$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/95eeffe8-b216-3dac-a287-037547a3c92f.roa File: 95eeffe8-b216-3dac-a287-037547a3c92f.roa (raw, json) Hash identifier: YBd3sM/7wTVX9T2FDJISx4DV15U4VoAy+mkBP4xjZW8= Subject key identifier: 7D:C3:AC:EC:0B:99:2F:E5:13:BC:5E:FC:7B:F8:17:1B:89:ED:AA:26 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B83647543729030EF380 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/95eeffe8-b216-3dac-a287-037547a3c92f.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b8:36:47:54:37:29:03:0e:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=24c7e6f5-fb10-4636-86ad-338aa95dadf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f0:fe:90:5d:14:35:11:25:6e:2e:98:7a:19: 54:2e:99:d5:46:14:f1:e4:22:d5:e1:ea:35:b5:73: 0f:99:ba:9b:a4:ed:b8:0b:c7:a5:2f:60:06:5e:ea: fb:1f:c5:c2:d7:3a:4b:f8:18:0e:6b:b0:be:08:c0: 5e:8b:19:76:ea:e7:49:39:eb:2e:da:c6:4a:60:98: e3:4c:f5:99:8d:71:ac:6a:90:50:48:49:93:7d:89: b2:7c:94:aa:da:a2:98:6d:61:28:02:7a:9e:7c:d1: 6a:74:a4:03:60:05:3c:11:1f:61:d7:03:f5:91:1e: 1b:fa:04:04:ae:70:28:df:e0:42:e2:ef:21:f0:2b: af:6f:43:22:87:78:dd:b6:c9:4e:e8:34:22:3d:27: 34:74:8f:aa:9b:4e:f2:eb:44:aa:16:b5:d6:b7:06: 2d:6b:0e:7a:8f:78:43:d5:92:22:e9:10:da:ec:5b: 68:83:5a:00:3e:62:ce:2e:71:9c:9b:19:b5:b6:09: 13:d3:df:23:49:5e:d7:af:76:a9:6c:68:aa:8b:ae: 42:9b:31:dc:d6:5f:15:09:e8:44:9b:0c:d0:74:25: 26:1c:c1:b7:65:99:e9:de:4a:5d:29:51:9e:c9:8b: 0e:d2:31:f1:f7:19:ab:55:1f:32:db:8c:b4:a3:71: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C3:AC:EC:0B:99:2F:E5:13:BC:5E:FC:7B:F8:17:1B:89:ED:AA:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/95eeffe8-b216-3dac-a287-037547a3c92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d2:80:89:d2:c3:4d:77:90:50:40:6c:4b:87:35:bc:94:27: 53:69:1f:59:32:a3:03:dc:76:1c:e2:23:1e:67:78:67:24:56: d3:9f:32:c3:7f:dd:7d:32:4a:da:b7:6b:60:90:13:90:89:d3: e5:86:3c:82:ed:05:57:9f:34:2b:be:d3:f5:0d:7e:5f:ce:8b: 4b:d1:b7:80:55:49:af:e1:26:84:93:a9:af:e4:37:04:31:af: aa:77:07:9f:02:68:76:66:51:58:3b:e0:99:39:84:63:b2:2f: 47:6e:fc:3b:0b:d2:86:d4:12:48:5d:d4:5f:48:3d:b9:52:d7: a7:50:69:f9:e8:81:20:9f:8a:4d:d3:cb:9b:fa:35:1e:53:96: b0:e6:c9:ca:6a:1c:44:86:58:bd:b8:70:cf:de:60:16:c1:6d: 12:3e:e1:5b:d4:66:ba:7e:99:26:0f:a5:21:22:fc:c9:57:94: aa:ce:69:96:e2:ec:0c:68:8e:14:6b:90:7c:94:d2:10:91:99: 00:d0:3c:4f:01:fe:2e:30:6f:98:60:cb:50:55:ea:fe:aa:54: bb:79:67:10:ae:aa:dc:f6:2d:76:9d:30:62:48:b4:d4:c9:f2: 3d:30:70:f9:ea:52:ea:4d:2d:3d:e3:e2:5c:a9:89:d3:61:7c: 0c:7e:aa:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97g2R1Q3KQMO84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MjRjN2U2ZjUtZmIxMC00NjM2LTg2YWQtMzM4YWE5NWRhZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvD+kF0UNRElbi6YehlULpnVRhTx5CLV4eo1 tXMPmbqbpO24C8elL2AGXur7H8XC1zpL+BgOa7C+CMBeixl26udJOesu2sZKYJjj TPWZjXGsapBQSEmTfYmyfJSq2qKYbWEoAnqefNFqdKQDYAU8ER9h1wP1kR4b+gQE rnAo3+BC4u8h8Cuvb0Mih3jdtslO6DQiPSc0dI+qm07y60SqFrXWtwYtaw56j3hD 1ZIi6RDa7Ftog1oAPmLOLnGcmxm1tgkT098jSV7Xr3apbGiqi65CmzHc1l8VCehE mwzQdCUmHMG3ZZnp3kpdKVGeyYsO0jHx9xmrVR8y24y0o3FoTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3DrOwLmS/lE7xe/Hv4FxuJ7aomMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOTVlZWZmZTgtYjIxNi0z ZGFjLWEyODctMDM3NTQ3YTNjOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrSgInSw013kFBAbEuHNbyUJ1NpH1kyowPcdhziIx5neGckVtOfMsN/ 3X0yStq3a2CQE5CJ0+WGPILtBVefNCu+0/UNfl/Oi0vRt4BVSa/hJoSTqa/kNwQx r6p3B58CaHZmUVg74Jk5hGOyL0du/DsL0obUEkhd1F9IPblS16dQafnogSCfik3T y5v6NR5TlrDmycpqHESGWL24cM/eYBbBbRI+4VvUZrp+mSYPpSEi/MlXlKrOaZbi 7AxojhRrkHyU0hCRmQDQPE8B/i4wb5hgy1BV6v6qVLt5ZxCuqtz2LXadMGJItNTJ 8j0wcPnqUupNLT3j4lypidNhfAx+qhw= -----END CERTIFICATE-----Generated at Sat Sep 26 15:48:57 2026 by rpki-client