$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/017b2e45-d61e-3596-b55b-cf0ea74f303f.roa File: 017b2e45-d61e-3596-b55b-cf0ea74f303f.roa (raw, json) Hash identifier: rIHK30XocpydoY7qxdwt+K3oiu0rvHwARjp18y4NqsI= Subject key identifier: F3:48:F8:20:F1:0B:EA:81:59:55:1B:5D:E1:6A:98:9F:AF:33:48:A7 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A5F66D1A546B9396FBC0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/017b2e45-d61e-3596-b55b-cf0ea74f303f.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a5:f6:6d:1a:54:6b:93:96:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=484b6bf7-a3bc-4222-94b6-87841e648cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:12:74:17:ef:a2:d4:de:8a:ea:75:ad:f7:e4: 9e:ae:0a:74:29:e3:04:94:ec:80:85:38:e7:72:3c: 2c:c1:83:a6:a7:eb:de:ce:f3:f1:63:a1:f5:9d:5b: 90:6b:83:84:f6:7f:a9:70:a0:7c:9f:0a:b7:8b:46: 49:a5:cd:76:bc:83:ed:44:a9:6f:31:b6:5d:77:49: 13:16:3c:d3:6f:00:50:8d:b4:e4:2c:2b:c6:9e:08: eb:c4:50:8d:fa:52:70:2e:8c:aa:34:26:70:30:35: 60:4c:3f:1c:bd:9d:b2:2e:c8:94:43:0f:68:cf:e3: a7:9b:4f:fb:89:9b:75:d4:a9:30:29:2e:c9:67:df: 32:b0:4f:70:6b:00:d1:d2:b9:e5:10:f4:61:ef:48: 11:58:40:5d:eb:3e:32:4c:2d:9e:53:6b:9c:4c:f8: c0:bc:94:1b:3a:3f:18:58:d7:f6:31:94:7e:a8:05: 13:7b:a5:3d:98:d9:aa:1a:a6:15:59:ad:e3:8b:fe: 29:43:2d:b3:ea:2a:b2:a0:72:96:ed:61:80:4a:d0: 87:e1:c8:a7:6b:87:6b:fc:f0:54:9d:da:3e:0e:71: 71:bc:62:4b:6a:ce:bc:f0:4b:b6:2f:de:aa:3f:54: d7:8a:0a:e7:b3:db:c8:25:61:a7:b9:44:6d:51:0b: 6b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:48:F8:20:F1:0B:EA:81:59:55:1B:5D:E1:6A:98:9F:AF:33:48:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/017b2e45-d61e-3596-b55b-cf0ea74f303f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:82:f5:6b:59:6c:0a:e6:42:9f:5b:90:54:91:55:b1:ac:68: 59:0e:f4:b6:82:ed:1c:60:75:27:6a:be:bc:ee:ce:84:6b:7c: ba:2d:74:c4:88:e9:5d:d5:c2:fd:5c:16:1c:f7:2b:00:55:44: 29:e6:37:06:63:54:94:35:11:95:f8:f5:4d:6a:32:9a:9c:c4: d1:51:f3:d2:19:b4:d6:79:ed:29:2b:26:e4:65:ad:8a:05:57: f7:93:b2:78:b0:aa:51:79:9d:f3:52:37:34:c4:6e:ca:6c:60: 84:52:e2:2f:ca:db:8c:c4:46:54:ca:6a:fc:63:32:d3:f3:3b: 11:ca:9a:b5:da:e3:60:3a:b1:90:50:9d:63:d0:25:66:b9:21: 0d:14:19:ce:82:f4:62:3e:a0:de:ba:ac:e4:1a:da:21:5e:3a: 82:cc:5f:bd:9b:69:7e:93:e3:1a:6f:60:6d:1c:e7:53:63:30: a5:b4:70:17:92:41:b8:37:c4:f2:f4:0d:cb:f0:06:e5:35:53: 2c:4c:33:11:0c:60:e2:4b:ab:71:f6:9b:c2:93:09:23:3f:4a: b9:26:78:96:db:9e:bd:4a:ce:7a:d4:53:04:c1:f0:0b:24:3a: d4:9a:ed:0e:f6:00:8e:61:cb:9b:b3:9c:10:6c:69:97:94:b8: ce:68:23:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96X2bRpUa5OW+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDg0YjZiZjctYTNiYy00MjIyLTk0YjYtODc4NDFlNjQ4Y2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRJ0F++i1N6K6nWt9+Sergp0KeMElOyAhTjn cjwswYOmp+vezvPxY6H1nVuQa4OE9n+pcKB8nwq3i0ZJpc12vIPtRKlvMbZdd0kT FjzTbwBQjbTkLCvGngjrxFCN+lJwLoyqNCZwMDVgTD8cvZ2yLsiUQw9oz+Onm0/7 iZt11KkwKS7JZ98ysE9wawDR0rnlEPRh70gRWEBd6z4yTC2eU2ucTPjAvJQbOj8Y WNf2MZR+qAUTe6U9mNmqGqYVWa3ji/4pQy2z6iqyoHKW7WGAStCH4cina4dr/PBU ndo+DnFxvGJLas688Eu2L96qP1TXigrns9vIJWGnuURtUQtrPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNI+CDxC+qBWVUbXeFqmJ+vM0inMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMDE3YjJlNDUtZDYxZS0z NTk2LWI1NWItY2YwZWE3NGYzMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeC9WtZbArmQp9bkFSRVbGsaFkO9LaC7RxgdSdqvrzuzoRrfLotdMSI 6V3Vwv1cFhz3KwBVRCnmNwZjVJQ1EZX49U1qMpqcxNFR89IZtNZ57SkrJuRlrYoF V/eTsniwqlF5nfNSNzTEbspsYIRS4i/K24zERlTKavxjMtPzOxHKmrXa42A6sZBQ nWPQJWa5IQ0UGc6C9GI+oN66rOQa2iFeOoLMX72baX6T4xpvYG0c51NjMKW0cBeS Qbg3xPL0DcvwBuU1UyxMMxEMYOJLq3H2m8KTCSM/SrkmeJbbnr1KznrUUwTB8Ask OtSa7Q72AI5hy5uznBBsaZeUuM5oI9A= -----END CERTIFICATE-----Generated at Sat Oct 10 19:08:51 2026 by rpki-client