$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/65f34d40-eb13-329d-87ed-7e5f780cd301.roa File: 65f34d40-eb13-329d-87ed-7e5f780cd301.roa (raw, json) Hash identifier: 9BV3YxuQ4XnjlFfJpQIn+/Xwem2IvOE1LDIpgT134xA= Subject key identifier: EB:D1:8C:E9:82:10:94:F5:B2:81:3B:41:BF:F3:DA:B0:0A:8A:96:1D Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A51125998C9A8B409B80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/65f34d40-eb13-329d-87ed-7e5f780cd301.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a5:11:25:99:8c:9a:8b:40:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=5cf8c293-35e1-48c9-8ca3-3bca1b7384d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:7e:60:98:bf:20:34:88:25:52:b7:61:4d: e6:db:e7:28:7c:0c:47:17:8f:d3:97:e6:b4:b5:a4: 9c:2b:81:cd:3f:0b:c5:5c:2f:31:8f:38:16:d1:0c: 78:a6:07:09:24:75:28:53:61:83:fc:45:0d:ae:87: 55:ca:bd:44:fa:d9:d1:c4:b5:3d:97:f2:40:d7:5e: 46:3b:bd:b6:72:84:94:5d:8a:ea:c6:9d:8b:36:c4: 4c:a4:35:1d:34:5b:83:5d:c1:ca:b6:ae:2e:8c:da: 10:50:42:4f:3e:f4:be:59:0d:43:f4:db:aa:2a:96: b7:eb:af:a5:6c:ab:19:95:f0:01:53:de:fc:42:67: f7:4c:8b:ac:c4:a4:fb:2e:6a:29:44:b1:dc:b5:0c: c2:aa:3f:82:5b:7b:2b:c5:30:82:0a:84:32:67:5f: 35:00:62:54:a9:15:5e:bd:82:62:3e:c7:1d:8f:db: ae:07:17:02:f9:dd:cc:22:b0:f8:c5:5d:66:cb:2d: 3f:f8:a0:f3:ef:75:3d:1f:c7:3f:29:f9:6d:22:37: 65:35:e8:29:5d:0f:5c:14:2f:4c:45:64:db:d9:24: 19:1a:b2:eb:3d:fa:64:de:63:cf:ee:35:90:96:d2: fc:cc:79:12:25:b7:d8:81:4f:2f:b5:d9:0e:e0:00: 28:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D1:8C:E9:82:10:94:F5:B2:81:3B:41:BF:F3:DA:B0:0A:8A:96:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/65f34d40-eb13-329d-87ed-7e5f780cd301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:0e:56:46:bb:b7:ee:27:2e:92:b9:43:07:8d:7f:0d:05:e3: ff:63:02:57:a9:8b:98:e0:25:61:54:18:23:7a:10:76:86:cc: ca:43:7e:a2:4d:09:79:5c:6e:94:7e:74:bd:67:d0:fc:3c:96: 10:bd:a3:7a:bb:45:30:63:1b:20:0e:93:12:94:b6:15:bb:ac: cf:a2:da:2f:f0:2b:09:10:94:9d:1d:de:d0:ef:81:dd:43:a4: 2d:62:6f:10:16:53:5b:7c:71:f2:a2:24:2a:b3:9f:cc:20:ec: 5c:9c:fa:0c:a3:d8:4d:38:cd:79:2c:be:a9:1b:4f:90:9c:5e: d6:6e:b2:d0:30:45:8f:92:cb:cb:a4:d7:ba:fa:c9:38:30:32: 57:88:19:dc:67:98:b3:ea:52:0f:3f:04:f1:90:d3:c7:bd:74: 6e:d2:03:b8:cc:ee:f2:d6:5a:22:5b:be:dd:8b:14:a9:66:57: 56:dc:cc:fa:56:85:02:fb:2d:58:6e:9b:48:a6:a1:9b:03:e2: c3:cd:ec:82:9a:6b:74:03:93:8a:f2:94:51:40:49:e0:39:f3: f1:e0:c5:f8:0d:47:2e:74:3c:b6:15:29:e9:6e:a9:6b:2c:70: 1e:a7:14:aa:25:45:d2:d1:de:5f:e9:89:54:4f:01:7a:59:05: 66:eb:1f:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96URJZmMmotAm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NWNmOGMyOTMtMzVlMS00OGM5LThjYTMtM2JjYTFiNzM4NGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2N+YJi/IDSIJVK3YU3m2+cofAxHF4/Tl+a0 taScK4HNPwvFXC8xjzgW0Qx4pgcJJHUoU2GD/EUNrodVyr1E+tnRxLU9l/JA115G O722coSUXYrqxp2LNsRMpDUdNFuDXcHKtq4ujNoQUEJPPvS+WQ1D9NuqKpa366+l bKsZlfABU978Qmf3TIusxKT7LmopRLHctQzCqj+CW3srxTCCCoQyZ181AGJUqRVe vYJiPscdj9uuBxcC+d3MIrD4xV1myy0/+KDz73U9H8c/KfltIjdlNegpXQ9cFC9M RWTb2SQZGrLrPfpk3mPP7jWQltL8zHkSJbfYgU8vtdkO4AAooQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvRjOmCEJT1soE7Qb/z2rAKipYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjVmMzRkNDAtZWIxMy0z MjlkLTg3ZWQtN2U1Zjc4MGNkMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUOVka7t+4nLpK5QweNfw0F4/9jAlepi5jgJWFUGCN6EHaGzMpDfqJN CXlcbpR+dL1n0Pw8lhC9o3q7RTBjGyAOkxKUthW7rM+i2i/wKwkQlJ0d3tDvgd1D pC1ibxAWU1t8cfKiJCqzn8wg7Fyc+gyj2E04zXksvqkbT5CcXtZustAwRY+Sy8uk 17r6yTgwMleIGdxnmLPqUg8/BPGQ08e9dG7SA7jM7vLWWiJbvt2LFKlmV1bczPpW hQL7LVhum0imoZsD4sPN7IKaa3QDk4rylFFASeA58/HgxfgNRy50PLYVKeluqWss cB6nFKolRdLR3l/piVRPAXpZBWbrH84= -----END CERTIFICATE-----Generated at Tue Sep 29 20:24:32 2026 by rpki-client