$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/024fa3b2-2825-3cfc-b328-0c4c1b412f52.roa File: 024fa3b2-2825-3cfc-b328-0c4c1b412f52.roa (raw, json) Hash identifier: buP0RojsXk9rFYC3IlKe42ortPOPpPLvdJ5UPR64oVo= Subject key identifier: FC:1D:C7:B1:73:29:A1:88:85:F6:18:5A:15:E0:F3:48:82:96:20:79 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D5A2BF6BA4430282A700 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/024fa3b2-2825-3cfc-b328-0c4c1b412f52.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d5:a2:bf:6b:a4:43:02:82:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=98cee2b6-15fe-4e1e-b27c-b67d60edb939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:25:84:6e:7f:9d:cb:a6:8b:f3:31:e5:22: f7:d4:c7:89:3d:84:f9:c8:52:32:43:22:b1:82:b2: 00:ff:4d:99:15:d2:6b:ea:2c:f8:63:dc:5e:b2:25: 37:bb:7d:9c:59:81:02:41:45:46:02:6e:34:f6:2b: b6:ee:fe:8a:f4:8d:2e:35:8a:b3:d6:6c:64:d3:d2: 06:4c:5d:6e:2c:31:08:0f:ac:10:83:af:46:b5:48: 80:37:92:4a:00:bf:aa:79:9a:a6:db:1b:94:0e:21: 2f:fa:07:4f:7e:e2:da:f5:e5:05:04:1c:b3:87:4d: d6:ee:79:22:94:5a:1e:e3:e3:07:a6:9c:29:22:b1: 75:3f:62:8f:ef:77:e4:9c:99:f2:4b:46:3e:74:95: eb:98:4b:23:5a:22:79:75:9d:90:71:cd:0c:7d:ff: ca:a7:f4:ae:0a:64:e5:89:9b:ad:1b:a1:e1:59:b3: 27:75:d0:c6:47:c1:f6:ae:17:76:3f:9a:40:11:f8: 16:ed:5a:51:42:48:76:16:83:4b:4a:d7:97:da:70: c0:2f:1b:e9:9a:c5:c4:68:30:01:eb:46:11:03:a5: 37:80:7c:fa:38:8b:73:ff:58:62:cf:c5:f1:56:4c: 3f:3a:02:06:be:20:f5:c6:14:d3:27:99:92:70:6e: bd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1D:C7:B1:73:29:A1:88:85:F6:18:5A:15:E0:F3:48:82:96:20:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/024fa3b2-2825-3cfc-b328-0c4c1b412f52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:02:4b:05:6e:80:12:23:0f:82:17:6a:3a:51:96:67:53:03: 77:4d:f1:c7:c9:01:88:bb:a8:bf:7c:2a:ee:24:90:72:76:6a: 5f:3c:fd:08:dc:36:20:d3:7a:bd:a6:fb:89:f9:2f:d8:2d:86: 4e:e8:21:85:21:8a:c3:fb:67:8d:7f:4d:95:ff:84:eb:82:91: 8e:75:3a:57:34:2a:a7:9c:2d:02:d5:c7:6a:f4:f0:ba:3f:c5: 41:cc:25:02:27:59:f0:d6:e4:7d:3f:a1:31:07:5a:1d:48:d9: a7:b6:79:6e:99:a3:84:84:9a:a6:ea:62:db:c0:52:13:ce:c2: 84:ce:66:ac:24:d3:6b:fe:95:7e:12:e0:1a:44:f6:41:93:c7: ca:59:c1:11:f9:47:8f:b3:79:9c:2b:2e:cf:85:1a:c8:bb:fb: 2a:28:23:42:77:7c:67:bd:ef:e6:cb:1b:98:eb:8a:71:97:42: 51:25:b9:e3:82:de:62:b0:2b:b5:48:41:f2:ae:8d:99:c1:77: f1:35:46:86:ae:a5:27:ff:b6:db:75:e9:a5:a4:ee:9c:dd:fa: af:6e:a5:7f:96:7e:07:12:98:4e:ec:5e:ae:60:4b:4c:52:64: ac:bb:db:37:c7:92:fd:67:0c:6a:3e:c2:c1:4a:22:47:51:38: 66:07:f2:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99Wiv2ukQwKCpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OThjZWUyYjYtMTVmZS00ZTFlLWIyN2MtYjY3ZDYwZWRiOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRAlhG5/ncumi/Mx5SL31MeJPYT5yFIyQyKx grIA/02ZFdJr6iz4Y9xesiU3u32cWYECQUVGAm409iu27v6K9I0uNYqz1mxk09IG TF1uLDEID6wQg69GtUiAN5JKAL+qeZqm2xuUDiEv+gdPfuLa9eUFBByzh03W7nki lFoe4+MHppwpIrF1P2KP73fknJnyS0Y+dJXrmEsjWiJ5dZ2Qcc0Mff/Kp/SuCmTl iZutG6HhWbMnddDGR8H2rhd2P5pAEfgW7VpRQkh2FoNLSteX2nDALxvpmsXEaDAB 60YRA6U3gHz6OItz/1hiz8XxVkw/OgIGviD1xhTTJ5mScG690QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwdx7FzKaGIhfYYWhXg80iCliB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMDI0ZmEzYjItMjgyNS0z Y2ZjLWIzMjgtMGM0YzFiNDEyZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsCSwVugBIjD4IXajpRlmdTA3dN8cfJAYi7qL98Ku4kkHJ2al88/Qjc NiDTer2m+4n5L9gthk7oIYUhisP7Z41/TZX/hOuCkY51Olc0KqecLQLVx2r08Lo/ xUHMJQInWfDW5H0/oTEHWh1I2ae2eW6Zo4SEmqbqYtvAUhPOwoTOZqwk02v+lX4S 4BpE9kGTx8pZwRH5R4+zeZwrLs+FGsi7+yooI0J3fGe97+bLG5jrinGXQlElueOC 3mKwK7VIQfKujZnBd/E1RoaupSf/ttt16aWk7pzd+q9upX+WfgcSmE7sXq5gS0xS ZKy72zfHkv1nDGo+wsFKIkdROGYH8o8= -----END CERTIFICATE-----Generated at Mon Sep 28 23:29:57 2026 by rpki-client