$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9d2f22ce-1898-33c7-98db-c4c9cac84737.roa File: 9d2f22ce-1898-33c7-98db-c4c9cac84737.roa (raw, json) Hash identifier: EYm5R9/SrVl1AYxiKyzlPSdcF/DuksEE3PdSx07fjPE= Subject key identifier: A9:D0:CD:FF:A4:72:50:C8:26:99:18:71:59:20:0F:85:74:1E:CC:E2 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B66867F38BDF6790CD80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9d2f22ce-1898-33c7-98db-c4c9cac84737.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b6:68:67:f3:8b:df:67:90:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=bb6c33a1-06b5-4ead-bd41-01f492aabc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:25:46:4c:d7:b4:2e:ad:c5:78:20:c1:04:68: 52:70:d9:2f:fc:40:1d:db:cf:e9:11:4e:72:b7:70: e3:30:d8:93:c4:10:18:06:78:13:18:11:36:37:54: f3:26:d2:5f:0c:45:f5:a8:6c:0d:6a:4b:a1:86:f6: c4:9a:de:8f:f1:a9:12:23:4b:23:e2:70:60:03:b9: 5f:2e:8e:e5:86:28:3f:db:88:aa:96:31:9a:12:8c: a6:39:4d:88:70:e7:96:d9:0a:5f:3d:86:28:a4:0b: d5:8f:ea:f8:97:e1:73:d8:dc:e5:79:89:f3:19:75: a6:b7:00:f8:7d:85:19:2e:92:48:2d:8f:72:a0:11: cd:24:72:83:cd:ea:60:b8:39:c1:13:48:18:e9:6e: ae:1c:7c:42:e2:45:51:b2:7e:d6:0d:63:ae:a9:8f: 9b:25:ca:36:6f:84:0b:20:fe:a1:6a:ca:6f:47:d4: 35:af:37:66:cb:4b:1f:1f:66:37:dc:8c:d2:0a:e3: 0a:b4:17:29:04:69:35:72:cd:00:ae:e9:51:b7:47: 71:6d:f2:7d:9b:7d:4f:e5:62:a4:60:2d:21:23:19: 45:5e:15:38:fa:a4:d8:d8:83:e4:09:21:e2:84:26: 0d:8d:9c:b2:55:c3:d9:ba:c9:73:70:86:05:59:7b: e8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D0:CD:FF:A4:72:50:C8:26:99:18:71:59:20:0F:85:74:1E:CC:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9d2f22ce-1898-33c7-98db-c4c9cac84737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e1:f1:46:8a:19:6c:3f:c3:71:05:e8:1e:23:25:e5:b6:ba: b6:25:38:8a:6f:fe:ac:62:91:b2:33:05:89:de:0d:40:0d:9c: c8:c2:8b:ea:84:f8:39:38:8a:3f:1b:95:1d:11:bc:41:62:3d: e0:50:1a:ec:41:11:ac:bb:0c:6b:8c:e4:b1:a4:39:6c:a1:ef: fc:82:c4:d5:02:b9:81:69:4f:5e:4e:d1:f8:44:5d:d3:49:05: d0:55:b0:e0:8e:90:2f:6a:dc:94:0f:7c:62:bd:5a:df:ce:c0: ff:dd:e4:de:cd:af:49:0a:ff:49:ae:d8:aa:a5:b5:5a:85:7b: ce:ad:00:1c:9e:3d:94:b9:4b:fd:d2:f3:3c:1c:18:92:d9:1a: 67:bf:4b:e2:54:82:c0:73:4c:92:e3:08:90:e4:54:c1:24:25: d0:fd:4b:ab:7d:9b:1d:42:4a:67:1b:78:b7:16:21:b7:a3:67: a1:4d:62:6e:a0:c3:a8:15:b2:32:5c:ab:8a:45:29:84:7a:c6: 62:93:a8:16:6b:af:78:76:6c:db:f3:3d:8a:38:7b:d4:06:ce: f6:10:11:1e:7b:55:ec:3e:1a:8b:bd:98:71:a8:7a:38:99:fd: 9c:1c:b0:d3:57:dd:33:69:9f:11:57:c4:3a:94:7e:53:be:01: a1:a6:2c:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97ZoZ/OL32eQzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YmI2YzMzYTEtMDZiNS00ZWFkLWJkNDEtMDFmNDkyYWFiYzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSVGTNe0Lq3FeCDBBGhScNkv/EAd28/pEU5y t3DjMNiTxBAYBngTGBE2N1TzJtJfDEX1qGwNakuhhvbEmt6P8akSI0sj4nBgA7lf Lo7lhig/24iqljGaEoymOU2IcOeW2QpfPYYopAvVj+r4l+Fz2NzleYnzGXWmtwD4 fYUZLpJILY9yoBHNJHKDzepguDnBE0gY6W6uHHxC4kVRsn7WDWOuqY+bJco2b4QL IP6haspvR9Q1rzdmy0sfH2Y33IzSCuMKtBcpBGk1cs0ArulRt0dxbfJ9m31P5WKk YC0hIxlFXhU4+qTY2IPkCSHihCYNjZyyVcPZuslzcIYFWXvo4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnQzf+kclDIJpkYcVkgD4V0HsziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOWQyZjIyY2UtMTg5OC0z M2M3LTk4ZGItYzRjOWNhYzg0NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7h8UaKGWw/w3EF6B4jJeW2urYlOIpv/qxikbIzBYneDUANnMjCi+qE +Dk4ij8blR0RvEFiPeBQGuxBEay7DGuM5LGkOWyh7/yCxNUCuYFpT15O0fhEXdNJ BdBVsOCOkC9q3JQPfGK9Wt/OwP/d5N7Nr0kK/0mu2KqltVqFe86tAByePZS5S/3S 8zwcGJLZGme/S+JUgsBzTJLjCJDkVMEkJdD9S6t9mx1CSmcbeLcWIbejZ6FNYm6g w6gVsjJcq4pFKYR6xmKTqBZrr3h2bNvzPYo4e9QGzvYQER57Vew+Gou9mHGoejiZ /ZwcsNNX3TNpnxFXxDqUflO+AaGmLCg= -----END CERTIFICATE-----Generated at Sun Sep 27 05:56:54 2026 by rpki-client