$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a5f393d2-3dfc-365d-b786-29802417a9a8.roa File: a5f393d2-3dfc-365d-b786-29802417a9a8.roa (raw, json) Hash identifier: UpE0+QmiLvfGxBzIcoLtjTsDYuccL6BEGhLSctvm178= Subject key identifier: 52:B3:B7:D3:8E:24:79:8E:09:96:D2:D5:FF:0A:64:45:15:5C:46:89 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D4DABCFF7C08CC956B80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a5f393d2-3dfc-365d-b786-29802417a9a8.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d4:da:bc:ff:7c:08:cc:95:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=10559bd0-9563-4dc9-a263-1c93387c9f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:11:c5:84:10:d5:81:15:08:e7:1e:c7:37:0b: e0:26:2a:e8:55:90:34:88:cf:0a:32:01:1f:ff:c2: 25:74:72:b8:4b:ee:73:21:82:be:24:02:c3:3a:a0: 2a:cf:51:92:f2:16:22:7f:82:97:38:53:56:9f:c0: 37:80:42:07:57:f9:38:6a:3f:4e:51:ab:30:f6:d1: bc:5e:6e:78:fd:50:cd:8a:67:88:30:83:59:98:df: 96:6b:d5:f3:1b:0c:0e:05:18:4d:87:43:61:6a:27: 53:95:de:98:62:d3:96:59:fe:03:3f:0b:33:f1:be: 5e:b4:c2:d7:02:fc:14:72:f6:29:4b:b1:35:7d:15: 39:8d:d9:d1:22:c0:5e:68:ba:9d:98:0a:7f:5c:ea: b2:e9:cc:f3:c4:2b:51:d9:13:ea:54:6b:20:3d:f8: f8:63:24:b2:17:0d:9e:2b:44:f2:1f:d8:b0:92:5f: 53:fd:e9:70:57:27:be:f8:1a:3c:eb:ae:1e:aa:08: ae:ff:0f:c2:8a:6a:86:6b:4b:05:19:b6:52:c2:b4: 89:9a:0a:76:60:7e:b7:39:f6:67:b7:8d:ba:23:1c: d7:fe:4d:31:f4:9e:6f:89:a1:94:42:d0:3b:27:2e: d6:0e:3c:ec:d7:71:94:86:38:0e:17:9c:f6:18:86: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B3:B7:D3:8E:24:79:8E:09:96:D2:D5:FF:0A:64:45:15:5C:46:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a5f393d2-3dfc-365d-b786-29802417a9a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:71:9c:04:b5:a0:50:a7:6d:92:b5:89:78:e9:bb:86:5c:83: 54:fa:ea:d2:c4:89:4c:c4:3c:c1:fb:13:d9:a0:0f:dc:8b:53: 86:f5:36:de:18:e4:74:27:3d:38:29:b2:e3:01:c4:d0:1d:b7: a6:93:c5:e4:46:a1:56:18:79:3c:37:67:4a:eb:ec:0f:c6:a0: f3:25:3e:59:d0:7b:fd:cd:57:42:42:ef:27:4a:a2:25:cc:ad: 79:04:a1:a0:2e:53:9a:93:ae:c7:8f:95:e0:98:b7:12:3c:a9: 83:eb:2f:62:46:0f:bc:78:66:7c:f3:b2:16:04:ba:5d:87:b8: 9d:5e:c3:58:f3:d6:d2:61:22:ed:5c:4d:2c:88:df:4b:35:15: 5a:cf:9e:df:ea:01:39:1a:9c:b4:0d:86:59:ab:ce:d8:a0:9f: 91:65:62:0e:09:7f:26:7b:e1:b8:31:7a:33:c3:b9:3d:9b:b4: c1:40:a1:18:ff:c1:c7:61:d5:0c:2d:ce:ef:58:28:7b:99:9c: a3:56:49:51:0a:05:74:41:fc:0a:47:26:c4:f5:60:67:4e:ee: ba:31:be:9d:0d:51:29:d3:33:a6:8e:05:05:02:c5:d0:67:68: 36:f2:b8:eb:e2:22:c1:65:8e:e5:3b:cf:99:ce:aa:f8:bc:24: 36:81:fd:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99TavP98CMyVa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MTA1NTliZDAtOTU2My00ZGM5LWEyNjMtMWM5MzM4N2M5ZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxHFhBDVgRUI5x7HNwvgJiroVZA0iM8KMgEf /8IldHK4S+5zIYK+JALDOqAqz1GS8hYif4KXOFNWn8A3gEIHV/k4aj9OUasw9tG8 Xm54/VDNimeIMINZmN+Wa9XzGwwOBRhNh0NhaidTld6YYtOWWf4DPwsz8b5etMLX AvwUcvYpS7E1fRU5jdnRIsBeaLqdmAp/XOqy6czzxCtR2RPqVGsgPfj4YySyFw2e K0TyH9iwkl9T/elwVye++Bo8664eqgiu/w/CimqGa0sFGbZSwrSJmgp2YH63OfZn t426IxzX/k0x9J5viaGUQtA7Jy7WDjzs13GUhjgOF5z2GIaxlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKzt9OOJHmOCZbS1f8KZEUVXEaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTVmMzkzZDItM2RmYy0z NjVkLWI3ODYtMjk4MDI0MTdhOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBClMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlxnAS1oFCnbZK1iXjpu4Zcg1T66tLEiUzEPMH7E9mgD9yLU4b1Nt4Y 5HQnPTgpsuMBxNAdt6aTxeRGoVYYeTw3Z0rr7A/GoPMlPlnQe/3NV0JC7ydKoiXM rXkEoaAuU5qTrsePleCYtxI8qYPrL2JGD7x4ZnzzshYEul2HuJ1ew1jz1tJhIu1c TSyI30s1FVrPnt/qATkanLQNhlmrztign5FlYg4JfyZ74bgxejPDuT2btMFAoRj/ wcdh1Qwtzu9YKHuZnKNWSVEKBXRB/ApHJsT1YGdO7roxvp0NUSnTM6aOBQUCxdBn aDbyuOviIsFljuU7z5nOqvi8JDaB/bg= -----END CERTIFICATE-----Generated at Sat Sep 26 04:04:13 2026 by rpki-client