$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/671008f9-dbae-3314-9992-bae543663a41.roa File: 671008f9-dbae-3314-9992-bae543663a41.roa (raw, json) Hash identifier: oOVt16aBX8VhdL3Oh8d8skXveIRDXi4B623MFotVHpQ= Subject key identifier: 8E:1C:7C:83:3F:DF:76:D0:60:91:40:D8:64:93:58:88:C1:0D:61:54 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B593E4630DE2C0674BC0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/671008f9-dbae-3314-9992-bae543663a41.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b5:93:e4:63:0d:e2:c0:67:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=70de89dc-d451-4c13-9543-8c52816dbd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:62:c6:eb:f4:61:c1:90:a3:a3:b5:10:86:80: 12:17:2e:1e:04:01:20:b1:66:01:69:91:65:24:41: 4b:c6:d4:e1:9f:73:2d:74:41:0b:2b:2a:78:a1:c9: a5:37:ed:7a:ef:b6:b6:2e:9d:53:f1:ed:b8:81:66: 15:83:d1:8a:58:b7:4c:91:d7:c4:22:5e:b2:a3:7b: b7:de:75:5f:22:4b:1a:21:06:58:9c:9c:98:e8:41: 1f:f3:06:18:c1:f5:0a:09:0d:87:3d:9d:1e:de:a1: f9:f5:2d:6f:db:eb:ff:f8:ad:0e:9a:f8:5b:81:aa: 02:37:6d:9c:e3:62:3e:29:3d:ac:5a:5b:72:83:2f: c3:de:d7:0c:65:ac:db:04:c6:e7:8b:30:fa:f7:ac: 35:75:fb:64:99:41:ba:ff:e4:93:94:8f:ee:55:c0: 4f:71:2d:f1:b1:09:c1:4e:39:bc:8a:ef:26:30:34: d5:b3:66:2c:8e:24:dc:bc:68:a3:77:23:e0:16:07: a7:89:9d:21:35:ad:de:79:7b:97:79:aa:58:6e:06: c5:98:2a:91:d2:ac:b5:ec:6e:5d:2c:46:e3:e6:b8: b8:6d:06:5b:e8:7f:9d:51:92:32:05:69:0d:f2:f9: dc:cb:7c:f5:29:b6:8b:b8:44:a6:bb:64:03:1a:4a: 84:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1C:7C:83:3F:DF:76:D0:60:91:40:D8:64:93:58:88:C1:0D:61:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/671008f9-dbae-3314-9992-bae543663a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:bb:09:a5:99:f3:8d:e2:12:6c:ed:5b:40:95:14:e6:11:36: d7:e1:0d:f7:6b:54:a3:9a:ad:06:45:83:1e:64:80:83:74:9d: d7:29:bc:71:f3:b2:28:fa:bb:e4:1f:eb:26:d4:0c:ff:52:36: c7:ab:bd:f6:d5:65:d7:87:a6:f9:90:d8:50:c3:4d:da:96:02: 6b:43:ac:71:cd:4e:79:56:8f:28:69:ff:76:0f:a4:37:8d:a4: 11:24:aa:18:d2:b0:88:2b:6b:20:71:43:05:e6:58:b6:92:19: 1c:4c:c7:df:5d:bc:f6:e0:5f:08:55:b1:65:d8:52:c3:82:90: 0b:cb:ff:4c:70:18:00:17:43:eb:76:f1:32:0f:79:02:ac:19: 0a:99:45:18:6d:4c:77:ad:e8:80:76:d4:c3:80:a0:80:39:2a: 7a:39:9f:73:de:d7:cd:1e:23:74:57:08:00:75:0b:ad:47:2e: cb:7d:16:05:0f:f1:47:11:49:c3:66:f2:6f:69:aa:6a:5e:d1: 37:9e:5d:04:e6:44:32:c4:9d:e8:68:c4:db:ec:45:7d:83:cb: db:5f:8f:69:53:7e:b7:7c:c5:98:41:03:b1:94:29:9a:c3:4d: 28:0a:de:74:7b:39:83:86:79:e5:a8:ca:67:d0:77:05:c5:da: 47:93:3d:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97WT5GMN4sBnS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NzBkZTg5ZGMtZDQ1MS00YzEzLTk1NDMtOGM1MjgxNmRiZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWLG6/RhwZCjo7UQhoASFy4eBAEgsWYBaZFl JEFLxtThn3MtdEELKyp4ocmlN+1677a2Lp1T8e24gWYVg9GKWLdMkdfEIl6yo3u3 3nVfIksaIQZYnJyY6EEf8wYYwfUKCQ2HPZ0e3qH59S1v2+v/+K0OmvhbgaoCN22c 42I+KT2sWltygy/D3tcMZazbBMbnizD696w1dftkmUG6/+STlI/uVcBPcS3xsQnB Tjm8iu8mMDTVs2YsjiTcvGijdyPgFgeniZ0hNa3eeXuXeapYbgbFmCqR0qy17G5d LEbj5ri4bQZb6H+dUZIyBWkN8vncy3z1KbaLuESmu2QDGkqEWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4cfIM/33bQYJFA2GSTWIjBDWFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjcxMDA4ZjktZGJhZS0z MzE0LTk5OTItYmFlNTQzNjYzYTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm7CaWZ843iEmztW0CVFOYRNtfhDfdrVKOarQZFgx5kgIN0ndcpvHHz sij6u+Qf6ybUDP9SNservfbVZdeHpvmQ2FDDTdqWAmtDrHHNTnlWjyhp/3YPpDeN pBEkqhjSsIgrayBxQwXmWLaSGRxMx99dvPbgXwhVsWXYUsOCkAvL/0xwGAAXQ+t2 8TIPeQKsGQqZRRhtTHet6IB21MOAoIA5Kno5n3Pe180eI3RXCAB1C61HLst9FgUP 8UcRScNm8m9pqmpe0TeeXQTmRDLEnehoxNvsRX2Dy9tfj2lTfrd8xZhBA7GUKZrD TSgK3nR7OYOGeeWoymfQdwXF2keTPUE= -----END CERTIFICATE-----Generated at Sun Oct 4 01:21:39 2026 by rpki-client