$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a49d0180-d5c9-3a29-8d7a-9eca74c4b314.roa File: a49d0180-d5c9-3a29-8d7a-9eca74c4b314.roa (raw, json) Hash identifier: 1l1tYpuqjCb10xvln7gVnFRX7BKmy38PTfvXb3ZVHzE= Subject key identifier: 64:FE:FE:90:F4:EF:F4:E2:03:3E:94:12:2F:B8:A2:1E:A9:49:34:BE Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A7A8A5DDC9E38BD74540 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a49d0180-d5c9-3a29-8d7a-9eca74c4b314.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a7:a8:a5:dd:c9:e3:8b:d7:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=9ede8d35-06c6-42af-95ff-931972f0444b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:63:d5:26:e2:20:e0:8b:06:f5:de:c5:a4: a4:09:ef:1d:8c:a8:6d:0a:c6:18:0d:ec:cf:dc:99: f3:27:19:1a:ea:1d:8b:f6:72:9f:33:51:79:7a:5b: ed:03:b0:6e:47:eb:3a:83:e4:7b:8c:85:df:65:90: 88:ec:4b:3d:a9:e9:63:6e:44:9a:8a:25:22:6b:11: eb:00:84:8e:ea:c1:18:c9:50:50:b4:3b:04:dc:4e: 8e:a8:d3:14:3b:44:fe:b8:c6:68:01:1e:4c:44:b7: 35:b0:5a:44:cc:03:6e:bb:86:66:b6:d1:95:27:1a: cb:fe:3f:33:63:0b:0b:37:4f:76:d7:83:42:97:e9: 28:d2:72:94:0c:eb:61:fd:ce:67:2a:27:ac:34:34: 98:c3:f7:11:0f:a3:2c:c5:12:ec:e8:5c:03:30:e9: 6d:40:6a:6e:50:ef:5a:e7:11:06:fb:86:a4:dc:84: dc:90:38:c8:64:6a:a2:76:58:84:c7:88:f7:d8:f3: 59:18:30:76:1d:2f:74:81:10:1f:6a:b2:45:b9:60: 47:7d:67:81:f5:82:b8:a2:e4:bd:89:bf:0f:5c:e0: 75:1f:34:5b:d3:dd:54:51:10:c2:d0:94:4d:a4:68: f3:7c:8d:0f:03:20:7b:ac:7d:94:97:9f:fd:e2:0d: c4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FE:FE:90:F4:EF:F4:E2:03:3E:94:12:2F:B8:A2:1E:A9:49:34:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a49d0180-d5c9-3a29-8d7a-9eca74c4b314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:86:d4:23:76:42:4c:bb:09:1b:f8:3c:c2:ca:11:ac:bc:32: 2b:51:db:bb:43:ce:7e:4c:14:8a:8f:8a:ae:ca:37:f6:6c:69: 28:a4:ef:64:71:97:0a:ca:15:a9:4d:7a:78:b7:36:ba:1a:e1: e1:ab:fb:54:81:b3:53:6f:ef:92:2e:87:83:ad:4a:56:75:0e: 29:bc:dc:bb:23:31:a0:a0:ce:04:ff:fa:81:63:82:5f:85:82: 93:74:11:ae:9e:5d:bb:2c:38:2a:60:6a:28:4a:b9:72:5f:27: ae:a9:50:4c:97:27:52:50:18:dd:28:17:f1:67:82:d8:61:34: 02:fc:2a:74:3d:75:3f:f7:eb:94:d5:61:4e:a9:74:0b:20:66: dd:95:d1:96:a0:00:01:c3:e7:0b:0b:2d:ef:c0:2f:cb:2c:45: 52:2a:b7:02:5c:15:96:e3:8e:33:8e:54:66:91:18:bb:f7:56: 07:0b:09:bd:cb:9c:90:42:32:b3:27:87:9b:9f:bb:c0:cd:13: 3a:bc:a6:0f:e2:a8:99:e6:49:f6:de:64:3f:7f:ad:3a:16:ae: 7e:ec:1d:26:b8:32:ea:49:9d:64:fd:ec:37:54:8e:7b:5e:29: d1:f9:db:e4:2d:14:94:0f:71:3f:98:f3:84:b9:bf:94:98:5f: fb:7d:b3:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96eopd3J44vXRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OWVkZThkMzUtMDZjNi00MmFmLTk1ZmYtOTMxOTcyZjA0NDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Vj1SbiIOCLBvXexaSkCe8djKhtCsYYDezP 3JnzJxka6h2L9nKfM1F5elvtA7BuR+s6g+R7jIXfZZCI7Es9qeljbkSaiiUiaxHr AISO6sEYyVBQtDsE3E6OqNMUO0T+uMZoAR5MRLc1sFpEzANuu4ZmttGVJxrL/j8z YwsLN09214NCl+ko0nKUDOth/c5nKiesNDSYw/cRD6MsxRLs6FwDMOltQGpuUO9a 5xEG+4ak3ITckDjIZGqidliEx4j32PNZGDB2HS90gRAfarJFuWBHfWeB9YK4ouS9 ib8PXOB1HzRb091UURDC0JRNpGjzfI0PAyB7rH2Ul5/94g3ElwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT+/pD07/TiAz6UEi+4oh6pSTS+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTQ5ZDAxODAtZDVjOS0z YTI5LThkN2EtOWVjYTc0YzRiMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGG1CN2Qky7CRv4PMLKEay8MitR27tDzn5MFIqPiq7KN/ZsaSik72Rx lwrKFalNeni3Nroa4eGr+1SBs1Nv75Iuh4OtSlZ1Dim83LsjMaCgzgT/+oFjgl+F gpN0Ea6eXbssOCpgaihKuXJfJ66pUEyXJ1JQGN0oF/FngthhNAL8KnQ9dT/365TV YU6pdAsgZt2V0ZagAAHD5wsLLe/AL8ssRVIqtwJcFZbjjjOOVGaRGLv3VgcLCb3L nJBCMrMnh5ufu8DNEzq8pg/iqJnmSfbeZD9/rToWrn7sHSa4MupJnWT97DdUjnte KdH52+QtFJQPcT+Y84S5v5SYX/t9szU= -----END CERTIFICATE-----Generated at Fri Sep 25 20:03:06 2026 by rpki-client