$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/29e8f21e-65cd-304f-8820-4319a250232f.roa File: 29e8f21e-65cd-304f-8820-4319a250232f.roa (raw, json) Hash identifier: l4gdtj46yZFT4m2GR23YRswuMW5bLXbn6tCCuK4kNsM= Subject key identifier: B4:3D:93:93:4D:F1:87:47:4C:8D:16:4F:D7:C2:7E:C9:A7:A9:73:AD Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D746558A92CDCF1022A0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/29e8f21e-65cd-304f-8820-4319a250232f.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d7:46:55:8a:92:cd:cf:10:22:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=167229c7-9098-4596-9fb3-030c7fad54b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:47:18:ca:5e:2a:7e:c2:08:c2:f5:f7:a9: e5:8a:8e:06:99:40:14:8a:18:bc:0d:24:1b:cb:6c: 41:de:52:f6:f4:3f:b7:5f:0f:22:71:4c:4c:e7:db: 66:e5:29:b8:69:b9:09:c6:52:db:7b:ef:66:17:1c: f7:16:73:e9:c3:f0:ff:d8:f4:20:7f:6c:31:94:c0: 74:ff:73:b5:75:42:96:9d:d1:99:b7:1c:73:9d:0e: 2d:c2:b3:cc:d7:90:e6:8a:15:fc:a3:5c:5c:61:7a: f8:33:e0:af:60:90:1b:e4:e1:90:f0:4b:79:57:d2: c2:95:a4:81:2f:36:6d:a7:28:29:88:56:86:05:21: 9c:cc:4a:60:fd:99:50:fa:fc:73:26:bc:e2:c6:cc: d1:82:3e:4e:ae:48:34:5f:7d:02:79:92:a6:ea:33: 55:ca:85:b1:94:c4:75:f6:22:dd:b5:ad:26:74:8f: 4f:be:db:ae:41:70:b7:46:06:ac:13:bb:64:34:e0: aa:8a:e1:4b:df:b0:58:1d:c1:79:24:3d:03:d3:90: 66:55:2f:d4:6f:51:dc:6e:db:18:c6:b7:a7:88:7f: d4:5a:0d:dd:60:8c:a4:ac:81:d3:06:a2:8e:77:91: cf:99:6b:8d:08:49:4d:35:b9:0b:b6:8d:f9:16:bd: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3D:93:93:4D:F1:87:47:4C:8D:16:4F:D7:C2:7E:C9:A7:A9:73:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/29e8f21e-65cd-304f-8820-4319a250232f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:72:69:18:bf:63:13:36:b0:ed:78:ef:81:8d:c1:b4:0b:05: 96:dc:4a:d6:22:dc:89:c5:cb:34:0c:4b:73:1f:2f:4f:bd:9e: 9a:ae:a0:58:bc:c9:72:41:a7:0e:fe:42:7d:f2:e9:07:0d:83: 9c:14:40:82:a5:46:b6:9e:2b:bd:2d:66:ad:a1:4c:90:81:2a: 0d:57:fa:a3:dc:4b:5c:36:48:9b:15:66:e0:77:bf:3d:4e:73: aa:d0:da:13:d6:2f:c2:db:7e:35:22:84:95:73:9d:41:b3:94: 29:c0:85:4f:c3:9b:e8:4d:60:2e:0e:20:72:da:b3:1e:1a:2d: 45:f2:d3:2c:a1:9b:07:ce:b9:62:97:e6:16:17:b2:39:73:05: e8:89:66:31:9f:54:23:41:c5:99:b5:43:51:3d:77:76:de:6b: d8:9b:b7:18:e4:08:1e:13:92:d4:7e:b8:49:8c:a8:b3:cb:31: 08:1a:84:71:ac:0b:4d:ce:36:82:32:93:70:d7:d6:72:bd:22: 12:07:6e:97:6c:91:9a:57:a3:c0:f6:4a:08:2f:11:9c:8d:1a: 06:db:10:bc:10:c0:5c:94:6c:85:cf:a6:f2:f4:7f:af:47:40: 67:0b:a5:11:23:01:45:6b:02:72:0a:c1:07:ca:b8:a7:fe:39: 25:99:8c:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99dGVYqSzc8QIqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MTY3MjI5YzctOTA5OC00NTk2LTlmYjMtMDMwYzdmYWQ1NGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0ZHGMpeKn7CCML196nlio4GmUAUihi8DSQb y2xB3lL29D+3Xw8icUxM59tm5Sm4abkJxlLbe+9mFxz3FnPpw/D/2PQgf2wxlMB0 /3O1dUKWndGZtxxznQ4twrPM15DmihX8o1xcYXr4M+CvYJAb5OGQ8Et5V9LClaSB LzZtpygpiFaGBSGczEpg/ZlQ+vxzJrzixszRgj5Orkg0X30CeZKm6jNVyoWxlMR1 9iLdta0mdI9PvtuuQXC3RgasE7tkNOCqiuFL37BYHcF5JD0D05BmVS/Ub1HcbtsY xreniH/UWg3dYIykrIHTBqKOd5HPmWuNCElNNbkLto35Fr0oBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ9k5NN8YdHTI0WT9fCfsmnqXOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMjllOGYyMWUtNjVjZC0z MDRmLTg4MjAtNDMxOWEyNTAyMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJyaRi/YxM2sO1474GNwbQLBZbcStYi3InFyzQMS3MfL0+9npquoFi8 yXJBpw7+Qn3y6QcNg5wUQIKlRraeK70tZq2hTJCBKg1X+qPcS1w2SJsVZuB3vz1O c6rQ2hPWL8LbfjUihJVznUGzlCnAhU/Dm+hNYC4OIHLasx4aLUXy0yyhmwfOuWKX 5hYXsjlzBeiJZjGfVCNBxZm1Q1E9d3bea9ibtxjkCB4TktR+uEmMqLPLMQgahHGs C03ONoIyk3DX1nK9IhIHbpdskZpXo8D2SggvEZyNGgbbELwQwFyUbIXPpvL0f69H QGcLpREjAUVrAnIKwQfKuKf+OSWZjFg= -----END CERTIFICATE-----Generated at Thu Oct 8 10:51:44 2026 by rpki-client