$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1f7ab9f5-5af1-3231-bdd7-dac4b5f427e1.roa File: 1f7ab9f5-5af1-3231-bdd7-dac4b5f427e1.roa (raw, json) Hash identifier: V/Tjm0Do/u456C6OXWNgrGFosJ1THryW6jtHHu47Ddg= Subject key identifier: 4C:43:85:8D:14:64:7C:DB:F5:6D:93:BA:6B:50:BE:9A:0A:82:6E:93 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A3BE4CB783B262270180 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1f7ab9f5-5af1-3231-bdd7-dac4b5f427e1.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a3:be:4c:b7:83:b2:62:27:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=565a339e-e352-4df3-ab1b-d59037532113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f2:74:50:fc:39:40:72:0f:23:14:43:9a:89: 12:03:51:22:b9:1f:9d:47:72:35:6e:6f:8f:d5:e8: 71:3d:55:30:10:57:75:9d:0c:9b:f1:9e:e8:2a:5c: f5:ff:63:4c:11:cf:22:5a:7a:3d:f0:b3:58:e0:20: 52:7b:4b:ec:6f:24:15:ef:64:5a:75:d4:29:c5:47: 48:f4:e8:1b:b5:71:89:e7:77:7b:be:67:79:26:0f: 9c:55:64:44:4a:db:00:47:53:31:7c:c7:ef:a4:9d: 70:23:be:b8:b4:37:5c:0c:8c:f2:4c:04:4d:25:a9: 06:6d:65:2b:64:f0:c2:09:5d:ad:e7:35:53:94:9d: 1f:98:4c:b6:9b:85:3b:80:48:8f:cd:32:46:fb:6d: cc:e1:69:2b:22:50:74:e7:3c:77:96:4f:f4:4c:42: 5e:4a:02:3f:68:09:d6:63:c6:df:5f:9d:60:9b:0c: 83:87:7e:1b:ba:21:dc:cd:2c:67:8d:e1:b2:c7:ac: 05:9a:b8:c5:79:8c:c5:92:dc:5b:bd:ee:f1:e5:08: c0:b0:ae:0b:4c:28:fb:55:27:0f:99:c0:80:db:9f: 14:09:ca:ba:83:08:dd:f7:9c:a0:4a:41:3a:c4:c3: 80:db:c0:d5:bb:34:0e:a9:02:7b:45:51:9c:0c:59: 0e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:43:85:8D:14:64:7C:DB:F5:6D:93:BA:6B:50:BE:9A:0A:82:6E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1f7ab9f5-5af1-3231-bdd7-dac4b5f427e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:28:d5:f4:2d:b0:de:b9:d8:36:ad:23:da:be:bc:2a:f2:fb: 73:1f:e6:c3:fd:50:b3:94:1f:09:fa:b2:7d:2a:4d:4e:80:7c: ac:9a:e8:f2:34:f7:65:28:e2:82:38:31:39:f9:bc:98:88:0d: 46:0e:5a:67:25:45:7b:5b:a8:cf:f0:84:e4:30:1e:5a:fa:9e: 0d:cd:09:ed:99:6b:6b:72:81:2e:e3:e3:af:95:d4:9d:a8:5f: 23:af:bf:7e:73:42:ef:eb:5e:ef:b9:cc:c1:b0:63:a1:99:f7: 87:1c:9e:40:a2:2a:08:4c:b8:04:a5:93:e5:89:3c:b7:69:f1: ee:ac:f9:bf:06:9a:33:42:07:10:57:ae:04:ac:7d:32:fd:4e: 38:7f:c3:d2:47:67:81:15:1c:86:13:5a:40:36:93:d9:1c:86: dd:d2:01:53:30:4b:a3:36:92:8e:5e:1f:5a:c6:bb:85:74:e6: 58:af:21:39:ae:95:3c:67:1a:11:93:54:59:17:20:6b:0a:9e: fa:d9:03:47:3a:58:7c:4b:ac:d5:c3:3f:8c:0f:87:26:98:22: 2c:2c:b2:ea:88:8a:e3:35:9c:99:8c:5c:f2:e9:eb:ad:c2:eb: 86:a5:6b:e9:90:35:6b:af:61:24:6e:a9:9a:d5:86:7e:aa:59: 6e:e3:4c:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96O+TLeDsmInAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTY1YTMzOWUtZTM1Mi00ZGYzLWFiMWItZDU5MDM3NTMyMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPJ0UPw5QHIPIxRDmokSA1EiuR+dR3I1bm+P 1ehxPVUwEFd1nQyb8Z7oKlz1/2NMEc8iWno98LNY4CBSe0vsbyQV72RaddQpxUdI 9OgbtXGJ53d7vmd5Jg+cVWREStsAR1MxfMfvpJ1wI764tDdcDIzyTARNJakGbWUr ZPDCCV2t5zVTlJ0fmEy2m4U7gEiPzTJG+23M4WkrIlB05zx3lk/0TEJeSgI/aAnW Y8bfX51gmwyDh34buiHczSxnjeGyx6wFmrjFeYzFktxbve7x5QjAsK4LTCj7VScP mcCA258UCcq6gwjd95ygSkE6xMOA28DVuzQOqQJ7RVGcDFkOqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExDhY0UZHzb9W2TumtQvpoKgm6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMWY3YWI5ZjUtNWFmMS0z MjMxLWJkZDctZGFjNGI1ZjQyN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABco1fQtsN652DatI9q+vCry+3Mf5sP9ULOUHwn6sn0qTU6AfKya6PI0 92Uo4oI4MTn5vJiIDUYOWmclRXtbqM/whOQwHlr6ng3NCe2Za2tygS7j46+V1J2o XyOvv35zQu/rXu+5zMGwY6GZ94ccnkCiKghMuASlk+WJPLdp8e6s+b8GmjNCBxBX rgSsfTL9Tjh/w9JHZ4EVHIYTWkA2k9kcht3SAVMwS6M2ko5eH1rGu4V05livITmu lTxnGhGTVFkXIGsKnvrZA0c6WHxLrNXDP4wPhyaYIiwssuqIiuM1nJmMXPLp663C 64ala+mQNWuvYSRuqZrVhn6qWW7jTJo= -----END CERTIFICATE-----Generated at Mon Sep 28 21:43:03 2026 by rpki-client