$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b7f4aeb0-8342-3c43-836c-68b8e6b66737.roa File: b7f4aeb0-8342-3c43-836c-68b8e6b66737.roa (raw, json) Hash identifier: ZNT+q+xbAdyaf4K5NWpaRpiVXwMp02M7m7GU+LNRCPc= Subject key identifier: 5C:AF:49:87:E4:41:43:03:83:73:89:69:37:C0:E9:25:FC:77:A1:6E Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D5809F15BA0D64E82E00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b7f4aeb0-8342-3c43-836c-68b8e6b66737.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d5:80:9f:15:ba:0d:64:e8:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=15efebec-b72d-483b-9642-1cc608e84e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a7:4f:bc:d6:9b:14:ba:db:b0:b8:71:e6:da: 21:e8:67:05:77:4c:8d:9d:ed:fd:f3:d9:a7:c6:16: 15:4d:76:98:3d:97:54:8a:74:17:6b:4f:78:f4:ba: 75:37:b0:a8:b8:f2:1c:e4:8a:4d:98:8b:77:26:24: 50:a4:40:62:68:6f:b4:35:02:62:1a:ed:37:18:fb: a7:e6:c4:c7:58:f9:fb:8c:4b:43:1e:8a:e1:b1:02: 9e:30:78:e7:b8:34:9f:29:91:7f:6c:ed:0d:dd:67: d8:7d:88:40:a4:07:2e:9e:31:bf:e6:e7:19:16:8a: 31:79:49:4e:dd:3e:16:42:e8:04:e9:15:26:39:e7: ca:dd:0f:b4:a8:02:9b:56:60:07:cf:cb:8d:f1:30: d2:26:ed:1e:e9:82:83:91:a6:33:94:3c:66:23:40: ae:37:d7:19:e2:a4:c8:9c:0d:d3:6b:99:33:e1:02: a7:28:d3:8e:23:bd:2b:1c:73:ca:5c:2e:32:e2:7f: 04:58:79:a9:1b:24:05:d5:c9:5b:b0:2c:2f:99:c0: 8d:72:df:12:23:07:96:2b:89:1b:a0:c9:62:94:09: c9:8a:4b:37:dc:71:18:0e:1d:99:17:eb:f1:97:76: a8:84:d0:99:29:85:56:d4:94:af:5e:bd:85:fe:f2: ee:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AF:49:87:E4:41:43:03:83:73:89:69:37:C0:E9:25:FC:77:A1:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b7f4aeb0-8342-3c43-836c-68b8e6b66737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:2a:c3:bc:2f:45:a7:4c:a4:c5:e7:53:84:8d:b1:a7:1f:70: cf:64:85:ce:22:9b:c9:13:49:90:2e:c7:e8:95:67:06:3e:90: c5:3d:27:e3:0f:fc:65:b3:0f:f2:4e:a4:f8:8e:cd:52:d8:d3: d0:1a:82:fa:41:73:77:14:ad:4d:4b:af:06:3a:08:ba:ce:7a: 05:86:74:89:55:5a:40:c2:b3:9d:16:73:af:8f:eb:5a:08:4b: 8b:2c:02:78:d7:8f:7e:3f:5f:60:d5:d1:b0:17:29:fd:40:78: d9:cc:e6:d8:18:03:28:3f:f5:96:b5:33:87:2b:be:8f:17:ad: f6:38:ef:95:4d:32:fe:92:72:93:89:41:8e:e7:e7:47:56:4a: c0:66:3b:9b:d0:a7:55:38:1a:86:c8:55:20:45:5a:78:1f:b1: d2:95:b2:e0:75:a4:e2:91:f5:db:0d:07:84:2c:c8:23:7d:fc: ab:ab:c7:f0:f7:c6:fc:b3:46:bf:4f:51:20:e4:3f:01:89:b4: f0:ed:80:61:e7:07:fa:c3:08:2a:f9:92:97:8b:59:d0:38:cb: 42:99:46:5b:1a:2f:3a:1d:84:9d:96:aa:d7:7e:03:44:5f:b6: e2:b6:53:7e:67:ac:7c:ca:69:5d:40:c8:94:84:5a:f0:e6:6f: 33:b2:2e:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99WAnxW6DWToLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MTVlZmViZWMtYjcyZC00ODNiLTk2NDItMWNjNjA4ZTg0ZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0adPvNabFLrbsLhx5toh6GcFd0yNne3989mn xhYVTXaYPZdUinQXa0949Lp1N7CouPIc5IpNmIt3JiRQpEBiaG+0NQJiGu03GPun 5sTHWPn7jEtDHorhsQKeMHjnuDSfKZF/bO0N3WfYfYhApAcunjG/5ucZFooxeUlO 3T4WQugE6RUmOefK3Q+0qAKbVmAHz8uN8TDSJu0e6YKDkaYzlDxmI0CuN9cZ4qTI nA3Ta5kz4QKnKNOOI70rHHPKXC4y4n8EWHmpGyQF1clbsCwvmcCNct8SIweWK4kb oMlilAnJiks33HEYDh2ZF+vxl3aohNCZKYVW1JSvXr2F/vLuKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyvSYfkQUMDg3OJaTfA6SX8d6FuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYjdmNGFlYjAtODM0Mi0z YzQzLTgzNmMtNjhiOGU2YjY2NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAqw7wvRadMpMXnU4SNsacfcM9khc4im8kTSZAux+iVZwY+kMU9J+MP /GWzD/JOpPiOzVLY09AagvpBc3cUrU1LrwY6CLrOegWGdIlVWkDCs50Wc6+P61oI S4ssAnjXj34/X2DV0bAXKf1AeNnM5tgYAyg/9Za1M4crvo8XrfY475VNMv6ScpOJ QY7n50dWSsBmO5vQp1U4GobIVSBFWngfsdKVsuB1pOKR9dsNB4QsyCN9/Kurx/D3 xvyzRr9PUSDkPwGJtPDtgGHnB/rDCCr5kpeLWdA4y0KZRlsaLzodhJ2Wqtd+A0Rf tuK2U35nrHzKaV1AyJSEWvDmbzOyLoQ= -----END CERTIFICATE-----Generated at Sun Oct 4 00:30:34 2026 by rpki-client