$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e43c0ec2-96e6-347b-95ad-ff862340f2b2.roa File: e43c0ec2-96e6-347b-95ad-ff862340f2b2.roa (raw, json) Hash identifier: QrRNkTCyJCH4Z/sHR/owbzOJBwIfrmjgxtmr4/0qfaU= Subject key identifier: DA:8E:84:BF:B3:EE:B0:29:82:2B:C1:63:A1:14:3F:7B:42:3D:7D:45 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B2D92384B87DB30CA080 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e43c0ec2-96e6-347b-95ad-ff862340f2b2.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b2:d9:23:84:b8:7d:b3:0c:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=3c5432e1-2a4a-4893-b151-86691dccedf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e0:7e:34:85:62:a3:7e:15:b2:b7:47:70:0c: 44:d2:7f:6a:82:96:31:1a:b8:ab:74:1a:40:03:fd: ac:67:4b:ae:88:af:ae:4d:e3:10:87:5b:92:4a:de: 3e:95:94:41:53:2d:02:96:55:79:ce:81:aa:aa:f8: b0:79:54:13:86:b2:7f:f7:44:e3:9d:5e:75:58:86: 85:6f:e2:c8:a2:4f:0d:c4:70:65:75:e1:38:66:aa: 0d:e3:11:b1:1f:11:e3:f1:4a:68:7c:4c:6a:00:22: 7e:ad:03:09:18:f0:1b:25:01:a2:ea:f6:12:20:f1: a6:cc:7b:4d:d8:b0:9a:31:91:3b:85:3e:72:ed:37: 50:60:33:b6:28:e1:51:75:a3:d4:8b:9f:f9:40:48: e6:1a:db:a0:ac:75:a7:53:f3:7d:65:2b:02:a3:4b: da:7d:6c:7b:15:13:66:f8:5b:72:bb:7c:08:f3:f2: e1:66:38:89:08:0a:98:d6:f6:6d:6d:a3:71:45:ea: 44:d5:c0:d4:fa:b9:09:05:3a:71:29:da:78:b1:4e: e3:bf:fc:8a:52:80:66:02:84:87:b4:3b:66:be:c9: c1:f3:43:59:e2:c4:50:73:ba:52:cf:11:1d:28:ff: 62:6b:75:25:ec:ea:5e:6a:f5:bb:a2:be:5f:35:55: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8E:84:BF:B3:EE:B0:29:82:2B:C1:63:A1:14:3F:7B:42:3D:7D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e43c0ec2-96e6-347b-95ad-ff862340f2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2e:aa:bb:42:df:d5:bb:20:d6:1b:1e:6c:3c:38:02:47:03: 1b:93:db:50:b6:61:c0:36:1c:9f:b1:5d:f0:30:33:b2:52:49: 2a:9d:15:85:aa:df:b6:dc:ef:5f:68:e2:61:bd:47:e2:b9:78: 49:48:3d:57:03:5f:b8:99:85:fb:66:85:53:84:44:02:83:e2: d3:7a:0a:35:53:7d:a0:3b:b2:81:97:5b:f9:44:e7:2b:9f:03: 66:b9:21:73:a7:81:de:92:5b:20:a7:a6:5c:fc:eb:81:72:02: 65:93:3b:44:f6:08:b9:2f:0c:9d:b3:c3:ae:c6:35:ab:48:32: 50:6a:38:a8:0c:40:81:3a:0d:3f:8e:f4:56:3b:07:b4:ed:b1: d0:3d:7b:98:86:b5:61:5e:58:60:c9:8a:6d:9f:d3:72:40:e7: 3e:6b:fb:99:48:d5:8f:fd:f2:38:a2:70:8f:9c:f6:8a:26:86: 47:f4:51:07:50:9d:c1:ff:b7:ab:1a:d7:d1:a3:ee:24:14:df: fd:2d:81:fa:c7:1b:b1:74:27:c8:5a:b0:e6:79:d3:00:02:d6: 35:70:ce:78:e7:3c:6c:c6:d5:ea:d6:84:bc:8a:88:4c:45:27: ac:9c:95:95:01:83:d1:4a:1a:0d:26:1a:91:c7:5f:e1:10:20: f2:6e:af:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97LZI4S4fbMMoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk M2M1NDMyZTEtMmE0YS00ODkzLWIxNTEtODY2OTFkY2NlZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieB+NIVio34VsrdHcAxE0n9qgpYxGrirdBpA A/2sZ0uuiK+uTeMQh1uSSt4+lZRBUy0CllV5zoGqqviweVQThrJ/90TjnV51WIaF b+LIok8NxHBldeE4ZqoN4xGxHxHj8UpofExqACJ+rQMJGPAbJQGi6vYSIPGmzHtN 2LCaMZE7hT5y7TdQYDO2KOFRdaPUi5/5QEjmGtugrHWnU/N9ZSsCo0vafWx7FRNm +Ftyu3wI8/LhZjiJCAqY1vZtbaNxRepE1cDU+rkJBTpxKdp4sU7jv/yKUoBmAoSH tDtmvsnB80NZ4sRQc7pSzxEdKP9ia3Ul7OpeavW7or5fNVVS+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqOhL+z7rApgivBY6EUP3tCPX1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZTQzYzBlYzItOTZlNi0z NDdiLTk1YWQtZmY4NjIzNDBmMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIuqrtC39W7INYbHmw8OAJHAxuT21C2YcA2HJ+xXfAwM7JSSSqdFYWq 37bc719o4mG9R+K5eElIPVcDX7iZhftmhVOERAKD4tN6CjVTfaA7soGXW/lE5yuf A2a5IXOngd6SWyCnplz864FyAmWTO0T2CLkvDJ2zw67GNatIMlBqOKgMQIE6DT+O 9FY7B7TtsdA9e5iGtWFeWGDJim2f03JA5z5r+5lI1Y/98jiicI+c9oomhkf0UQdQ ncH/t6sa19Gj7iQU3/0tgfrHG7F0J8hasOZ50wAC1jVwznjnPGzG1erWhLyKiExF J6yclZUBg9FKGg0mGpHHX+EQIPJur+M= -----END CERTIFICATE-----Generated at Sat Sep 26 14:32:19 2026 by rpki-client