$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d6815317-1068-3438-a4a6-f31789b0ba3a.roa File: d6815317-1068-3438-a4a6-f31789b0ba3a.roa (raw, json) Hash identifier: kwmqfHpOHazz3qDiNvSuydQZlK/UDCbJ4zSeVrRmMi8= Subject key identifier: 66:8D:F8:53:C2:BE:67:9C:F6:B9:D2:27:73:C1:24:39:CD:D0:AF:33 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7CC7E833BF29A0D8CC2C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d6815317-1068-3438-a4a6-f31789b0ba3a.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cc:7e:83:3b:f2:9a:0d:8c:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=0965f289-2d28-4f4d-a150-8c1ba06574f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5c:cc:9d:4b:b9:3a:eb:ba:2a:15:a4:46:ed: dd:e5:df:f6:83:76:2b:4a:8f:8c:10:49:22:a1:a2: ac:e3:6e:86:49:97:49:26:d1:8b:aa:ce:0c:e9:8c: 7f:f1:7b:18:70:ef:de:0f:5b:c3:b6:4e:23:00:b0: 2b:f5:71:2e:d2:75:06:9f:4b:09:b7:00:3e:36:21: 3f:53:7e:be:cb:bf:08:5f:33:7f:f3:2f:e4:b2:ea: 2f:50:98:4d:23:c8:b3:3c:1f:6e:fd:63:76:20:cc: 3d:71:ec:c4:da:2a:04:a2:a5:f3:0f:47:86:c7:27: b1:82:55:16:98:36:c3:08:10:e0:79:90:98:bf:f9: 4c:79:74:b9:d7:14:ec:2d:b8:67:49:02:70:0f:68: 6e:56:a6:c4:18:79:d6:2c:a1:08:8e:7c:1e:71:06: 8c:a6:da:7e:66:a9:50:f4:93:6d:52:e9:ad:c0:9b: 45:80:85:c3:1f:7e:24:37:cf:45:fe:8f:df:00:d7: 18:bf:8c:a5:f0:99:2b:be:40:51:de:af:33:90:4c: 28:3a:e0:bc:26:38:b7:ad:a9:41:89:94:9b:22:90: 83:3d:fc:cd:0d:85:0e:1d:46:03:05:4b:01:55:80: f4:70:fe:2d:b4:27:8c:a0:3d:3a:a3:1d:a5:60:a3: 0b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8D:F8:53:C2:BE:67:9C:F6:B9:D2:27:73:C1:24:39:CD:D0:AF:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d6815317-1068-3438-a4a6-f31789b0ba3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:37:33:fc:ac:45:ed:57:ab:1f:2e:32:1f:a0:5b:89:4d:07: fc:e6:f5:b1:35:96:2a:6c:db:8b:35:1b:ab:61:f9:ac:fe:ce: a1:e4:7b:18:36:b4:e6:c9:20:b8:58:db:05:09:fb:fe:8d:ca: c5:41:75:ae:00:42:c0:57:0c:6f:37:9b:fe:a7:99:de:ba:c3: f5:b4:9c:29:76:d9:7a:bb:2a:45:32:80:3c:c8:f7:f1:79:24: 18:69:14:e7:9c:fa:6a:6e:e5:53:f3:8d:72:32:d3:1a:8f:f5: 2c:2d:f0:10:2b:be:87:11:1c:14:5e:dc:bd:b9:93:be:c0:a8: 75:cf:aa:35:ae:82:57:84:c7:ac:5f:fd:2b:ca:46:b8:79:60: a5:38:1f:2d:45:98:e9:88:a3:dc:49:60:0a:ed:b8:be:ee:1e: b3:9a:7e:dd:02:3e:73:4c:5c:8a:15:79:6b:b8:d4:3b:f6:f1: df:d5:e2:d4:41:ae:79:53:bf:1e:55:10:3c:e0:2b:fe:a0:95: 3a:5e:50:03:22:89:aa:36:bc:f3:b4:27:29:d5:dd:6e:84:78: 8d:b7:71:f0:1d:07:bb:52:3e:3b:d1:bf:71:b7:0f:64:84:44: 42:86:b0:f6:a6:85:a6:f8:5b:5d:8a:d1:fe:63:77:fc:99:70: fb:76:24:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98x+gzvymg2MwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MDk2NWYyODktMmQyOC00ZjRkLWExNTAtOGMxYmEwNjU3NGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglzMnUu5Ouu6KhWkRu3d5d/2g3YrSo+MEEki oaKs426GSZdJJtGLqs4M6Yx/8XsYcO/eD1vDtk4jALAr9XEu0nUGn0sJtwA+NiE/ U36+y78IXzN/8y/ksuovUJhNI8izPB9u/WN2IMw9cezE2ioEoqXzD0eGxyexglUW mDbDCBDgeZCYv/lMeXS51xTsLbhnSQJwD2huVqbEGHnWLKEIjnwecQaMptp+ZqlQ 9JNtUumtwJtFgIXDH34kN89F/o/fANcYv4yl8JkrvkBR3q8zkEwoOuC8Jji3ralB iZSbIpCDPfzNDYUOHUYDBUsBVYD0cP4ttCeMoD06ox2lYKMLCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaN+FPCvmec9rnSJ3PBJDnN0K8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZDY4MTUzMTctMTA2OC0z NDM4LWE0YTYtZjMxNzg5YjBiYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI43M/ysRe1Xqx8uMh+gW4lNB/zm9bE1lips24s1G6th+az+zqHkexg2 tObJILhY2wUJ+/6NysVBda4AQsBXDG83m/6nmd66w/W0nCl22Xq7KkUygDzI9/F5 JBhpFOec+mpu5VPzjXIy0xqP9Swt8BArvocRHBRe3L25k77AqHXPqjWugleEx6xf /SvKRrh5YKU4Hy1FmOmIo9xJYArtuL7uHrOaft0CPnNMXIoVeWu41Dv28d/V4tRB rnlTvx5VEDzgK/6glTpeUAMiiao2vPO0JynV3W6EeI23cfAdB7tSPjvRv3G3D2SE REKGsPamhab4W12K0f5jd/yZcPt2JNo= -----END CERTIFICATE-----Generated at Sat Oct 10 14:37:28 2026 by rpki-client