$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a83d5989-d430-31f8-981f-0a240528c7b0.roa File: a83d5989-d430-31f8-981f-0a240528c7b0.roa (raw, json) Hash identifier: RwUf+zJ88lJuVcHbAgQIULPzzRI61alah5bZcIvazfE= Subject key identifier: 35:85:88:F6:EE:63:27:01:5D:6D:64:6C:4D:C5:6F:79:09:29:39:D3 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D2196E7C6BB7E7766E30 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a83d5989-d430-31f8-981f-0a240528c7b0.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 64.16.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d2:19:6e:7c:6b:b7:e7:76:6e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=1496311e-cf52-4a17-8022-6c36b26011ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:83:04:1b:8d:d3:80:f7:c3:45:ad:91:87: 8f:4c:d5:6f:8c:df:aa:f1:d1:03:06:55:28:3c:85: ff:ae:e0:d8:a6:73:a4:51:d4:66:77:c5:65:c8:a4: 35:d7:af:67:6a:e9:a2:c6:19:97:46:5d:bb:af:c2: 93:38:cd:43:af:ca:b5:e0:5a:e0:e6:6f:82:48:f4: 65:f3:24:88:f9:97:2a:16:ad:c2:8d:be:95:38:57: 89:e0:29:3f:78:4c:c2:76:7d:97:ba:48:79:f3:0c: f2:9e:8e:3d:58:4a:6b:ad:69:eb:0e:be:2c:20:d6: 2b:1e:cf:57:33:50:14:d9:f9:e1:fc:1d:9d:ac:0c: cf:c3:a5:c4:c7:7b:e0:83:67:ca:fa:c5:ba:11:9d: 01:d0:fe:ad:8a:d7:6c:f1:93:cc:3e:83:a9:4f:0f: be:58:c8:a9:77:bc:a5:ca:5d:fe:6f:5c:b2:4a:f2: 58:fb:ee:98:33:64:c3:d8:9f:f7:00:ad:c4:f7:a2: fb:bc:0c:01:cc:89:d9:ab:3a:b8:f4:c1:78:85:d2: bd:6c:f5:d3:78:a1:fc:7b:5f:2f:29:ea:78:e1:f3: 4c:aa:19:4a:e1:97:38:e8:08:2f:f6:ad:51:69:50: ae:5b:f7:cc:92:fd:7e:78:b1:c6:f6:90:10:fc:70: 41:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:85:88:F6:EE:63:27:01:5D:6D:64:6C:4D:C5:6F:79:09:29:39:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a83d5989-d430-31f8-981f-0a240528c7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a2:a4:cc:7e:2c:4c:d2:30:4e:c5:ec:00:09:2d:ba:05:f3: 3f:4f:0e:e6:f2:a2:eb:6b:9e:82:9c:e1:d0:9b:43:9f:04:e9: 5b:47:d7:8f:52:80:a8:78:94:da:a4:55:fb:69:fa:a7:5f:14: 35:7c:fc:50:e1:7d:69:b0:74:80:4d:cf:3d:91:d8:7a:44:2f: a8:b8:5c:f6:bf:64:7f:67:83:cf:7b:d4:52:b7:f5:0b:bb:59: 2b:ea:a4:a2:64:7b:61:b1:08:d3:26:58:6e:86:b7:b1:4a:05: 25:bf:d1:3f:09:f5:7b:71:46:45:da:fd:04:d8:eb:1d:61:91: 1b:8a:56:03:d1:d6:96:a9:60:4c:59:ff:4b:b6:05:2b:eb:2e: e9:a2:23:52:a5:f8:1b:97:01:24:25:1c:a6:6c:5e:bc:9b:da: 7e:8b:93:4e:ab:f7:78:2e:11:05:3c:f2:69:b3:96:d8:c5:a9: 50:d9:c8:42:0b:58:22:a0:53:f1:c1:cd:d8:de:77:a2:88:33: 93:d7:15:06:81:54:05:3e:d0:36:0e:66:0e:02:73:9f:fb:41: f6:89:81:cc:01:e0:ff:ca:52:ad:3d:02:11:d9:81:27:87:a6: 8d:6d:b9:94:ed:58:b0:48:0d:cf:33:71:b2:29:bf:b7:94:64: a0:8e:de:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99IZbnxrt+d2bjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MTQ5NjMxMWUtY2Y1Mi00YTE3LTgwMjItNmMzNmIyNjAxMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyGDBBuN04D3w0WtkYePTNVvjN+q8dEDBlUo PIX/ruDYpnOkUdRmd8VlyKQ1169naumixhmXRl27r8KTOM1Dr8q14Frg5m+CSPRl 8ySI+ZcqFq3Cjb6VOFeJ4Ck/eEzCdn2Xukh58wzyno49WEprrWnrDr4sINYrHs9X M1AU2fnh/B2drAzPw6XEx3vgg2fK+sW6EZ0B0P6titds8ZPMPoOpTw++WMipd7yl yl3+b1yySvJY++6YM2TD2J/3AK3E96L7vAwBzInZqzq49MF4hdK9bPXTeKH8e18v Kep44fNMqhlK4Zc46Agv9q1RaVCuW/fMkv1+eLHG9pAQ/HBBmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWFiPbuYycBXW1kbE3Fb3kJKTnTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTgzZDU5ODktZDQzMC0z MWY4LTk4MWYtMGEyNDA1MjhjN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeipMx+LEzSME7F7AAJLboF8z9PDubyoutrnoKc4dCbQ58E6VtH149S gKh4lNqkVftp+qdfFDV8/FDhfWmwdIBNzz2R2HpEL6i4XPa/ZH9ng8971FK39Qu7 WSvqpKJke2GxCNMmWG6Gt7FKBSW/0T8J9XtxRkXa/QTY6x1hkRuKVgPR1papYExZ /0u2BSvrLumiI1Kl+BuXASQlHKZsXryb2n6Lk06r93guEQU88mmzltjFqVDZyEIL WCKgU/HBzdjed6KIM5PXFQaBVAU+0DYOZg4Cc5/7QfaJgcwB4P/KUq09AhHZgSeH po1tuZTtWLBIDc8zcbIpv7eUZKCO3tc= -----END CERTIFICATE-----Generated at Mon Oct 12 19:29:12 2026 by rpki-client