$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30a4f60f-dd84-3200-a318-54fb513afa8d.roa File: 30a4f60f-dd84-3200-a318-54fb513afa8d.roa (raw, json) Hash identifier: drAxadNu891XPvz7q6HTFu4Ovuze0/mD6AAcKadvNQE= Subject key identifier: 34:06:03:52:D9:77:2E:16:86:15:16:96:85:58:95:8E:63:D1:CD:88 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7CE69ACB1F731AD31B600 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30a4f60f-dd84-3200-a318-54fb513afa8d.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 64.16.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ce:69:ac:b1:f7:31:ad:31:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=d312240f-a7dc-4861-a479-760b75173d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:1c:49:c7:34:16:ea:6a:88:d4:c4:cd:0a: e6:b2:1d:cd:81:f6:8b:7a:ef:72:ff:e3:4d:7f:7f: ea:45:2e:5f:50:be:e6:97:ae:23:a8:15:a6:46:e8: 58:64:10:13:05:46:b1:55:15:b8:47:81:7a:1e:be: 52:f0:b2:1d:57:2f:86:39:3e:15:31:dc:ad:e7:c3: 6c:26:1a:06:54:c2:2b:b3:0a:87:03:e7:88:84:c2: fd:9c:52:e9:44:83:c2:0f:ff:1b:ea:c8:ca:4a:ca: b0:eb:ff:3f:17:2c:57:03:27:a9:c6:d4:bc:f4:fc: d2:93:10:63:58:fe:b8:70:78:e6:41:b2:fc:80:4b: 26:0f:9c:56:81:18:19:5e:1d:7d:6f:9b:6e:a9:d1: 5d:98:47:e6:08:35:78:65:cd:11:c6:ea:0a:7a:3f: 34:91:d8:ee:7f:9e:51:b5:a4:fb:c2:91:a5:3c:60: f7:f2:7e:c3:54:a7:6f:aa:b6:da:29:ea:aa:47:ec: 0a:c4:55:c2:c4:63:83:7e:60:0d:aa:a3:5b:31:bd: 59:ad:15:7c:cb:cc:10:69:a3:ae:d3:87:8d:00:1f: 51:0b:ec:79:6b:f1:12:72:ce:1e:79:fb:f4:f5:a8: 11:2c:94:96:1d:82:ed:43:1b:9f:ac:14:85:6c:c1: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:06:03:52:D9:77:2E:16:86:15:16:96:85:58:95:8E:63:D1:CD:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30a4f60f-dd84-3200-a318-54fb513afa8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:eb:6c:db:d5:b4:91:dc:c5:9b:0f:82:ce:41:6c:dc:fb:cf: 66:47:e8:bf:6d:8f:0b:dd:29:50:5d:65:8e:8f:41:08:34:67: 77:cd:0f:95:a9:88:44:92:d2:4b:1a:4a:55:7c:33:e4:78:38: 52:f0:c4:e1:06:c6:38:57:ee:7c:34:79:53:9f:4a:4e:66:ac: 1c:fb:23:2c:a0:4a:b1:66:3e:ed:fc:de:c9:d6:a5:30:7e:e7: c4:84:9e:ae:64:48:07:4e:fc:c2:91:46:5b:9e:56:8e:43:3f: 90:81:dd:8d:18:36:ad:19:b8:e0:7c:58:51:83:c3:35:bc:56: 8c:b6:54:8e:38:c7:f7:8a:af:c9:25:01:f0:d4:a1:40:43:a8: c4:b3:ec:37:00:a0:0f:a3:83:28:bb:4f:52:a7:ef:b3:48:8d: 1d:d7:d2:b2:db:82:84:22:96:d7:d1:cc:a9:fb:e4:37:6e:71: ee:d3:ad:c1:3c:a4:74:1e:65:69:d1:7f:88:24:2f:48:da:6a: 6c:3e:ac:07:45:99:2f:c5:41:dc:de:ee:95:65:b2:2a:2d:0e: f7:0f:60:38:d5:90:5b:56:fd:b6:dc:e2:6a:64:69:b7:7f:b9: 46:52:b9:29:17:82:66:fa:99:71:3f:b3:42:7e:b8:85:a3:09: 38:c4:b0:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g985prLH3Ma0xtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZDMxMjI0MGYtYTdkYy00ODYxLWE0NzktNzYwYjc1MTczZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy4cScc0FupqiNTEzQrmsh3NgfaLeu9y/+NN f3/qRS5fUL7ml64jqBWmRuhYZBATBUaxVRW4R4F6Hr5S8LIdVy+GOT4VMdyt58Ns JhoGVMIrswqHA+eIhML9nFLpRIPCD/8b6sjKSsqw6/8/FyxXAyepxtS89PzSkxBj WP64cHjmQbL8gEsmD5xWgRgZXh19b5tuqdFdmEfmCDV4Zc0RxuoKej80kdjuf55R taT7wpGlPGD38n7DVKdvqrbaKeqqR+wKxFXCxGODfmANqqNbMb1ZrRV8y8wQaaOu 04eNAB9RC+x5a/EScs4eefv09agRLJSWHYLtQxufrBSFbMFDhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQGA1LZdy4WhhUWloVYlY5j0c2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMzBhNGY2MGYtZGQ4NC0z MjAwLWEzMTgtNTRmYjUxM2FmYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/rbNvVtJHcxZsPgs5BbNz7z2ZH6L9tjwvdKVBdZY6PQQg0Z3fND5Wp iESS0ksaSlV8M+R4OFLwxOEGxjhX7nw0eVOfSk5mrBz7IyygSrFmPu383snWpTB+ 58SEnq5kSAdO/MKRRlueVo5DP5CB3Y0YNq0ZuOB8WFGDwzW8Voy2VI44x/eKr8kl AfDUoUBDqMSz7DcAoA+jgyi7T1Kn77NIjR3X0rLbgoQiltfRzKn75Dduce7TrcE8 pHQeZWnRf4gkL0jaamw+rAdFmS/FQdze7pVlsiotDvcPYDjVkFtW/bbc4mpkabd/ uUZSuSkXgmb6mXE/s0J+uIWjCTjEsFU= -----END CERTIFICATE-----Generated at Sun Sep 20 17:49:32 2026 by rpki-client