$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/918aeccd-1135-36ef-9172-bcf98a404b83.roa File: 918aeccd-1135-36ef-9172-bcf98a404b83.roa (raw, json) Hash identifier: a/EvJdDrUzzBgsIxSYiERKdWZK5Xn7dRMQOCDZds2Qo= Subject key identifier: 73:9A:07:AD:4D:4E:64:0E:B5:71:89:74:D5:60:9E:C9:AD:1B:16:EB Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D2E65F6542B19D871600 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/918aeccd-1135-36ef-9172-bcf98a404b83.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 64.16.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d2:e6:5f:65:42:b1:9d:87:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=69fecf1f-c5ba-4380-adb2-a30ab10db2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:08:85:88:79:83:37:b8:99:98:99:17:a2:6f: 87:af:f7:c1:6d:a9:61:cf:d6:ff:bb:8e:d0:0e:f8: ed:f6:b1:98:b6:a8:9f:72:fc:e6:9c:7c:7d:b7:af: 84:27:b0:70:5d:e2:43:7f:fd:05:50:b9:bb:4f:bb: 3a:64:91:59:00:69:95:b2:d6:82:90:0c:a4:f7:77: de:78:68:60:ad:fe:d8:cf:03:f8:46:62:83:d6:d0: 14:d8:27:d9:ce:7b:85:d9:1e:5d:c2:e0:09:b7:8a: a1:32:7e:5d:be:1a:0c:bb:15:41:84:a6:1f:81:41: 54:cf:c5:8e:76:7b:c7:5a:d6:bd:3b:f6:36:ec:4b: de:af:01:1c:b5:47:94:cf:e5:73:08:5a:66:2f:8a: cf:83:c6:5a:26:d1:98:ef:9f:6f:13:63:88:2d:bc: 43:69:56:d5:01:7c:eb:93:0d:a5:0a:98:a2:0a:fb: 80:22:17:5b:bc:ee:46:c8:2b:4b:a7:52:23:04:c9: 4a:40:4b:b1:04:03:cb:bb:2e:9d:22:81:13:19:2a: 6a:84:09:41:61:c4:cf:b2:4d:e6:08:fe:32:4d:5c: 29:4d:21:ca:ca:ab:4d:71:ce:69:2d:c4:ce:c8:19: 45:68:9b:3a:da:45:a6:86:b4:83:e7:4c:be:b3:df: 95:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9A:07:AD:4D:4E:64:0E:B5:71:89:74:D5:60:9E:C9:AD:1B:16:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/918aeccd-1135-36ef-9172-bcf98a404b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d9:39:1d:a7:34:c7:6c:33:4c:7c:0b:fe:0f:e1:9e:72:2f: 0a:f5:3a:63:4e:39:f9:46:45:ba:f1:87:42:3a:b1:16:6d:b8: f2:f3:44:36:12:0f:f6:cf:56:0c:dd:84:b8:4a:a0:fb:9b:a7: 9d:f4:84:11:8a:45:cf:c1:d9:e8:08:92:87:94:2b:d1:54:23: 69:7c:71:64:c5:a3:15:16:0b:5a:cc:07:10:f9:3a:9c:cd:ec: 47:dc:2f:ad:f8:62:43:27:06:53:35:9b:cd:e2:7b:be:11:f2: fa:d8:d3:e2:3f:e2:b4:68:d4:94:b8:38:e6:eb:85:03:24:fc: ef:4c:71:94:46:29:e6:79:38:97:ac:20:4c:30:f8:c2:5c:5d: 44:b6:1f:86:ae:9c:a5:30:6d:41:c0:78:8f:0c:18:62:5b:c6: cb:d5:34:3f:d7:9e:30:82:cd:39:2a:8e:10:2b:c4:01:bd:fd: 05:37:d8:85:b5:8e:f8:9c:83:bd:51:ba:a1:a8:91:66:0c:77: 5e:a1:59:91:3f:8f:41:b9:8b:e2:40:7d:ea:f2:73:d4:f9:d6: b3:0b:ed:38:8a:78:55:28:80:6d:62:9d:5b:d7:d2:13:bc:dd: 11:1f:49:ce:ec:ca:ef:2a:b1:2c:74:cf:5f:13:e9:60:e4:65: 42:7b:17:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99LmX2VCsZ2HFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NjlmZWNmMWYtYzViYS00MzgwLWFkYjItYTMwYWIxMGRiMmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowiFiHmDN7iZmJkXom+Hr/fBbalhz9b/u47Q Dvjt9rGYtqifcvzmnHx9t6+EJ7BwXeJDf/0FULm7T7s6ZJFZAGmVstaCkAyk93fe eGhgrf7YzwP4RmKD1tAU2CfZznuF2R5dwuAJt4qhMn5dvhoMuxVBhKYfgUFUz8WO dnvHWta9O/Y27EverwEctUeUz+VzCFpmL4rPg8ZaJtGY759vE2OILbxDaVbVAXzr kw2lCpiiCvuAIhdbvO5GyCtLp1IjBMlKQEuxBAPLuy6dIoETGSpqhAlBYcTPsk3m CP4yTVwpTSHKyqtNcc5pLcTOyBlFaJs62kWmhrSD50y+s9+VMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOaB61NTmQOtXGJdNVgnsmtGxbrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOTE4YWVjY2QtMTEzNS0z NmVmLTkxNzItYmNmOThhNDA0YjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELZOR2nNMdsM0x8C/4P4Z5yLwr1OmNOOflGRbrxh0I6sRZtuPLzRDYS D/bPVgzdhLhKoPubp530hBGKRc/B2egIkoeUK9FUI2l8cWTFoxUWC1rMBxD5OpzN 7EfcL634YkMnBlM1m83ie74R8vrY0+I/4rRo1JS4OObrhQMk/O9McZRGKeZ5OJes IEww+MJcXUS2H4aunKUwbUHAeI8MGGJbxsvVND/XnjCCzTkqjhArxAG9/QU32IW1 jvicg71RuqGokWYMd16hWZE/j0G5i+JAferyc9T51rML7TiKeFUogG1inVvX0hO8 3REfSc7syu8qsSx0z18T6WDkZUJ7FzI= -----END CERTIFICATE-----Generated at Mon Sep 28 09:59:43 2026 by rpki-client