$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d5b25144-3ed7-39de-a799-9a8d9b1938a6.roa File: d5b25144-3ed7-39de-a799-9a8d9b1938a6.roa (raw, json) Hash identifier: vmPiUR/gg5GctZhsRTynpIgt7P0eOQ7vy0YaH8/2DxE= Subject key identifier: 89:F3:B8:D6:BF:81:43:64:17:35:0F:4E:AF:1D:2A:8E:7C:83:2E:FC Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7CDF2EB2DC54E96CA90E0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d5b25144-3ed7-39de-a799-9a8d9b1938a6.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 64.16.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cd:f2:eb:2d:c5:4e:96:ca:90:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=574d14ae-ef8b-4c2e-94eb-9c2a0d53d5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:27:12:74:71:ac:57:ec:fa:4d:55:dc:47:8c: 21:b8:1a:70:4e:ed:ec:88:14:b4:f0:5d:0a:cd:ea: 12:bf:9f:d9:7e:30:57:db:1a:b6:e9:51:74:e4:11: 68:c7:44:fb:8f:45:c1:7f:ac:c4:20:76:4e:97:24: 1b:82:5e:ef:f3:ca:99:82:8c:a9:5c:e4:4d:3f:30: 13:37:df:31:c2:8c:47:6c:b4:72:65:fb:cb:58:53: f2:18:dc:f9:74:a2:2c:dc:e0:84:f3:fd:af:f0:de: 66:a5:d3:05:25:d3:e0:1d:4c:dc:4d:2f:a6:02:23: d8:7a:fa:14:39:21:67:d7:ce:cc:47:3c:3a:5a:db: 67:54:d5:20:65:0f:37:b8:9f:f9:52:ff:d6:54:9a: 4d:1f:e3:e5:93:e2:45:66:8c:23:15:67:89:70:4b: 2f:98:73:cd:36:6a:5d:3c:39:8a:c3:b1:34:4f:1d: 37:e5:f5:b0:cc:66:c6:55:fe:ba:69:99:b3:77:b1: f2:f7:15:c4:63:be:3a:24:54:22:60:ba:77:af:b1: bc:bf:c5:5d:13:57:6a:b1:6c:cd:f7:af:fa:c5:af: e5:8d:06:f3:94:f1:a7:2d:4e:40:d2:6c:d7:d2:d2: 75:75:69:e1:e3:c3:ec:36:3c:17:77:cb:02:ee:c9: 58:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F3:B8:D6:BF:81:43:64:17:35:0F:4E:AF:1D:2A:8E:7C:83:2E:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d5b25144-3ed7-39de-a799-9a8d9b1938a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:df:24:4d:ae:80:6d:c7:dd:79:de:ac:71:23:0b:fe:e2:59: 61:38:7d:e8:7e:1a:0d:11:85:91:a5:8f:4e:66:a7:c7:3b:b6: b8:ce:82:c2:19:71:dc:fe:7f:f9:4f:e2:3e:35:20:ac:5e:c5: d5:42:f7:7b:ef:95:0e:04:c3:8c:a7:6e:50:de:4e:41:94:14: 30:38:4a:62:38:3d:3a:38:81:71:01:fc:55:26:67:e3:78:b5: 24:04:16:bd:7c:36:15:3d:4a:6c:12:8f:04:9d:90:32:8a:10: 64:35:c6:fd:92:52:f4:19:90:b5:55:d6:95:9a:dc:c3:c4:f6: e6:1c:91:a4:28:2e:e0:2d:07:25:c2:eb:4c:ee:1e:23:57:89: 09:7d:75:5a:c5:17:b9:06:c8:71:17:42:33:96:c5:04:9b:dc: 91:9e:ab:b1:25:36:9c:5a:6a:99:99:a2:4b:62:45:2b:98:7a: d3:6e:04:bf:0d:38:c8:9f:47:2d:34:c2:ad:56:cc:e5:9c:43: 8d:9a:9f:65:88:5e:71:35:5e:44:04:e5:4d:76:62:80:fb:59: 22:42:06:e5:ca:78:48:33:67:98:82:da:2c:94:f8:47:4e:32: e7:bc:78:45:c9:15:33:18:b1:ff:8f:21:01:f3:06:ae:15:6a: ec:a3:00:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g983y6y3FTpbKkOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTc0ZDE0YWUtZWY4Yi00YzJlLTk0ZWItOWMyYTBkNTNkNWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjicSdHGsV+z6TVXcR4whuBpwTu3siBS08F0K zeoSv5/ZfjBX2xq26VF05BFox0T7j0XBf6zEIHZOlyQbgl7v88qZgoypXORNPzAT N98xwoxHbLRyZfvLWFPyGNz5dKIs3OCE8/2v8N5mpdMFJdPgHUzcTS+mAiPYevoU OSFn187MRzw6WttnVNUgZQ83uJ/5Uv/WVJpNH+Plk+JFZowjFWeJcEsvmHPNNmpd PDmKw7E0Tx035fWwzGbGVf66aZmzd7Hy9xXEY746JFQiYLp3r7G8v8VdE1dqsWzN 96/6xa/ljQbzlPGnLU5A0mzX0tJ1dWnh48PsNjwXd8sC7slYswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInzuNa/gUNkFzUPTq8dKo58gy78MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZDViMjUxNDQtM2VkNy0z OWRlLWE3OTktOWE4ZDliMTkzOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjfJE2ugG3H3XnerHEjC/7iWWE4feh+Gg0RhZGlj05mp8c7trjOgsIZ cdz+f/lP4j41IKxexdVC93vvlQ4Ew4ynblDeTkGUFDA4SmI4PTo4gXEB/FUmZ+N4 tSQEFr18NhU9SmwSjwSdkDKKEGQ1xv2SUvQZkLVV1pWa3MPE9uYckaQoLuAtByXC 60zuHiNXiQl9dVrFF7kGyHEXQjOWxQSb3JGeq7ElNpxaapmZoktiRSuYetNuBL8N OMifRy00wq1WzOWcQ42an2WIXnE1XkQE5U12YoD7WSJCBuXKeEgzZ5iC2iyU+EdO Mue8eEXJFTMYsf+PIQHzBq4VauyjACA= -----END CERTIFICATE-----Generated at Thu Oct 8 20:17:56 2026 by rpki-client