$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ebae2f14-5fa5-3e26-aa16-53fc2c01aa37.roa File: ebae2f14-5fa5-3e26-aa16-53fc2c01aa37.roa (raw, json) Hash identifier: VECgzCR3n4H612yIMoUaxqirShAc+/0TEYNX/K6ECSc= Subject key identifier: F8:7D:26:65:67:12:11:4E:51:1F:E5:59:4A:D8:C9:50:CD:ED:E9:A7 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A807887244DEEC6A6400 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ebae2f14-5fa5-3e26-aa16-53fc2c01aa37.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a8:07:88:72:44:de:ec:6a:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=e96e0b7f-8244-4df6-98d4-3733ea70d646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:97:39:7e:eb:f6:a0:de:ee:ee:89:76:78:6a: 6e:57:34:73:8e:19:a3:42:cd:ad:fe:5a:85:de:2d: ac:2a:9f:f8:42:ac:01:a4:ae:b2:52:7d:91:31:06: 8d:16:49:5b:62:fc:0a:78:95:4f:cb:30:43:cf:20: 64:de:fb:14:32:84:e9:2f:43:b0:da:bf:b3:69:d2: 7f:eb:24:30:79:41:e5:9f:51:fc:d8:2b:ea:96:fa: 4f:11:66:0b:37:5e:21:14:22:de:60:68:73:39:7d: 20:30:ad:48:4b:43:d8:a0:0f:20:5f:d6:f8:20:c5: 33:68:5c:ce:e8:b4:e0:e7:ce:5f:ad:9c:aa:21:fb: 9e:19:ff:3e:cc:ca:e6:7f:f8:7d:cd:0d:8f:6a:d4: a6:53:1f:bf:04:63:60:52:e7:b7:f7:66:ef:2a:2b: 53:87:8f:e4:30:cf:f4:bf:2e:eb:bc:3a:de:0c:1e: d1:5a:56:a7:03:79:23:db:da:84:3a:c4:83:fb:59: 1b:dc:9d:11:4a:8b:d3:58:bb:1d:45:fd:31:8b:98: 76:2f:d7:30:5b:22:3c:d9:84:07:01:e1:38:d4:6b: a1:65:c3:2e:1e:5d:d3:04:80:7c:63:14:ce:94:6f: e7:1f:e5:2b:6b:b4:bf:86:83:5d:ad:1b:5e:ae:da: f8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7D:26:65:67:12:11:4E:51:1F:E5:59:4A:D8:C9:50:CD:ED:E9:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ebae2f14-5fa5-3e26-aa16-53fc2c01aa37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:7c:c9:6b:9f:7c:c0:a6:e1:fb:7e:a1:82:53:2b:43:c7:32: 33:25:89:57:e3:b4:8e:26:da:f2:f8:1d:9d:b8:e5:c6:c6:8d: c4:87:61:12:28:a9:63:01:61:b3:22:bf:bf:45:0a:4a:14:25: d9:b0:d3:58:36:84:fb:04:e1:43:3d:a1:42:33:a8:f4:cf:a0: cc:6a:96:1e:54:f6:a0:ae:d6:a7:92:40:a7:e6:52:0d:ef:6a: d6:14:68:10:ba:9d:98:87:24:81:68:8e:07:07:1a:91:a3:f0: d7:80:34:fd:7c:50:ac:9e:0b:b7:4a:a5:ae:2f:21:08:2c:ce: 1a:b8:cf:77:03:2f:6a:92:20:81:9e:7f:05:87:cd:a5:40:d2: 4b:97:e4:42:d7:44:10:e9:6b:7a:aa:10:7e:ae:af:8b:e9:80: 0e:27:bf:01:26:78:ef:2b:f3:33:c6:9f:12:52:07:a9:f6:88: ad:af:39:08:a1:3a:4f:e4:53:fe:7b:51:d9:1a:63:8a:9e:86: 9f:14:ca:bf:8b:78:66:b3:27:5d:ad:96:ec:3f:f5:4d:8c:f8: 8c:70:20:96:c1:12:cb:2d:e2:ed:9a:c6:a8:49:dc:fc:84:e2: 49:ab:1d:b6:56:99:48:ab:97:6c:5d:4b:d2:34:31:69:7e:84: e3:f5:a7:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96gHiHJE3uxqZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTk2ZTBiN2YtODI0NC00ZGY2LTk4ZDQtMzczM2VhNzBkNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZc5fuv2oN7u7ol2eGpuVzRzjhmjQs2t/lqF 3i2sKp/4QqwBpK6yUn2RMQaNFklbYvwKeJVPyzBDzyBk3vsUMoTpL0Ow2r+zadJ/ 6yQweUHln1H82CvqlvpPEWYLN14hFCLeYGhzOX0gMK1IS0PYoA8gX9b4IMUzaFzO 6LTg585frZyqIfueGf8+zMrmf/h9zQ2PatSmUx+/BGNgUue392bvKitTh4/kMM/0 vy7rvDreDB7RWlanA3kj29qEOsSD+1kb3J0RSovTWLsdRf0xi5h2L9cwWyI82YQH AeE41GuhZcMuHl3TBIB8YxTOlG/nH+Ura7S/hoNdrRtertr4mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPh9JmVnEhFOUR/lWUrYyVDN7emnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWJhZTJmMTQtNWZhNS0z ZTI2LWFhMTYtNTNmYzJjMDFhYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAh8yWuffMCm4ft+oYJTK0PHMjMliVfjtI4m2vL4HZ245cbGjcSHYRIo qWMBYbMiv79FCkoUJdmw01g2hPsE4UM9oUIzqPTPoMxqlh5U9qCu1qeSQKfmUg3v atYUaBC6nZiHJIFojgcHGpGj8NeANP18UKyeC7dKpa4vIQgszhq4z3cDL2qSIIGe fwWHzaVA0kuX5ELXRBDpa3qqEH6ur4vpgA4nvwEmeO8r8zPGnxJSB6n2iK2vOQih Ok/kU/57UdkaY4qehp8Uyr+LeGazJ12tluw/9U2M+IxwIJbBEsst4u2axqhJ3PyE 4kmrHbZWmUirl2xdS9I0MWl+hOP1p28= -----END CERTIFICATE-----Generated at Wed Sep 23 23:34:33 2026 by rpki-client