$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/023faff8-2743-302d-a9b7-559f261a706f.roa File: 023faff8-2743-302d-a9b7-559f261a706f.roa (raw, json) Hash identifier: +yCY9onAFoEMjCnqoy/jX8/Wc3wo0YJxhS+p8enyShY= Subject key identifier: CD:01:7F:EA:1C:43:A0:4D:93:98:4D:20:E4:FE:9B:5F:20:35:3A:6E Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A6048D0A558AC1EF9580 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/023faff8-2743-302d-a9b7-559f261a706f.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a6:04:8d:0a:55:8a:c1:ef:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=f36f506c-cc8a-44f2-8bf8-f84acf5fbe8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fe:57:06:e7:2b:8f:86:90:7c:48:4c:76:e8: 1f:e6:50:4e:e5:f4:13:0b:c8:16:ff:8a:9b:dc:60: 96:c2:26:59:33:8b:20:ce:36:ec:93:eb:09:ed:35: 82:ca:2d:00:77:9a:4c:3b:fb:f7:00:f6:3e:aa:5a: 5a:26:b5:70:1f:7f:11:f1:c4:58:37:2e:d2:01:25: 74:3a:e9:80:08:75:ce:8c:dd:63:f7:ed:c1:14:8e: f9:ee:da:b9:e8:5b:09:d0:d7:e5:91:5f:4e:55:09: d4:40:ab:66:88:94:b6:54:51:72:6a:a0:ed:dd:3c: 6a:fd:92:04:1f:21:bc:cf:06:af:ff:5b:60:ba:c1: 12:b8:07:10:e3:72:6c:0b:53:b7:ac:76:55:dd:78: 02:a5:71:0b:3e:b0:f0:87:7a:b7:92:78:1a:89:ed: e8:ef:06:75:cc:bc:e9:25:b9:7c:8b:2b:b2:ac:8f: 3e:eb:ec:ca:8c:51:9e:31:e3:fd:e5:45:ef:26:27: 79:a2:15:d7:51:21:60:91:55:18:99:df:d2:52:67: dc:30:75:36:e4:40:f7:e5:a0:42:34:f4:ab:f0:b4: 01:33:26:45:ae:c4:29:46:9e:c2:46:a2:34:1e:0b: c6:ed:44:e6:77:3e:5e:94:24:52:0f:49:c5:6d:52: e8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:01:7F:EA:1C:43:A0:4D:93:98:4D:20:E4:FE:9B:5F:20:35:3A:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/023faff8-2743-302d-a9b7-559f261a706f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f9:7f:d2:53:69:37:e3:c1:4f:8a:22:6e:5b:b0:a1:a8:53: d6:d8:f8:cc:1c:67:f5:1c:d4:b3:5a:14:fb:64:cf:c4:21:3f: 39:1e:4e:d6:20:1f:11:10:f7:27:36:fd:7c:d2:e3:60:3e:14: 7b:fa:6b:7b:31:e3:7d:8d:3d:66:9d:11:51:cf:4a:bf:cb:9a: 0e:61:0c:df:0b:45:1e:e4:9a:68:d0:9a:5c:ca:25:0e:cd:1f: 46:aa:a6:8f:88:73:c5:75:b5:59:e6:d2:ef:a6:7d:ad:e8:0d: 54:f9:cc:98:ad:ce:6d:8a:77:ae:e2:98:c6:71:de:a9:02:55: f5:bc:6a:60:7b:1d:83:2c:fb:d1:e1:5b:c6:bd:fe:ca:08:b5: f7:03:e6:07:07:20:30:7b:a2:a0:cd:23:b4:ee:54:f2:f1:48: e5:40:ea:f8:8b:47:e5:80:60:01:93:a6:87:ee:a5:b9:99:3e: 7a:9b:29:0a:02:d3:15:7d:f6:99:24:51:88:c9:ad:c1:a7:22: fc:9c:7d:3b:c6:c7:7e:5c:fc:43:9e:3b:57:8a:01:cd:e4:56: d5:8b:c3:a1:59:14:58:40:93:9c:77:f2:97:14:c3:65:f8:cf: 86:1a:80:dc:6b:1d:c4:63:ea:e3:87:67:57:77:7b:ec:31:62: d7:bf:05:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96YEjQpVisHvlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjM2ZjUwNmMtY2M4YS00NGYyLThiZjgtZjg0YWNmNWZiZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif5XBucrj4aQfEhMdugf5lBO5fQTC8gW/4qb 3GCWwiZZM4sgzjbsk+sJ7TWCyi0Ad5pMO/v3APY+qlpaJrVwH38R8cRYNy7SASV0 OumACHXOjN1j9+3BFI757tq56FsJ0NflkV9OVQnUQKtmiJS2VFFyaqDt3Txq/ZIE HyG8zwav/1tgusESuAcQ43JsC1O3rHZV3XgCpXELPrDwh3q3kngaie3o7wZ1zLzp Jbl8iyuyrI8+6+zKjFGeMeP95UXvJid5ohXXUSFgkVUYmd/SUmfcMHU25ED35aBC NPSr8LQBMyZFrsQpRp7CRqI0HgvG7UTmdz5elCRSD0nFbVLoNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0Bf+ocQ6BNk5hNIOT+m18gNTpuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMDIzZmFmZjgtMjc0My0z MDJkLWE5YjctNTU5ZjI2MWE3MDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED5f9JTaTfjwU+KIm5bsKGoU9bY+MwcZ/Uc1LNaFPtkz8QhPzkeTtYg HxEQ9yc2/XzS42A+FHv6a3sx432NPWadEVHPSr/Lmg5hDN8LRR7kmmjQmlzKJQ7N H0aqpo+Ic8V1tVnm0u+mfa3oDVT5zJitzm2Kd67imMZx3qkCVfW8amB7HYMs+9Hh W8a9/soItfcD5gcHIDB7oqDNI7TuVPLxSOVA6viLR+WAYAGTpofupbmZPnqbKQoC 0xV99pkkUYjJrcGnIvycfTvGx35c/EOeO1eKAc3kVtWLw6FZFFhAk5x38pcUw2X4 z4YagNxrHcRj6uOHZ1d3e+wxYte/BWQ= -----END CERTIFICATE-----Generated at Sat Oct 10 13:45:40 2026 by rpki-client