$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/99d10086-0651-30a8-947b-7d34fac86add.roa File: 99d10086-0651-30a8-947b-7d34fac86add.roa (raw, json) Hash identifier: 5WVOZTfWPBdPu4DrFq2vghhC+klwlypoBRP6C0By3Ow= Subject key identifier: 9F:E6:16:56:BC:EF:A2:A1:1F:A3:EF:B8:75:24:73:B2:53:15:08:D8 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7CCA3EE03702465D41500 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/99d10086-0651-30a8-947b-7d34fac86add.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cc:a3:ee:03:70:24:65:d4:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=3a9d5a71-aaa3-407f-abb2-a0cb7793938b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:36:74:da:26:20:ad:3e:1c:b0:9d:94:c1: f6:22:ec:82:66:20:f3:70:cf:c7:fe:06:cc:fb:c0: fa:48:79:e1:83:14:c2:09:07:b7:c1:21:92:e2:58: 0a:09:5a:7f:45:95:c7:18:ae:4b:95:d7:a7:d7:85: dc:6e:81:44:a1:9f:4b:c5:3a:e5:75:7f:e9:da:30: c5:a9:6e:30:37:ac:18:82:56:ce:81:2b:e7:c8:2b: ea:81:c1:4e:51:3e:2c:9b:bc:97:80:e4:97:49:c8: 73:33:de:b6:54:33:cf:87:9b:e3:8b:29:50:68:17: 13:7c:15:8b:db:cb:50:23:ed:1d:6c:75:6d:29:0a: f3:a6:63:bb:bd:df:0b:40:9c:fe:06:53:15:b0:ee: 6a:d8:79:09:4f:17:32:65:71:cb:06:80:62:a8:00: d9:1e:fa:94:b2:d7:cf:bb:ec:88:0c:6f:31:79:03: 01:47:f6:ee:6a:43:dd:33:5a:61:2a:2c:69:ba:1a: 72:9f:20:a1:1e:a9:b0:00:30:74:61:22:b6:f3:c1: 97:5e:f4:68:78:58:65:c0:31:e4:dd:21:f0:fa:5d: e9:a8:85:d9:a2:15:71:8c:50:54:05:8f:59:ec:28: bc:5d:04:59:f2:75:77:66:55:fd:25:58:b4:96:c9: 87:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E6:16:56:BC:EF:A2:A1:1F:A3:EF:B8:75:24:73:B2:53:15:08:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/99d10086-0651-30a8-947b-7d34fac86add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ba:bb:a2:dc:de:ab:4b:c6:64:a3:b3:ff:d9:f0:a1:4e:c2: c5:33:52:09:ce:75:80:d4:ac:43:a6:68:27:cf:dd:2b:e6:54: e4:18:12:c1:df:73:06:5f:5a:8a:e2:95:3c:fd:6e:52:ca:8b: bd:97:3a:c0:66:b5:6b:ca:45:9d:c0:b8:8f:14:63:e8:9f:89: 09:da:83:42:3d:aa:66:21:f1:f0:9e:07:20:fa:62:47:62:39: 8e:43:17:72:08:43:64:2b:f9:f2:55:1a:ed:b3:ab:c2:3a:5d: 0e:5d:6e:98:49:79:d6:e9:ae:c4:e5:76:af:52:ce:7a:c3:fe: 9d:9e:e5:7b:34:cd:aa:9c:a2:3e:60:57:52:b4:67:f4:d3:34: 39:b0:6d:1f:8d:30:12:d7:a6:7f:32:0f:af:d9:68:34:90:02: 4e:e7:37:a7:e1:70:fb:07:aa:a4:df:41:64:95:1c:18:64:b5: d5:c2:bf:b8:66:f2:e1:87:5e:44:65:85:bd:96:f1:97:c6:fd: 50:0d:8d:5d:26:84:20:01:f8:4c:67:ee:ec:66:29:1c:e0:b8: 8b:a7:02:36:f5:96:64:bd:67:97:13:12:c7:b8:90:0c:8c:a8: e6:eb:a2:83:c4:1a:fd:2f:1f:f1:01:18:42:b5:38:69:01:d0: be:3e:d4:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98yj7gNwJGXUFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk M2E5ZDVhNzEtYWFhMy00MDdmLWFiYjItYTBjYjc3OTM5MzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuck2dNomIK0+HLCdlMH2IuyCZiDzcM/H/gbM +8D6SHnhgxTCCQe3wSGS4lgKCVp/RZXHGK5Llden14XcboFEoZ9LxTrldX/p2jDF qW4wN6wYglbOgSvnyCvqgcFOUT4sm7yXgOSXSchzM962VDPPh5vjiylQaBcTfBWL 28tQI+0dbHVtKQrzpmO7vd8LQJz+BlMVsO5q2HkJTxcyZXHLBoBiqADZHvqUstfP u+yIDG8xeQMBR/buakPdM1phKixpuhpynyChHqmwADB0YSK288GXXvRoeFhlwDHk 3SHw+l3pqIXZohVxjFBUBY9Z7Ci8XQRZ8nV3ZlX9JVi0lsmHCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/mFla876KhH6PvuHUkc7JTFQjYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOTlkMTAwODYtMDY1MS0z MGE4LTk0N2ItN2QzNGZhYzg2YWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGy6u6Lc3qtLxmSjs//Z8KFOwsUzUgnOdYDUrEOmaCfP3SvmVOQYEsHf cwZfWorilTz9blLKi72XOsBmtWvKRZ3AuI8UY+ifiQnag0I9qmYh8fCeByD6Ykdi OY5DF3IIQ2Qr+fJVGu2zq8I6XQ5dbphJedbprsTldq9SznrD/p2e5Xs0zaqcoj5g V1K0Z/TTNDmwbR+NMBLXpn8yD6/ZaDSQAk7nN6fhcPsHqqTfQWSVHBhktdXCv7hm 8uGHXkRlhb2W8ZfG/VANjV0mhCAB+Exn7uxmKRzguIunAjb1lmS9Z5cTEse4kAyM qObrooPEGv0vH/EBGEK1OGkB0L4+1Ns= -----END CERTIFICATE-----Generated at Sun Oct 11 19:33:31 2026 by rpki-client