$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f80284b9-8291-302b-a728-5aaf1f6a8da7.roa File: f80284b9-8291-302b-a728-5aaf1f6a8da7.roa (raw, json) Hash identifier: b2Dvuh2DC44w/Lqpyz9ARQJ+7VQnQEUL/zSCPtO2Ek4= Subject key identifier: 73:C1:46:20:A4:93:00:B4:F7:5A:21:34:39:D4:69:84:B1:64:11:F5 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F79E7A1E9601CB1AB1C900 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f80284b9-8291-302b-a728-5aaf1f6a8da7.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:9e:7a:1e:96:01:cb:1a:b1:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=5cef1102-eb0c-4076-b42a-e3a60ec263a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b8:a6:e4:09:61:53:4a:9d:bc:b7:be:86:2c: 51:bc:5a:bf:bc:6b:58:ef:ce:3d:71:f3:b9:11:0c: ca:08:a9:e3:81:6a:74:a2:f4:1e:87:a8:db:e3:70: 21:38:73:62:d8:d3:7b:9c:c2:88:89:8a:68:ac:63: 2e:63:24:bb:32:29:fc:fc:38:9a:72:76:71:4f:1a: 3b:de:13:cf:09:2d:db:e1:a4:f8:49:3a:4d:12:04: 6b:00:50:8e:ae:7f:b2:b4:39:3f:43:bb:21:a3:df: f0:8b:22:39:b1:f6:cd:d8:b3:e9:d3:1a:3f:0d:12: db:fb:aa:c7:67:74:3f:8d:95:2b:40:11:b5:c7:f2: 5e:60:27:f0:0c:7b:83:b9:0f:be:1a:e7:5c:12:14: 19:4c:63:d2:89:22:f7:00:14:d2:31:a9:89:c1:e4: 07:92:2e:de:50:0e:6b:f9:17:b5:40:61:73:b8:31: 62:b7:f1:d2:04:53:d0:d0:3c:66:15:bd:7d:68:1c: ef:15:21:e9:cd:61:9c:f9:55:39:79:28:61:47:e3: 62:3e:39:39:b8:16:4f:2a:cd:f1:0e:8f:58:99:93: fb:24:fc:5e:8b:8c:2b:96:83:1f:ca:cf:f6:5a:fe: 15:8f:a8:2b:f1:ac:b1:94:5b:23:3b:6c:23:43:72: 30:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C1:46:20:A4:93:00:B4:F7:5A:21:34:39:D4:69:84:B1:64:11:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f80284b9-8291-302b-a728-5aaf1f6a8da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d9:29:57:a8:f7:85:74:77:3f:de:61:fe:2a:33:88:ea:39: 27:54:22:11:87:32:9e:2f:d9:a6:f6:b5:78:bd:d3:76:b1:d3: b9:2d:77:3f:4a:a5:7d:03:d4:a5:38:fb:0f:10:89:9f:77:46: 91:b9:94:bd:0f:b2:d6:72:d0:16:65:5d:dd:37:23:bc:9a:55: 36:ce:90:9e:4f:b4:60:6c:d5:47:a4:48:49:bc:a6:64:bd:2c: da:f0:81:a2:6f:43:b9:c5:7a:d0:9d:fd:f0:78:09:55:44:18: 26:97:d3:b6:b0:d6:e7:34:00:38:82:af:65:f7:94:b4:c0:cc: c2:5c:48:0c:d0:42:a4:04:67:3b:23:9c:6d:89:fe:98:da:d6: 19:53:fb:4f:96:27:88:44:31:c2:a9:32:c8:2a:a4:04:fa:34: dd:03:f1:a9:19:58:3b:ad:6b:1d:53:7d:0e:95:d2:5e:9e:84: 71:37:ab:cc:28:01:32:59:13:60:9e:10:ac:38:81:f6:3e:a0: 76:ee:ae:26:d6:be:b8:36:8b:6c:ab:80:8b:a7:a4:e6:89:85: 2c:2f:22:79:16:45:75:97:a8:d5:c9:84:0d:bf:d1:4d:db:07: 92:0f:59:3b:c8:48:41:2b:e7:14:a4:32:c4:81:82:ae:ad:e5: 8a:80:7d:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g9556HpYByxqxyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NWNlZjExMDItZWIwYy00MDc2LWI0MmEtZTNhNjBlYzI2M2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7im5AlhU0qdvLe+hixRvFq/vGtY7849cfO5 EQzKCKnjgWp0ovQeh6jb43AhOHNi2NN7nMKIiYporGMuYyS7Min8/DiacnZxTxo7 3hPPCS3b4aT4STpNEgRrAFCOrn+ytDk/Q7sho9/wiyI5sfbN2LPp0xo/DRLb+6rH Z3Q/jZUrQBG1x/JeYCfwDHuDuQ++GudcEhQZTGPSiSL3ABTSMamJweQHki7eUA5r +Re1QGFzuDFit/HSBFPQ0DxmFb19aBzvFSHpzWGc+VU5eShhR+NiPjk5uBZPKs3x Do9YmZP7JPxei4wrloMfys/2Wv4Vj6gr8ayxlFsjO2wjQ3IwqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPBRiCkkwC091ohNDnUaYSxZBH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZjgwMjg0YjktODI5MS0z MDJiLWE3MjgtNWFhZjFmNmE4ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTZKVeo94V0dz/eYf4qM4jqOSdUIhGHMp4v2ab2tXi903ax07ktdz9K pX0D1KU4+w8QiZ93RpG5lL0PstZy0BZlXd03I7yaVTbOkJ5PtGBs1UekSEm8pmS9 LNrwgaJvQ7nFetCd/fB4CVVEGCaX07aw1uc0ADiCr2X3lLTAzMJcSAzQQqQEZzsj nG2J/pja1hlT+0+WJ4hEMcKpMsgqpAT6NN0D8akZWDutax1TfQ6V0l6ehHE3q8wo ATJZE2CeEKw4gfY+oHburibWvrg2i2yrgIunpOaJhSwvInkWRXWXqNXJhA2/0U3b B5IPWTvISEEr5xSkMsSBgq6t5YqAfRA= -----END CERTIFICATE-----Generated at Sun Oct 4 23:17:48 2026 by rpki-client