$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c2bbbf5c-8486-3cc9-9800-c31a3c482d72.roa File: c2bbbf5c-8486-3cc9-9800-c31a3c482d72.roa (raw, json) Hash identifier: dqsOoL+JRZ4weGbCNezhnOVG+DiwmS1XHDFEVW2h/BE= Subject key identifier: 6E:A5:0D:0F:22:5B:17:EC:39:D3:19:54:4F:CB:03:C4:FD:FE:72:B9 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B4138A65F1131E0CD9C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c2bbbf5c-8486-3cc9-9800-c31a3c482d72.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b4:13:8a:65:f1:13:1e:0c:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=43e6dfee-ccd0-4fd4-add8-c41f6a7e9782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f0:8e:f2:41:5d:53:3c:69:5b:74:05:9e:13: ea:7b:a6:86:d0:6a:ba:1d:77:11:45:64:0c:56:ba: c8:d3:5e:c5:26:45:d4:99:80:e6:15:b1:8f:f5:13: 87:c5:bf:00:84:fd:d4:e0:c1:50:17:29:cd:3e:9b: 0f:69:ab:72:c9:1a:a2:4a:7f:76:3a:38:de:16:52: 23:f5:4c:ff:91:70:b2:e6:d8:f5:b2:4f:f5:56:8a: 77:b5:57:9f:58:b6:fb:60:65:69:5a:78:41:ce:9e: 71:d0:b4:05:b9:b1:90:cd:b2:25:b5:3e:21:6f:03: e7:93:09:f3:8e:df:c9:fc:41:41:e8:a6:11:e1:91: 2f:47:d1:0e:4c:e1:6d:a9:8f:9d:b0:2b:35:75:62: da:5c:e2:4d:24:54:33:c1:3a:38:d5:af:fb:52:61: 2a:b0:6a:f6:8c:53:55:5e:44:f3:b1:da:1a:e9:63: 8a:93:cf:05:87:03:0b:3c:ff:c2:ce:0d:04:bc:58: cb:6c:1f:0d:a6:68:5a:5f:80:35:0d:8e:a6:df:4c: c7:e8:11:3b:06:e8:4a:87:45:67:2d:1f:93:08:af: 7b:73:9b:3d:f3:87:f3:3f:b5:68:38:1c:ca:43:67: 62:15:a9:50:42:95:bd:26:cd:35:f1:ee:17:6e:17: 1e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A5:0D:0F:22:5B:17:EC:39:D3:19:54:4F:CB:03:C4:FD:FE:72:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c2bbbf5c-8486-3cc9-9800-c31a3c482d72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:19:e9:69:ec:e2:f4:90:dd:58:6e:f7:43:3d:cb:72:21:6b: 62:b5:2c:f8:71:ea:d9:46:c4:10:0a:08:d8:49:4b:af:db:55: 35:e7:e2:1d:f7:b6:2c:cd:71:35:f7:4c:2f:89:b4:5b:d9:64: d6:d5:44:cc:9a:b4:13:06:5f:9b:79:a0:09:75:00:2c:3b:1c: ce:7b:ed:e1:b2:ca:35:b3:a2:97:6f:30:35:85:70:86:f5:67: da:f2:6f:13:cf:89:e5:fa:fc:5c:34:df:6f:a5:00:00:cf:b6: 99:50:4f:da:19:3b:da:23:05:63:c0:9a:27:60:3a:03:ac:c2: 9d:2a:ae:49:66:07:87:4c:93:2b:2f:7d:f0:a3:8b:0a:c1:a5: 36:27:50:5a:73:eb:2c:4b:7f:e7:5f:d7:f8:fd:3a:27:83:4b: c2:7b:54:d3:df:94:a7:3b:5c:36:4a:27:87:5c:18:8d:65:51: cb:86:33:3e:b0:c1:ab:1a:bf:11:74:eb:3b:a3:52:f8:c9:24: 1a:1e:aa:8b:f4:c5:0d:fc:2b:b6:be:f1:d4:6d:26:93:af:b0: f0:35:d7:28:90:b6:2c:4f:a0:3f:a3:bb:5d:c4:4e:74:c2:8e: 53:37:43:9a:b1:5b:cb:89:c2:58:87:98:82:7a:a0:b2:99:e6: 01:35:3b:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97QTimXxEx4M2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDNlNmRmZWUtY2NkMC00ZmQ0LWFkZDgtYzQxZjZhN2U5NzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fCO8kFdUzxpW3QFnhPqe6aG0Gq6HXcRRWQM VrrI017FJkXUmYDmFbGP9ROHxb8AhP3U4MFQFynNPpsPaatyyRqiSn92OjjeFlIj 9Uz/kXCy5tj1sk/1Vop3tVefWLb7YGVpWnhBzp5x0LQFubGQzbIltT4hbwPnkwnz jt/J/EFB6KYR4ZEvR9EOTOFtqY+dsCs1dWLaXOJNJFQzwTo41a/7UmEqsGr2jFNV XkTzsdoa6WOKk88FhwMLPP/Czg0EvFjLbB8NpmhaX4A1DY6m30zH6BE7BuhKh0Vn LR+TCK97c5s984fzP7VoOBzKQ2diFalQQpW9Js018e4XbhceqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6lDQ8iWxfsOdMZVE/LA8T9/nK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYzJiYmJmNWMtODQ4Ni0z Y2M5LTk4MDAtYzMxYTNjNDgyZDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQZ6Wns4vSQ3Vhu90M9y3Iha2K1LPhx6tlGxBAKCNhJS6/bVTXn4h33 tizNcTX3TC+JtFvZZNbVRMyatBMGX5t5oAl1ACw7HM577eGyyjWzopdvMDWFcIb1 Z9rybxPPieX6/Fw032+lAADPtplQT9oZO9ojBWPAmidgOgOswp0qrklmB4dMkysv ffCjiwrBpTYnUFpz6yxLf+df1/j9OieDS8J7VNPflKc7XDZKJ4dcGI1lUcuGMz6w wasavxF06zujUvjJJBoeqov0xQ38K7a+8dRtJpOvsPA11yiQtixPoD+ju13ETnTC jlM3Q5qxW8uJwliHmIJ6oLKZ5gE1O8A= -----END CERTIFICATE-----Generated at Sat Sep 26 22:33:05 2026 by rpki-client