$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b25e9c3b-5ea1-3eae-95e8-3de9f9f30be1.roa File: b25e9c3b-5ea1-3eae-95e8-3de9f9f30be1.roa (raw, json) Hash identifier: Sww3riqexfKYtBOt+DwUvl3zO23pIIDNEvOFDrYqwys= Subject key identifier: C1:C6:D0:66:7C:F9:31:F4:61:D1:69:A0:C0:4F:36:0F:DD:78:85:AB Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B341320E514CECC4BA00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b25e9c3b-5ea1-3eae-95e8-3de9f9f30be1.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b3:41:32:0e:51:4c:ec:c4:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=1bb7aab8-cdeb-493a-b037-2f9bd72aca40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6e:12:c7:bd:37:dd:ee:9b:94:f7:ac:23:b9: 69:bd:8c:10:67:0c:f9:25:a7:21:0c:ec:fd:0b:b0: e5:87:f4:22:eb:dc:4d:5b:85:22:05:a0:5e:fd:75: 03:f2:63:1e:38:37:45:20:46:d0:cc:02:56:a1:61: 93:fc:80:d2:d6:35:d0:bd:1a:67:7d:14:a0:ed:8c: d3:8a:a4:3e:4d:00:21:51:35:78:63:69:0a:bd:ce: 2d:e1:a3:9c:8d:da:13:71:38:42:26:b5:ec:57:0d: 3e:1f:03:e2:da:25:ec:0f:61:8b:f2:df:55:2b:4a: 74:d5:4a:d6:a6:2c:b9:d3:4f:1d:12:26:15:c9:eb: 87:cd:e4:dc:16:81:94:b2:94:9d:ae:84:38:ff:8e: d9:c0:73:e0:b6:d1:2a:55:74:3d:fe:a7:f0:18:b1: 2a:34:df:72:10:3a:d3:1d:6b:2c:95:50:b1:33:de: e0:5b:a0:ae:78:fe:b2:2f:6e:5c:56:52:c2:8d:6d: 06:18:d8:3f:1b:1c:40:3f:9c:9d:9d:3b:4e:65:eb: e4:af:ba:66:41:14:73:ec:97:1c:b8:45:90:96:3b: 02:57:0d:96:f7:e0:6f:14:90:35:cf:a3:fd:85:af: 8e:95:64:98:92:ea:d0:03:61:ce:af:23:34:25:a5: 7b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C6:D0:66:7C:F9:31:F4:61:D1:69:A0:C0:4F:36:0F:DD:78:85:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b25e9c3b-5ea1-3eae-95e8-3de9f9f30be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:af:f6:98:3e:5e:21:17:69:b7:18:43:9f:ab:34:a2:57:79: e7:79:b7:09:0b:f3:bc:f1:56:06:f2:bd:fd:38:7c:a6:85:61: ab:be:be:c8:be:db:72:db:7f:05:bb:2a:2c:7b:4a:e1:4d:8f: 6a:9a:6b:16:4d:a4:b6:e7:3f:8c:4c:62:4c:d0:94:ce:84:b3: eb:17:70:66:a1:9e:fb:e6:92:e1:aa:98:65:80:bf:c7:40:ed: ec:77:5b:53:a5:8d:68:80:16:19:10:95:a5:61:d4:6e:60:0d: 09:b2:a1:9a:c9:93:f0:ed:d5:4b:48:cf:ba:25:9a:8b:9e:0f: 47:b4:10:e0:5e:75:fa:f2:31:6d:fa:ed:67:3e:2e:d0:d4:be: 8c:16:9c:16:76:d7:09:f5:d0:95:54:20:7b:36:42:c3:ee:ca: 97:73:e8:ad:b3:cc:0c:c3:48:be:94:a7:cd:95:42:50:9d:08: e8:75:b3:9c:51:bb:ca:00:af:c3:79:45:98:34:d3:c7:ed:7a: 97:4e:3c:5a:39:7e:a8:18:66:5c:44:8b:77:75:02:5a:b5:11: f2:aa:e7:b9:79:44:4b:9f:52:10:c8:4b:b8:7f:9c:e2:ce:ad: 90:4c:66:b0:97:dd:ca:b0:59:8d:e5:eb:44:9b:5b:5e:13:bb: 10:a9:da:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97NBMg5RTOzEugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MWJiN2FhYjgtY2RlYi00OTNhLWIwMzctMmY5YmQ3MmFjYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW4Sx7033e6blPesI7lpvYwQZwz5JachDOz9 C7Dlh/Qi69xNW4UiBaBe/XUD8mMeODdFIEbQzAJWoWGT/IDS1jXQvRpnfRSg7YzT iqQ+TQAhUTV4Y2kKvc4t4aOcjdoTcThCJrXsVw0+HwPi2iXsD2GL8t9VK0p01UrW piy5008dEiYVyeuHzeTcFoGUspSdroQ4/47ZwHPgttEqVXQ9/qfwGLEqNN9yEDrT HWsslVCxM97gW6CueP6yL25cVlLCjW0GGNg/GxxAP5ydnTtOZevkr7pmQRRz7Jcc uEWQljsCVw2W9+BvFJA1z6P9ha+OlWSYkurQA2HOryM0JaV7xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHG0GZ8+TH0YdFpoMBPNg/deIWrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYjI1ZTljM2ItNWVhMS0z ZWFlLTk1ZTgtM2RlOWY5ZjMwYmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2v9pg+XiEXabcYQ5+rNKJXeed5twkL87zxVgbyvf04fKaFYau+vsi+ 23LbfwW7Kix7SuFNj2qaaxZNpLbnP4xMYkzQlM6Es+sXcGahnvvmkuGqmGWAv8dA 7ex3W1OljWiAFhkQlaVh1G5gDQmyoZrJk/Dt1UtIz7olmoueD0e0EOBedfryMW36 7Wc+LtDUvowWnBZ21wn10JVUIHs2QsPuypdz6K2zzAzDSL6Up82VQlCdCOh1s5xR u8oAr8N5RZg008ftepdOPFo5fqgYZlxEi3d1Alq1EfKq57l5REufUhDIS7h/nOLO rZBMZrCX3cqwWY3l60SbW14TuxCp2uM= -----END CERTIFICATE-----Generated at Sat Sep 26 18:53:32 2026 by rpki-client