbZC/tPjiBBLr7XozJZDS X/D6Q2eLOotj+KXvlqOZBD82Ae/9Zn7KV2lVMavvi3lui0ETK7+9QkCECXPFjRK8 9HOo/IX9Z9V7HqEyW3Kwoux+7quY8hBNZcMcAczOekQgCd5fSclFaXCcSUlnt9Vw y1cUXB5rF3pdoWJvixPPHmT6tUIfDsNIH/5jl/gx/1CzfFaVEfAvfBJ4kwnePiM1 9HZ0Tlv1TBLa+Y6fc8vJb0uwSGu0Q1euVqigX+fxoVLQdnio/UFYnX4Rn55p045R MPH1QLyrwW+TwMgeLW1WN4KW0nAFG2A= -----END CERTIFICATE-----Generated at Sat Sep 26 04:57:33 2026 by rpki-client