$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a23941ce-43cb-38ba-914d-71b01a1cf4e8.roa File: a23941ce-43cb-38ba-914d-71b01a1cf4e8.roa (raw, json) Hash identifier: m3fRU6CgvDQZi7w4HABRLDmq78ozBe0unNiooVO3W6I= Subject key identifier: 0F:B4:DD:CC:36:92:4A:B7:A4:0B:84:F7:5D:1D:6B:AE:09:A7:86:56 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A5B9B8FD7AF2EC2F2B00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a23941ce-43cb-38ba-914d-71b01a1cf4e8.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a5:b9:b8:fd:7a:f2:ec:2f:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=f5c73c23-cd2a-41fe-8707-56a53ab3fb60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:cf:39:d7:19:91:bb:95:82:8e:d7:09:ff: e4:10:cb:a1:aa:6e:e3:48:a3:63:19:9a:f2:ed:c0: de:e2:49:f8:b1:11:58:7e:e1:87:59:b6:35:1f:50: e0:3a:8e:78:3d:cc:52:3f:7b:30:68:dd:50:a3:5a: a8:fd:c0:70:36:81:95:d1:c8:f0:9a:3e:7d:b1:55: 8d:57:dd:af:e4:7e:17:07:e0:ab:21:9e:a2:9b:6c: fb:05:76:f5:81:49:7e:8c:dd:49:2b:a4:35:24:67: ad:67:3b:15:f1:b3:07:8f:6c:fa:d6:99:a2:32:f1: fc:22:27:f2:09:9a:20:10:1b:77:a3:aa:df:28:7c: b5:60:9c:7e:3e:92:ff:b2:df:49:31:b7:3a:ea:36: 2a:77:27:7d:06:f8:43:ed:c2:32:2e:2f:09:f1:9c: a5:b5:63:8f:0e:2e:52:91:78:99:3f:fd:12:15:71: 96:db:ed:b7:3b:75:ef:75:8c:67:55:d6:74:a7:08: 2c:20:de:b3:0c:35:72:f6:f9:c1:70:14:e8:fc:e2: 9c:3b:39:51:c3:ae:dd:58:20:26:40:6c:6c:2f:03: d7:2d:b0:b4:d9:f8:b5:6e:9c:a1:c7:c8:ec:46:c5: 5c:fa:ca:e4:61:5c:39:50:e0:11:63:71:e9:de:55: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B4:DD:CC:36:92:4A:B7:A4:0B:84:F7:5D:1D:6B:AE:09:A7:86:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a23941ce-43cb-38ba-914d-71b01a1cf4e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:b4:72:b7:ce:c8:c7:29:99:c6:16:22:4d:97:98:e8:b0:25: 3d:dd:40:c1:e1:a5:48:01:cf:2c:c6:09:86:b4:c3:3a:aa:4f: f0:9b:00:3d:77:00:1b:3b:5f:7f:58:6b:c9:95:83:94:89:6e: 05:fa:95:19:8f:c5:9b:2c:35:67:8f:04:fe:2e:d8:c4:6b:26: 8a:e0:7a:46:ca:a7:2f:99:24:7c:2c:51:8d:bb:d8:7f:d8:4b: fd:0e:18:dd:3b:0a:24:9f:31:8f:68:3a:c7:ce:3a:fc:4b:96: 26:9e:c1:4e:e0:27:d9:fc:cc:78:51:c6:6e:34:8f:75:34:d1: 3d:53:04:12:ad:2b:87:e8:fd:6d:ad:a1:af:d4:f9:ee:2c:9d: d3:39:80:c2:30:df:17:f4:61:ca:bd:3b:ae:ba:a5:99:a4:e9: f6:52:37:85:58:4c:05:4f:e0:da:07:44:23:61:cf:95:f3:f8: c7:b3:b9:26:23:21:1d:8c:2c:d7:99:1e:18:6e:37:b1:0a:9f: 8d:62:fe:e9:2d:69:8c:c6:71:60:1d:f3:44:9d:17:99:d7:2b: ae:78:2b:fe:dc:49:cb:26:c0:e3:e9:a9:d7:bc:df:a6:e7:f1: fe:be:c0:a5:42:dd:c9:07:55:4c:6f:cd:e4:26:b3:0c:47:0a: 7e:0e:94:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96W5uP168uwvKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjVjNzNjMjMtY2QyYS00MWZlLTg3MDctNTZhNTNhYjNmYjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFbPOdcZkbuVgo7XCf/kEMuhqm7jSKNjGZry 7cDe4kn4sRFYfuGHWbY1H1DgOo54PcxSP3swaN1Qo1qo/cBwNoGV0cjwmj59sVWN V92v5H4XB+CrIZ6im2z7BXb1gUl+jN1JK6Q1JGetZzsV8bMHj2z61pmiMvH8Iify CZogEBt3o6rfKHy1YJx+PpL/st9JMbc66jYqdyd9BvhD7cIyLi8J8ZyltWOPDi5S kXiZP/0SFXGW2+23O3XvdYxnVdZ0pwgsIN6zDDVy9vnBcBTo/OKcOzlRw67dWCAm QGxsLwPXLbC02fi1bpyhx8jsRsVc+srkYVw5UOARY3Hp3lUmiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+03cw2kkq3pAuE910da64Jp4ZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTIzOTQxY2UtNDNjYi0z OGJhLTkxNGQtNzFiMDFhMWNmNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKe0crfOyMcpmcYWIk2XmOiwJT3dQMHhpUgBzyzGCYa0wzqqT/CbAD13 ABs7X39Ya8mVg5SJbgX6lRmPxZssNWePBP4u2MRrJorgekbKpy+ZJHwsUY272H/Y S/0OGN07CiSfMY9oOsfOOvxLliaewU7gJ9n8zHhRxm40j3U00T1TBBKtK4fo/W2t oa/U+e4sndM5gMIw3xf0Ycq9O666pZmk6fZSN4VYTAVP4NoHRCNhz5Xz+MezuSYj IR2MLNeZHhhuN7EKn41i/uktaYzGcWAd80SdF5nXK654K/7cScsmwOPpqde836bn 8f6+wKVC3ckHVUxvzeQmswxHCn4OlHY= -----END CERTIFICATE-----Generated at Thu Sep 24 18:29:32 2026 by rpki-client