$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8253844d-08a2-33aa-9d5c-ba72879a0121.roa File: 8253844d-08a2-33aa-9d5c-ba72879a0121.roa (raw, json) Hash identifier: Nam0FwEYA+CQvSA365++HXnpJ6bO+ejhhigBOFyPXCo= Subject key identifier: 40:C8:50:A9:A4:F9:5C:8F:B3:FC:62:4A:E3:B8:D9:53:89:63:F8:48 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D0BDF5C3A64966CFF7C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8253844d-08a2-33aa-9d5c-ba72879a0121.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d0:bd:f5:c3:a6:49:66:cf:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=273c32b2-9546-449e-8c23-34da39cf838e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:59:8a:a6:22:44:bf:f8:05:de:eb:8a:41:2e: 6a:ee:fe:38:c1:2b:c5:75:34:8e:b2:df:e0:a1:e1: de:3b:57:93:e4:f7:54:21:44:e6:0e:84:8e:9f:c8: 27:a4:db:d5:a9:f8:a2:35:71:ce:20:d5:00:4b:72: 32:c6:ef:8e:27:6c:61:7c:ce:08:4d:07:55:00:5a: a1:aa:e8:dc:7f:e7:24:1e:23:99:c2:dd:b3:68:48: 8e:5a:bf:be:f2:e9:cf:88:4e:77:94:b7:7e:72:d6: 9d:e0:08:12:74:ce:88:a0:b8:f6:6a:72:7e:e9:b3: a3:1c:33:f5:b8:0c:3e:80:76:1f:19:fc:3e:34:cb: 98:5e:f1:a2:90:69:10:b8:57:4c:d4:bc:81:04:6c: 2a:c8:56:cc:78:b1:a0:f6:af:0f:58:d2:31:f6:ec: f7:66:83:3c:8a:70:cb:6b:9d:5e:19:12:54:0f:d2: 48:ff:3e:6b:03:03:04:85:1b:e1:25:7a:a0:63:bc: 49:aa:a8:01:88:34:89:d7:ca:ba:0a:7b:b9:be:d6: 2b:4f:f0:69:a3:18:dc:64:d7:77:22:8a:44:80:d6: 98:ae:59:f8:d3:ae:57:9e:e6:4a:90:eb:8c:fa:c2: 3f:f3:e4:0a:f2:a1:bb:98:0c:9a:04:1b:06:9b:3d: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C8:50:A9:A4:F9:5C:8F:B3:FC:62:4A:E3:B8:D9:53:89:63:F8:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8253844d-08a2-33aa-9d5c-ba72879a0121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:dc:bd:92:d2:1c:0f:33:a2:7a:92:5a:37:98:be:f6:51:21: d7:2e:6c:b5:42:30:2d:88:48:23:2a:af:01:10:2c:15:78:9f: cc:1f:4e:c7:5f:4f:7b:67:af:58:b1:88:11:b2:08:8c:f5:96: 92:b5:97:c4:19:70:83:ad:0d:eb:83:ed:04:91:69:03:2a:c2: b6:92:c3:c7:30:ed:1d:d1:8f:69:50:e5:15:98:40:d0:e4:23: 2b:68:63:c9:61:bc:ff:45:83:90:10:86:6b:90:e7:ac:c0:d8: f4:3c:04:3b:08:69:e6:07:36:05:ab:61:e7:90:e2:cd:db:93: e3:fe:7c:b7:e3:45:df:69:bc:46:03:4b:96:bd:6c:41:8e:16: 53:df:7d:cb:20:e5:09:54:14:bd:ab:42:c3:d0:86:a8:42:10: 8d:f0:35:a9:f4:2b:e8:97:07:88:52:14:a3:f2:09:8d:a3:1b: 2b:4c:92:e2:68:e9:f6:59:08:cf:e5:5e:fd:a3:28:8b:6b:4f: 1c:50:e2:42:35:c3:1e:19:3e:b8:6b:55:3d:c6:8c:60:06:f0: a7:2a:8e:9d:94:63:43:15:de:4f:2b:9a:4f:fb:4e:ae:9f:5e: b5:fe:e6:f4:9b:b3:60:80:31:88:9b:f4:2b:45:e9:15:50:df: 37:a2:8a:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99C99cOmSWbP98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MjczYzMyYjItOTU0Ni00NDllLThjMjMtMzRkYTM5Y2Y4MzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklmKpiJEv/gF3uuKQS5q7v44wSvFdTSOst/g oeHeO1eT5PdUIUTmDoSOn8gnpNvVqfiiNXHOINUAS3Iyxu+OJ2xhfM4ITQdVAFqh qujcf+ckHiOZwt2zaEiOWr++8unPiE53lLd+ctad4AgSdM6IoLj2anJ+6bOjHDP1 uAw+gHYfGfw+NMuYXvGikGkQuFdM1LyBBGwqyFbMeLGg9q8PWNIx9uz3ZoM8inDL a51eGRJUD9JI/z5rAwMEhRvhJXqgY7xJqqgBiDSJ18q6Cnu5vtYrT/BpoxjcZNd3 IopEgNaYrln4065XnuZKkOuM+sI/8+QK8qG7mAyaBBsGmz04HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDIUKmk+VyPs/xiSuO42VOJY/hIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvODI1Mzg0NGQtMDhhMi0z M2FhLTlkNWMtYmE3Mjg3OWEwMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHncvZLSHA8zonqSWjeYvvZRIdcubLVCMC2ISCMqrwEQLBV4n8wfTsdf T3tnr1ixiBGyCIz1lpK1l8QZcIOtDeuD7QSRaQMqwraSw8cw7R3Rj2lQ5RWYQNDk IytoY8lhvP9Fg5AQhmuQ56zA2PQ8BDsIaeYHNgWrYeeQ4s3bk+P+fLfjRd9pvEYD S5a9bEGOFlPffcsg5QlUFL2rQsPQhqhCEI3wNan0K+iXB4hSFKPyCY2jGytMkuJo 6fZZCM/lXv2jKItrTxxQ4kI1wx4ZPrhrVT3GjGAG8Kcqjp2UY0MV3k8rmk/7Tq6f XrX+5vSbs2CAMYib9CtF6RVQ3zeiijU= -----END CERTIFICATE-----Generated at Tue Sep 29 13:46:08 2026 by rpki-client