$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f5b5ce85-a122-3960-bf82-2862379f9923.roa File: f5b5ce85-a122-3960-bf82-2862379f9923.roa (raw, json) Hash identifier: ZA9AGMThsC7H8bDDjneJ9ILy8MwIMX/lqB6i9eyVMo4= Subject key identifier: 06:9A:A6:C6:6E:13:6D:3C:D2:28:E7:33:88:DD:F9:7E:49:83:1D:96 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B4397F03CD8CDCEE3880 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f5b5ce85-a122-3960-bf82-2862379f9923.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b4:39:7f:03:cd:8c:dc:ee:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=485a4ceb-2aa9-4704-bc98-b9190d04bfbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fc:b6:44:00:00:ad:11:88:80:bd:5e:72:b8: fe:5a:5e:db:5c:ee:68:fc:93:9d:56:01:94:1e:5c: f3:fa:19:c0:c3:4b:29:22:86:b7:f6:e0:d1:e2:cb: 9c:35:a4:93:7a:b5:56:45:1f:0d:38:38:66:00:be: 84:e4:06:2f:b5:2a:8b:80:b7:fa:f5:be:21:5c:6e: ed:d6:83:90:f2:96:c0:04:e4:c2:93:cc:7d:70:b9: 0a:8a:dd:3c:f6:0f:1f:e2:c8:6a:05:99:ee:9c:24: e6:4d:74:74:2d:af:46:cd:fc:1a:d5:21:a6:a8:27: 99:e3:f2:30:1c:be:51:a8:73:10:34:e2:d1:1a:8f: ee:06:61:fb:09:a1:1b:16:b0:a5:f1:e8:ae:d1:5b: b3:6c:d2:d3:9a:9f:df:6b:9a:7e:7c:f6:3f:45:00: ab:3f:e0:4b:a9:f1:72:ac:40:d8:90:0e:c0:8d:af: 16:dc:48:02:f9:07:14:0c:48:96:c4:88:d3:3f:48: 61:52:1b:ff:69:c7:6e:f5:97:ed:8b:a3:f2:50:16: ce:b3:ae:62:d2:76:3f:d4:b0:fe:bc:f0:2b:77:35: 13:76:eb:bd:75:25:4d:e4:78:40:1b:f8:d8:5c:11: 4b:78:6d:04:d4:f6:49:46:7c:34:fc:c2:d4:77:00: 24:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9A:A6:C6:6E:13:6D:3C:D2:28:E7:33:88:DD:F9:7E:49:83:1D:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f5b5ce85-a122-3960-bf82-2862379f9923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c3:be:0d:a9:6a:b1:65:7b:42:43:29:a4:c1:eb:25:40:76: 83:13:82:51:1f:0f:97:87:8a:f6:8d:57:f6:96:f2:d7:bd:73: 2b:fc:bc:52:3b:84:67:b1:3b:11:96:9c:e0:0f:b9:ac:44:8f: 51:c7:30:54:cf:67:09:9a:3e:97:e0:56:75:e9:dd:ab:af:71: 55:7a:99:a6:df:6a:f1:59:2c:08:53:ec:4d:87:af:6d:f9:d6: 21:9d:f7:2c:01:b1:27:ec:08:f8:75:f6:41:13:f9:8f:c8:be: 68:e8:bf:60:fa:c2:e0:94:2e:33:30:c8:80:48:65:ef:0d:92: e7:ec:fa:38:e0:31:cd:80:cb:7c:7e:f8:c8:47:2f:83:ed:d3: 27:ed:39:b3:62:a5:77:35:b5:1c:c0:12:19:fe:70:39:91:af: 18:30:9b:b4:f1:c6:9c:7d:aa:62:db:fd:e6:a0:91:1e:2f:c7: 29:86:91:b4:32:a6:16:60:61:ed:bd:87:ca:3f:1a:ad:02:85: fc:0e:90:4e:e4:4a:f9:0c:cc:75:49:30:21:f8:74:8a:06:9b: 2c:ef:5d:50:cd:8f:6d:ed:d9:39:5e:bd:28:a8:2a:4c:ad:8d: ee:fa:ca:e1:dd:a6:26:a2:4b:fd:f3:9a:46:d9:ff:c1:1f:89: 27:f3:87:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97Q5fwPNjNzuOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDg1YTRjZWItMmFhOS00NzA0LWJjOTgtYjkxOTBkMDRiZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvy2RAAArRGIgL1ecrj+Wl7bXO5o/JOdVgGU Hlzz+hnAw0spIoa39uDR4sucNaSTerVWRR8NODhmAL6E5AYvtSqLgLf69b4hXG7t 1oOQ8pbABOTCk8x9cLkKit089g8f4shqBZnunCTmTXR0La9Gzfwa1SGmqCeZ4/Iw HL5RqHMQNOLRGo/uBmH7CaEbFrCl8eiu0VuzbNLTmp/fa5p+fPY/RQCrP+BLqfFy rEDYkA7Aja8W3EgC+QcUDEiWxIjTP0hhUhv/acdu9Zfti6PyUBbOs65i0nY/1LD+ vPArdzUTduu9dSVN5HhAG/jYXBFLeG0E1PZJRnw0/MLUdwAkzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaapsZuE2080ijnM4jd+X5Jgx2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZjViNWNlODUtYTEyMi0z OTYwLWJmODItMjg2MjM3OWY5OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPDvg2parFle0JDKaTB6yVAdoMTglEfD5eHivaNV/aW8te9cyv8vFI7 hGexOxGWnOAPuaxEj1HHMFTPZwmaPpfgVnXp3auvcVV6mabfavFZLAhT7E2Hr235 1iGd9ywBsSfsCPh19kET+Y/Ivmjov2D6wuCULjMwyIBIZe8Nkufs+jjgMc2Ay3x+ +MhHL4Pt0yftObNipXc1tRzAEhn+cDmRrxgwm7Txxpx9qmLb/eagkR4vxymGkbQy phZgYe29h8o/Gq0ChfwOkE7kSvkMzHVJMCH4dIoGmyzvXVDNj23t2TlevSioKkyt je76yuHdpiaiS/3zmkbZ/8EfiSfzh4g= -----END CERTIFICATE-----Generated at Sun Oct 11 11:35:00 2026 by rpki-client