$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/4e2f23a3-0f51-30b7-98ab-2797c4b4caa4.roa File: 4e2f23a3-0f51-30b7-98ab-2797c4b4caa4.roa (raw, json) Hash identifier: yTFwjCBpFGejmsgxStEDWm/yLa9syoJ+nwZxhQf2YvA= Subject key identifier: 1E:82:08:76:29:0D:29:E1:6D:A4:F9:6B:8F:4E:99:E5:DE:C5:01:A2 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B0B966E3D6AEBFE54D80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/4e2f23a3-0f51-30b7-98ab-2797c4b4caa4.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b0:b9:66:e3:d6:ae:bf:e5:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=1339e666-e84a-4f54-98ad-19282b66eb5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:05:8f:57:4e:9b:c6:f6:f4:31:db:c2:e5:0b: 90:58:37:ee:ed:0b:5e:0a:98:9f:25:d3:df:d5:c2: a2:83:2a:08:cd:59:19:bd:e4:f0:a4:fd:0d:64:2d: 8e:6e:0e:50:cd:dd:29:c0:a5:d1:7f:bc:60:8c:74: 90:d3:7a:30:25:7c:7d:63:7d:0a:05:68:d9:2b:42: 8e:78:97:75:45:81:70:7a:26:46:6f:4f:7d:ab:ff: 77:33:62:b4:a5:7d:23:9c:11:e4:e4:9b:dc:5f:09: 43:f1:60:10:00:3c:32:c2:e7:89:13:3c:40:6f:23: 32:f8:02:25:9b:be:de:e4:0f:47:f2:f3:95:f9:b8: 27:7d:05:22:61:15:81:75:bb:27:2e:6e:1f:ba:ba: 31:d3:bd:f2:c3:d7:a9:67:95:1d:48:0e:11:f1:56: f7:60:6f:29:b3:0d:62:b7:0d:6e:b0:88:5b:10:8c: bb:93:e0:22:e8:ac:f1:96:99:09:fc:fe:3d:21:1a: 03:b3:e0:3b:69:ea:f4:73:7b:ef:c6:e1:48:07:83: ed:3b:6f:43:62:a3:1e:c5:16:25:90:f1:73:a5:bd: 3f:d5:9d:88:db:53:67:42:9d:39:8c:ad:4a:fd:de: 15:3a:93:21:f5:80:a8:f2:59:b9:64:83:f1:81:44: 83:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:82:08:76:29:0D:29:E1:6D:A4:F9:6B:8F:4E:99:E5:DE:C5:01:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/4e2f23a3-0f51-30b7-98ab-2797c4b4caa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:df:be:6b:a6:4c:25:be:68:8b:17:02:9b:c6:9c:30:b3:7d: 14:c8:dd:8f:a5:2c:dd:d4:70:7e:84:ed:04:2b:dc:36:fd:a9: ad:6f:5f:c4:52:5b:25:12:71:1f:55:4d:ff:4e:b8:cd:67:51: 7f:01:96:1f:74:59:bd:10:59:45:7b:75:2b:1e:b4:2d:09:21: d4:83:d9:b8:58:48:4a:de:2e:01:a3:04:e7:26:1d:48:21:83: 15:4f:ff:75:b3:5b:c2:36:f4:bb:a0:af:17:45:83:02:86:0d: 5f:0d:22:33:48:d3:65:80:8b:cc:ab:15:09:bc:bf:6e:05:9e: 26:a0:a6:54:86:5e:47:e2:db:dc:47:88:06:72:43:e9:9b:30: 57:d5:85:40:c1:21:5e:75:81:8e:9a:14:3d:25:05:88:0e:8d: 22:32:7e:17:c6:4d:b9:35:dd:b3:4a:5e:b2:0c:e8:58:64:42: aa:59:6c:36:29:90:92:4c:9c:89:86:18:02:d1:9c:00:7a:de: 73:59:50:ff:07:70:70:27:12:ab:10:b4:2e:db:6c:59:d1:f8: 07:56:d6:55:19:36:65:7d:2d:b3:84:b5:4b:65:a6:ed:a2:7c: 50:10:97:39:13:e4:3f:13:4a:8d:ec:40:f9:b8:c8:33:36:56: db:da:8b:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97C5ZuPWrr/lTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MTMzOWU2NjYtZTg0YS00ZjU0LTk4YWQtMTkyODJiNjZlYjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQWPV06bxvb0MdvC5QuQWDfu7QteCpifJdPf 1cKigyoIzVkZveTwpP0NZC2Obg5Qzd0pwKXRf7xgjHSQ03owJXx9Y30KBWjZK0KO eJd1RYFweiZGb099q/93M2K0pX0jnBHk5JvcXwlD8WAQADwywueJEzxAbyMy+AIl m77e5A9H8vOV+bgnfQUiYRWBdbsnLm4furox073yw9epZ5UdSA4R8Vb3YG8psw1i tw1usIhbEIy7k+Ai6KzxlpkJ/P49IRoDs+A7aer0c3vvxuFIB4PtO29DYqMexRYl kPFzpb0/1Z2I21NnQp05jK1K/d4VOpMh9YCo8lm5ZIPxgUSDwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6CCHYpDSnhbaT5a49OmeXexQGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNGUyZjIzYTMtMGY1MS0z MGI3LTk4YWItMjc5N2M0YjRjYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnfvmumTCW+aIsXApvGnDCzfRTI3Y+lLN3UcH6E7QQr3Db9qa1vX8RS WyUScR9VTf9OuM1nUX8Blh90Wb0QWUV7dSsetC0JIdSD2bhYSEreLgGjBOcmHUgh gxVP/3WzW8I29LugrxdFgwKGDV8NIjNI02WAi8yrFQm8v24FniagplSGXkfi29xH iAZyQ+mbMFfVhUDBIV51gY6aFD0lBYgOjSIyfhfGTbk13bNKXrIM6FhkQqpZbDYp kJJMnImGGALRnAB63nNZUP8HcHAnEqsQtC7bbFnR+AdW1lUZNmV9LbOEtUtlpu2i fFAQlzkT5D8TSo3sQPm4yDM2Vtvai74= -----END CERTIFICATE-----Generated at Fri Sep 25 18:16:22 2026 by rpki-client