$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ecf86511-9992-31dd-8747-d6fa58099e49.roa File: ecf86511-9992-31dd-8747-d6fa58099e49.roa (raw, json) Hash identifier: twUFlcaMPD8kNh+mZaQ8O5jvipZa4YprI48wqv+1sFs= Subject key identifier: 6B:B5:74:58:86:3D:57:D7:86:BF:27:68:5E:21:0E:50:2D:B6:F4:07 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A201C6E04211409F62E0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ecf86511-9992-31dd-8747-d6fa58099e49.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a2:01:c6:e0:42:11:40:9f:62:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=9f64b9ab-f931-4b28-ba1b-cf17900ed36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8f:1f:a8:7a:d6:4a:4b:32:64:ae:56:c8:78: 3e:29:34:dd:72:77:a8:66:86:77:12:ee:28:a7:c0: dd:8d:f1:b1:53:f1:04:0f:1b:d1:c7:2a:61:14:1e: 7c:e5:99:5a:8e:66:79:d4:5e:5f:ab:6b:df:42:f6: 2f:50:83:d1:f7:a9:83:36:52:3b:86:8d:f2:fd:e8: 86:da:1e:d3:07:b0:6b:c0:04:bd:66:f1:a9:62:2f: c4:b2:27:ac:b5:24:7b:99:44:73:24:c3:79:66:a2: cd:e7:61:09:0a:02:f2:f2:a4:69:ce:55:f8:8e:7f: a7:1a:91:a2:b8:e9:ff:e2:58:ce:5d:70:7d:1e:7c: fc:2b:32:a3:fb:82:c1:3f:24:73:b0:40:80:b3:f1: f6:ba:6e:4d:c8:d3:5f:75:8a:53:a0:5e:18:32:8c: 34:d6:4c:24:54:c7:08:7a:c2:00:36:69:54:ba:16: 72:e0:10:95:7d:cc:5a:1d:07:6c:41:0b:96:0d:34: d1:71:89:c3:62:80:f4:fc:1f:a2:82:c5:c5:7e:d6: 18:04:69:87:37:83:62:bc:1f:fc:cb:97:ab:eb:8d: 6f:0a:bd:d9:15:ef:db:2b:66:09:31:1a:b2:02:d2: 78:a1:3a:39:d2:94:76:1b:10:14:d2:2f:e2:43:6c: 9f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B5:74:58:86:3D:57:D7:86:BF:27:68:5E:21:0E:50:2D:B6:F4:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ecf86511-9992-31dd-8747-d6fa58099e49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:f1:51:90:69:29:47:3d:24:73:35:b1:44:60:87:52:59:f4: c6:7f:ab:d2:c1:16:10:8b:e2:ac:4e:04:35:13:54:99:09:bd: f3:6e:3a:19:bb:e9:87:17:d9:2c:73:8f:ad:5b:50:51:12:46: 75:50:0b:0c:64:b5:73:37:15:2a:73:18:83:7a:d0:cb:63:0c: 26:d3:1b:6d:c8:fb:80:75:7c:5f:c1:a2:ee:f4:70:f9:c2:03: fa:b6:00:a8:c3:08:a1:4b:0b:d8:72:a0:e1:41:4c:b6:6b:81: 6e:99:88:a4:5a:ff:66:93:25:b7:a8:a8:ba:e9:9b:04:2b:c0: b5:b3:b9:1a:af:f0:76:3a:df:c6:ae:f2:49:54:d6:2b:71:b6: e4:fd:df:db:f4:39:8a:d2:b0:2f:e4:db:b0:60:98:f1:87:23: 65:0d:7f:9e:56:03:5c:9c:3e:10:ca:08:7b:33:69:54:ba:05: 05:82:f0:45:bb:91:51:93:3c:2c:31:c3:e4:55:82:99:59:d0: 96:7f:50:65:81:81:f9:06:cf:26:06:9a:02:7f:90:8a:7b:29: 27:d0:17:88:66:d5:20:84:65:55:e3:fb:63:69:91:7f:95:5d: 05:a8:a0:44:78:bc:cd:34:66:41:46:9b:15:3f:81:86:dd:ad: b5:91:70:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96IBxuBCEUCfYuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OWY2NGI5YWItZjkzMS00YjI4LWJhMWItY2YxNzkwMGVkMzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo8fqHrWSksyZK5WyHg+KTTdcneoZoZ3Eu4o p8DdjfGxU/EEDxvRxyphFB585ZlajmZ51F5fq2vfQvYvUIPR96mDNlI7ho3y/eiG 2h7TB7BrwAS9ZvGpYi/EsiestSR7mURzJMN5ZqLN52EJCgLy8qRpzlX4jn+nGpGi uOn/4ljOXXB9Hnz8KzKj+4LBPyRzsECAs/H2um5NyNNfdYpToF4YMow01kwkVMcI esIANmlUuhZy4BCVfcxaHQdsQQuWDTTRcYnDYoD0/B+igsXFftYYBGmHN4NivB/8 y5er641vCr3ZFe/bK2YJMRqyAtJ4oTo50pR2GxAU0i/iQ2yfOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGu1dFiGPVfXhr8naF4hDlAttvQHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWNmODY1MTEtOTk5Mi0z MWRkLTg3NDctZDZmYTU4MDk5ZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHxUZBpKUc9JHM1sURgh1JZ9MZ/q9LBFhCL4qxOBDUTVJkJvfNuOhm7 6YcX2Sxzj61bUFESRnVQCwxktXM3FSpzGIN60MtjDCbTG23I+4B1fF/Bou70cPnC A/q2AKjDCKFLC9hyoOFBTLZrgW6ZiKRa/2aTJbeoqLrpmwQrwLWzuRqv8HY638au 8klU1itxtuT939v0OYrSsC/k27BgmPGHI2UNf55WA1ycPhDKCHszaVS6BQWC8EW7 kVGTPCwxw+RVgplZ0JZ/UGWBgfkGzyYGmgJ/kIp7KSfQF4hm1SCEZVXj+2NpkX+V XQWooER4vM00ZkFGmxU/gYbdrbWRcJw= -----END CERTIFICATE-----Generated at Mon Sep 28 10:13:22 2026 by rpki-client