$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3ab4b47f-51cf-3592-a11b-2bb35d2129af.roa File: 3ab4b47f-51cf-3592-a11b-2bb35d2129af.roa (raw, json) Hash identifier: ozcO3Q4qaTVUFRTp3nhbz4wAZ9qqfPZFgBT8e7++c38= Subject key identifier: E5:E8:9E:52:96:25:71:2D:88:5E:E7:3F:5E:88:26:87:7E:21:B7:8F Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F79DDB46A5C603807B0BC0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3ab4b47f-51cf-3592-a11b-2bb35d2129af.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:9d:db:46:a5:c6:03:80:7b:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=9f232800-e6f0-4f56-b8a4-91694396ee59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:db:bc:63:3b:ff:d3:83:a4:57:d9:b7:00:16: 01:3d:b4:92:ed:63:4a:12:71:38:66:7c:c2:aa:5c: 4f:10:f5:59:9a:65:74:12:8b:27:4b:3c:b4:6f:12: c0:5b:d0:e5:d7:88:26:14:80:61:2c:7b:7f:dd:8b: 95:1c:64:4e:a9:37:3c:53:8f:35:cf:02:c4:d5:b3: 10:7c:d5:c5:82:db:1f:63:05:43:e7:11:84:7a:d4: 0f:d7:0a:59:92:53:64:75:89:1c:cf:3d:37:47:ac: 58:8c:99:a7:94:b0:64:68:b2:af:02:63:78:ec:21: 0f:4b:d5:0e:fe:a3:8e:4c:9d:e7:b2:5f:a4:fc:05: 72:eb:40:35:78:4c:76:da:a9:bc:e8:5f:b7:97:bc: 5b:40:ed:5d:ad:67:04:3b:45:0c:52:cf:4e:11:d3: 6e:3a:0a:41:b1:14:66:08:51:96:3c:5e:11:19:a6: 4c:b7:cb:e1:0b:81:0e:bb:aa:6d:be:73:3b:e3:d3: e6:e6:13:f5:3f:fb:92:e3:e9:eb:c3:d9:96:bc:ef: 79:e6:4e:53:39:91:4b:75:2a:4f:cf:47:71:e7:a9: df:bd:35:62:27:ab:e2:64:41:c7:a1:cc:54:d5:10: 41:ea:f9:d3:f9:93:92:76:07:f2:a5:a1:d4:b1:a0: a7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E8:9E:52:96:25:71:2D:88:5E:E7:3F:5E:88:26:87:7E:21:B7:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3ab4b47f-51cf-3592-a11b-2bb35d2129af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:73:94:05:eb:19:94:5b:56:cf:7b:f3:07:fd:45:22:04:bf: 69:fd:b5:3e:54:2a:16:63:07:ad:bb:d2:b4:36:f2:fb:c7:e8: e9:62:ba:fa:31:98:fe:a0:3c:2e:02:e3:08:26:81:f9:7b:33: 24:67:c1:f5:4e:3f:d1:db:49:7c:a1:88:a5:f4:70:6d:23:f3: 72:dc:82:40:3a:b3:0e:46:05:c8:21:00:63:22:9e:f4:9b:79: 66:3c:f6:4e:c2:4a:8d:ef:e4:dc:48:f1:ae:1c:53:a3:7a:2c: 4d:5d:9a:e3:90:e1:0b:13:d2:cb:a1:39:59:75:15:bb:8e:ab: 22:5e:91:fe:9b:ce:3d:60:ca:cc:b4:db:26:6e:58:89:f3:a4: f6:13:44:a4:4c:77:0a:ba:de:5e:ca:96:aa:f8:04:0c:de:15: e3:b7:00:c9:6a:9d:a1:27:15:3a:65:20:54:22:40:44:d2:1e: c1:fe:78:fb:f2:d0:07:84:22:f0:a4:58:5b:65:56:aa:ae:b0: a1:31:ee:81:eb:cd:8e:2a:83:4b:49:53:76:e7:9f:9d:50:8d: f3:8e:c5:42:2e:f7:ac:87:7a:91:53:35:0e:cf:14:96:3c:fe: 81:8d:7a:f6:4d:1f:6d:64:95:2b:d6:6e:73:4e:6c:71:f1:d4: 8b:0c:35:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g953bRqXGA4B7C8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OWYyMzI4MDAtZTZmMC00ZjU2LWI4YTQtOTE2OTQzOTZlZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Nu8Yzv/04OkV9m3ABYBPbSS7WNKEnE4ZnzC qlxPEPVZmmV0EosnSzy0bxLAW9Dl14gmFIBhLHt/3YuVHGROqTc8U481zwLE1bMQ fNXFgtsfYwVD5xGEetQP1wpZklNkdYkczz03R6xYjJmnlLBkaLKvAmN47CEPS9UO /qOOTJ3nsl+k/AVy60A1eEx22qm86F+3l7xbQO1drWcEO0UMUs9OEdNuOgpBsRRm CFGWPF4RGaZMt8vhC4EOu6ptvnM749Pm5hP1P/uS4+nrw9mWvO955k5TOZFLdSpP z0dx56nfvTViJ6viZEHHocxU1RBB6vnT+ZOSdgfypaHUsaCn5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXonlKWJXEtiF7nP16IJod+IbePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvM2FiNGI0N2YtNTFjZi0z NTkyLWExMWItMmJiMzVkMjEyOWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJzlAXrGZRbVs978wf9RSIEv2n9tT5UKhZjB6270rQ28vvH6Oliuvox mP6gPC4C4wgmgfl7MyRnwfVOP9HbSXyhiKX0cG0j83LcgkA6sw5GBcghAGMinvSb eWY89k7CSo3v5NxI8a4cU6N6LE1dmuOQ4QsT0suhOVl1FbuOqyJekf6bzj1gysy0 2yZuWInzpPYTRKRMdwq63l7Klqr4BAzeFeO3AMlqnaEnFTplIFQiQETSHsH+ePvy 0AeEIvCkWFtlVqqusKEx7oHrzY4qg0tJU3bnn51QjfOOxUIu96yHepFTNQ7PFJY8 /oGNevZNH21klSvWbnNObHHx1IsMNa8= -----END CERTIFICATE-----Generated at Sun Sep 27 06:03:18 2026 by rpki-client