$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d76c7540-47d3-3727-8b51-14804d7b742d.roa File: d76c7540-47d3-3727-8b51-14804d7b742d.roa (raw, json) Hash identifier: 4ii/ETWBaNN4Wv+y8z8EZQjrDe3JapDiAGmv0xYgnGM= Subject key identifier: 2D:F4:68:89:EC:4E:50:5D:8A:AA:EA:D2:05:32:76:A1:56:85:48:06 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A5D675D45B6C94073DC0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d76c7540-47d3-3727-8b51-14804d7b742d.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a5:d6:75:d4:5b:6c:94:07:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=34c46c40-b3bd-4054-b4f2-b7d31cc1d6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4e:3d:23:8b:de:db:18:0d:22:1f:06:03:0d: b0:7b:24:cb:1e:20:e0:37:2d:e6:8e:21:ec:4b:0b: 8c:9e:94:77:eb:75:3b:ea:42:2f:14:20:9d:e3:f8: fb:c8:6e:42:38:c7:3c:70:88:76:66:f8:cd:c4:ed: f1:cc:75:2f:3a:6c:51:23:0b:fc:58:8a:a6:30:b6: 27:a3:6f:39:d8:8e:3c:48:7d:3f:86:35:8f:cf:26: cc:05:11:eb:84:60:c0:f1:f5:a2:c8:f7:9d:54:bf: 06:f5:de:d9:29:8c:ba:da:0c:bd:a7:33:c8:14:59: 11:5a:35:a6:7b:4d:17:ee:69:dc:31:de:b9:b5:07: 2f:16:13:d5:21:f1:8a:a5:5f:b0:f1:77:50:b7:30: 9d:2b:4c:03:38:48:a5:ff:bc:00:40:4f:14:6f:a5: 46:fe:da:fc:b8:ea:89:9c:63:dc:76:65:77:92:38: 16:ab:36:6c:26:14:6a:8e:ee:85:9f:bb:70:af:ab: ff:89:3d:a7:41:c5:ec:07:a5:0f:73:e8:94:8e:e3: 12:c0:c1:b8:5c:5a:b1:79:6c:13:cb:f7:f5:45:78: a7:c1:94:38:23:08:5e:a1:fa:8b:0b:19:25:3f:36: 26:1a:70:03:d3:70:72:6e:18:21:fa:11:24:b7:9d: 1e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F4:68:89:EC:4E:50:5D:8A:AA:EA:D2:05:32:76:A1:56:85:48:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d76c7540-47d3-3727-8b51-14804d7b742d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7f:20:32:dd:d6:68:32:05:31:33:20:71:60:78:ef:a0:22: 64:d1:46:06:da:73:70:75:21:bd:a8:6f:1f:20:06:50:10:f2: 54:c5:00:ba:de:17:18:ff:1a:8e:e3:a5:27:a3:4b:1f:fc:46: 53:6e:f2:5d:8c:33:89:84:6c:29:b7:01:33:ad:fe:84:95:7f: 81:29:8e:ab:6d:37:f0:7f:40:62:20:88:3e:4f:48:71:f6:18: 3e:d9:c5:d9:38:2a:34:9c:80:f1:b9:2d:50:12:d5:6d:74:3a: bd:8a:12:82:f7:d2:d3:74:d4:ef:97:4d:9b:b4:e6:71:e8:62: 7f:61:43:e1:fc:ba:64:e2:b2:06:f6:7b:36:a7:05:49:88:bd: b3:dc:39:11:af:6c:d7:fc:2d:5b:88:6f:b0:21:d8:24:41:0e: 00:9e:91:74:50:20:e5:92:3c:b9:d1:0f:9f:90:e3:8a:40:e3: 3a:e8:0b:57:28:e0:2e:09:89:26:b7:9d:4e:bb:65:6c:a8:34: 95:68:2c:0e:4f:b2:69:ef:6e:26:2a:87:d4:58:2e:1d:e9:ce: ab:fa:d0:a3:ff:7d:29:88:01:17:75:72:4e:5e:3d:49:0d:7f: 61:00:e2:80:c0:be:a8:01:4b:a4:fa:c2:89:e8:e6:cb:49:4a: 6a:25:4e:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96XWddRbbJQHPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MzRjNDZjNDAtYjNiZC00MDU0LWI0ZjItYjdkMzFjYzFkNmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE49I4ve2xgNIh8GAw2weyTLHiDgNy3mjiHs SwuMnpR363U76kIvFCCd4/j7yG5COMc8cIh2ZvjNxO3xzHUvOmxRIwv8WIqmMLYn o2852I48SH0/hjWPzybMBRHrhGDA8fWiyPedVL8G9d7ZKYy62gy9pzPIFFkRWjWm e00X7mncMd65tQcvFhPVIfGKpV+w8XdQtzCdK0wDOEil/7wAQE8Ub6VG/tr8uOqJ nGPcdmV3kjgWqzZsJhRqju6Fn7twr6v/iT2nQcXsB6UPc+iUjuMSwMG4XFqxeWwT y/f1RXinwZQ4IwheofqLCxklPzYmGnAD03Bybhgh+hEkt50eLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC30aInsTlBdiqrq0gUydqFWhUgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZDc2Yzc1NDAtNDdkMy0z NzI3LThiNTEtMTQ4MDRkN2I3NDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV/IDLd1mgyBTEzIHFgeO+gImTRRgbac3B1Ib2obx8gBlAQ8lTFALre Fxj/Go7jpSejSx/8RlNu8l2MM4mEbCm3ATOt/oSVf4EpjqttN/B/QGIgiD5PSHH2 GD7Zxdk4KjScgPG5LVAS1W10Or2KEoL30tN01O+XTZu05nHoYn9hQ+H8umTisgb2 ezanBUmIvbPcORGvbNf8LVuIb7Ah2CRBDgCekXRQIOWSPLnRD5+Q44pA4zroC1co 4C4JiSa3nU67ZWyoNJVoLA5PsmnvbiYqh9RYLh3pzqv60KP/fSmIARd1ck5ePUkN f2EA4oDAvqgBS6T6wono5stJSmolTss= -----END CERTIFICATE-----Generated at Thu Oct 8 08:33:36 2026 by rpki-client