$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b8118dcf-938b-3b61-969a-234da348456c.roa File: b8118dcf-938b-3b61-969a-234da348456c.roa (raw, json) Hash identifier: Fi9xGssFmIaa1xnOlBnwPCwO3WIwpibJD1VUgKjrCsQ= Subject key identifier: FF:F1:76:0A:83:01:0C:FA:72:A5:C6:39:71:53:B9:FE:7C:09:B4:97 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B3FBAA71C2514316D3B8 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b8118dcf-938b-3b61-969a-234da348456c.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b3:fb:aa:71:c2:51:43:16:d3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=2513739a-3018-4b7b-bd4b-f196362486c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:8d:53:69:6e:b8:11:fb:d3:f7:d3:85:dd: 9c:5c:46:3d:51:4c:75:49:64:d6:fa:27:b7:c4:81: f1:cd:43:ac:ab:ba:4d:a7:05:38:dd:81:48:50:40: f3:96:7a:7d:79:61:89:b1:0b:b5:eb:ea:2f:3c:66: 92:88:92:b3:1a:63:f9:3f:c0:d8:57:ed:d8:ea:e9: f0:e8:95:91:e1:68:32:6a:84:ad:ba:eb:73:17:fe: 27:31:a6:24:5a:69:d4:54:00:43:1b:e3:26:ff:05: 0f:03:24:31:e1:83:72:d5:d6:21:22:09:ed:a0:0b: ee:92:43:95:7e:40:3d:b2:a3:eb:a3:c1:8b:bc:b7: cb:b6:f0:a3:77:ee:75:a8:49:9c:03:0b:bd:85:91: 93:4f:4c:0f:f8:b7:53:44:72:b0:87:75:77:9a:b4: ad:8c:aa:0a:99:3b:82:94:e9:ae:15:67:2d:70:2b: 93:3e:da:a4:8c:a5:4f:c0:10:30:b1:8a:6e:7f:ca: 51:24:c8:72:99:25:f0:a2:46:2c:20:65:c2:7d:15: 2b:b6:ed:e7:7e:ae:fc:92:30:59:66:e9:74:7c:eb: e1:df:6c:cb:e7:aa:fc:20:8f:89:90:a4:ef:37:f8: 1c:5c:8a:83:28:92:36:c0:b2:1e:9e:f6:68:10:be: 15:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F1:76:0A:83:01:0C:FA:72:A5:C6:39:71:53:B9:FE:7C:09:B4:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b8118dcf-938b-3b61-969a-234da348456c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:46:4d:dd:cb:98:e9:43:b8:94:00:75:91:c3:f8:5c:42:4e: bc:99:69:3b:07:a2:8c:45:33:25:4f:9e:41:b7:1c:f6:8a:eb: c4:46:db:ea:09:52:51:24:c1:61:6e:c2:e8:73:e1:3f:48:01: 0a:b8:5b:b8:3a:35:45:26:d7:7a:3e:b5:f2:d3:7e:5d:37:3b: 7f:98:07:8c:1a:c8:01:ca:7c:c3:2f:09:f6:82:5f:a7:4b:6e: a6:92:ad:59:82:27:65:2e:79:0c:3f:79:8d:b2:32:79:f7:a6: 60:f4:29:12:1c:06:5a:f9:11:da:d8:16:c1:8c:f8:c2:68:7d: 99:56:12:d6:0e:58:45:40:10:6e:c5:a3:a4:8a:9f:04:9c:7e: 41:f8:9e:b8:e9:02:6a:ba:ce:df:c1:8b:3e:fa:a0:12:ff:22: d2:ba:3e:5a:13:54:ee:e2:81:de:d4:99:4b:6f:e3:54:a8:44: 4f:a4:f9:b7:99:69:83:bd:1d:cd:24:e9:44:4e:59:50:f2:d8: b4:7c:4c:bc:20:7d:16:16:d5:f1:90:b9:b0:16:4b:65:a3:89: c3:05:f0:bb:12:fb:a3:9c:d2:c4:24:b4:d7:95:9e:3d:c9:5f: d8:c4:36:ce:79:dc:43:ad:fd:3e:17:99:f0:f9:a3:ad:aa:4b: 0f:9b:89:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97P7qnHCUUMW07gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MjUxMzczOWEtMzAxOC00YjdiLWJkNGItZjE5NjM2MjQ4NmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1eNU2luuBH70/fThd2cXEY9UUx1SWTW+ie3 xIHxzUOsq7pNpwU43YFIUEDzlnp9eWGJsQu16+ovPGaSiJKzGmP5P8DYV+3Y6unw 6JWR4WgyaoStuutzF/4nMaYkWmnUVABDG+Mm/wUPAyQx4YNy1dYhIgntoAvukkOV fkA9sqPro8GLvLfLtvCjd+51qEmcAwu9hZGTT0wP+LdTRHKwh3V3mrStjKoKmTuC lOmuFWctcCuTPtqkjKVPwBAwsYpuf8pRJMhymSXwokYsIGXCfRUrtu3nfq78kjBZ Zul0fOvh32zL56r8II+JkKTvN/gcXIqDKJI2wLIenvZoEL4VhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/xdgqDAQz6cqXGOXFTuf58CbSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYjgxMThkY2YtOTM4Yi0z YjYxLTk2OWEtMjM0ZGEzNDg0NTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpGTd3LmOlDuJQAdZHD+FxCTryZaTsHooxFMyVPnkG3HPaK68RG2+oJ UlEkwWFuwuhz4T9IAQq4W7g6NUUm13o+tfLTfl03O3+YB4wayAHKfMMvCfaCX6dL bqaSrVmCJ2UueQw/eY2yMnn3pmD0KRIcBlr5EdrYFsGM+MJofZlWEtYOWEVAEG7F o6SKnwScfkH4nrjpAmq6zt/Biz76oBL/ItK6PloTVO7igd7UmUtv41SoRE+k+beZ aYO9Hc0k6UROWVDy2LR8TLwgfRYW1fGQubAWS2WjicMF8LsS+6Oc0sQktNeVnj3J X9jENs553EOt/T4XmfD5o62qSw+biYs= -----END CERTIFICATE-----Generated at Sun Oct 11 07:57:23 2026 by rpki-client