$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3b3cbe77-0639-31d8-a800-0723ddbf3eba.roa File: 3b3cbe77-0639-31d8-a800-0723ddbf3eba.roa (raw, json) Hash identifier: rXmWfl2qWmOGTufWLZ4oD7rprbu2r1APPXzuoH7rQv0= Subject key identifier: AB:35:61:A4:37:D6:B9:C5:3D:7D:51:4A:04:07:E8:10:D2:BC:7F:20 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D28A2F431818DA5200C8 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3b3cbe77-0639-31d8-a800-0723ddbf3eba.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d2:8a:2f:43:18:18:da:52:00:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=e0058990-5a45-4ef3-b144-697ad9d403b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8a:42:d8:69:4e:aa:68:db:f4:aa:78:68:b5: 2e:cf:32:95:2f:ca:b7:81:c9:93:5c:54:53:d1:97: e7:d6:17:1c:39:bf:08:b8:90:a3:3e:c0:37:2f:ba: b1:14:41:97:d1:03:70:41:69:2c:09:a6:f6:fe:e9: 11:61:ad:0a:d9:fb:97:b6:14:f1:fa:a8:0e:c5:1f: b9:44:8a:f3:67:d0:e6:00:04:c5:7d:58:2b:63:c5: c1:d0:b7:94:67:82:65:59:af:74:46:4f:b7:05:ff: a3:45:cb:1d:e8:96:c9:97:07:6b:72:48:00:e3:8d: 61:16:b8:ce:fb:80:b9:e1:33:6b:73:b0:02:bf:93: 45:a2:e6:b9:83:5e:7a:14:d6:ea:19:69:85:46:37: ce:5e:f7:83:52:2e:97:f6:52:66:41:74:ca:6c:4d: 71:b7:f3:bb:92:1f:f1:28:7c:a8:52:99:41:15:e6: 96:13:cf:03:10:a5:f3:9f:80:f1:5b:e7:2f:c5:35: 51:8b:fe:10:01:e3:7e:a8:04:2f:26:ad:38:cc:f6: 00:d6:24:e8:1d:28:7d:72:9b:87:44:4a:84:eb:58: 0c:00:9f:65:9f:e5:40:d7:f5:bd:02:32:bb:06:ff: f4:a5:d1:3f:ab:8d:6b:c1:83:c1:86:f1:09:a4:ea: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:35:61:A4:37:D6:B9:C5:3D:7D:51:4A:04:07:E8:10:D2:BC:7F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3b3cbe77-0639-31d8-a800-0723ddbf3eba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ce:01:fb:d7:dd:6d:af:59:d5:b5:25:a5:d1:b4:d3:3b:65: e3:c5:c1:29:ae:3c:07:fc:4d:28:08:e4:bb:40:c2:4c:05:4a: 8c:f9:e4:f6:d2:a7:57:c1:6a:54:7a:2a:9a:fa:3d:af:ee:2f: ac:6b:d4:85:85:34:06:38:19:7b:23:81:ba:d3:a6:b1:de:a4: 21:8f:8a:b2:8c:df:df:96:f9:4f:28:1f:e8:68:c3:f4:6d:81: 7d:1c:38:e7:da:21:be:0e:6f:49:86:55:b9:ab:50:91:94:e7: a7:c4:d3:fa:84:f7:52:50:e8:18:25:4d:d2:08:14:f1:2c:21: 55:50:68:7f:66:1c:78:8b:a4:7a:19:40:f0:af:49:db:26:fc: 28:28:c5:58:58:c2:d3:68:ee:15:f5:d9:c8:6a:88:cf:bf:f4: 2d:46:91:33:ca:0d:e2:7e:13:8b:1c:f2:b3:a9:5c:b1:9c:47: 83:4f:c4:91:0d:37:68:4b:2b:1a:63:ae:32:99:d9:59:00:08: 7a:73:99:df:b3:17:28:74:9c:ea:1c:d5:3d:0b:54:96:d0:52: e5:d4:c2:35:0d:12:77:58:cf:cf:46:25:88:38:eb:2b:36:be: 4c:38:bd:2b:ce:8c:a7:d0:2d:41:43:fb:3a:92:8b:2b:10:ec: 26:a5:b0:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99KKL0MYGNpSAMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTAwNTg5OTAtNWE0NS00ZWYzLWIxNDQtNjk3YWQ5ZDQwM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnopC2GlOqmjb9Kp4aLUuzzKVL8q3gcmTXFRT 0Zfn1hccOb8IuJCjPsA3L7qxFEGX0QNwQWksCab2/ukRYa0K2fuXthTx+qgOxR+5 RIrzZ9DmAATFfVgrY8XB0LeUZ4JlWa90Rk+3Bf+jRcsd6JbJlwdrckgA441hFrjO +4C54TNrc7ACv5NFoua5g156FNbqGWmFRjfOXveDUi6X9lJmQXTKbE1xt/O7kh/x KHyoUplBFeaWE88DEKXzn4DxW+cvxTVRi/4QAeN+qAQvJq04zPYA1iToHSh9cpuH REqE61gMAJ9ln+VA1/W9AjK7Bv/0pdE/q41rwYPBhvEJpOrAkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKs1YaQ31rnFPX1RSgQH6BDSvH8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvM2IzY2JlNzctMDYzOS0z MWQ4LWE4MDAtMDcyM2RkYmYzZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETOAfvX3W2vWdW1JaXRtNM7ZePFwSmuPAf8TSgI5LtAwkwFSoz55PbS p1fBalR6Kpr6Pa/uL6xr1IWFNAY4GXsjgbrTprHepCGPirKM39+W+U8oH+how/Rt gX0cOOfaIb4Ob0mGVbmrUJGU56fE0/qE91JQ6BglTdIIFPEsIVVQaH9mHHiLpHoZ QPCvSdsm/CgoxVhYwtNo7hX12chqiM+/9C1GkTPKDeJ+E4sc8rOpXLGcR4NPxJEN N2hLKxpjrjKZ2VkACHpzmd+zFyh0nOoc1T0LVJbQUuXUwjUNEndYz89GJYg46ys2 vkw4vSvOjKfQLUFD+zqSiysQ7CalsAE= -----END CERTIFICATE-----Generated at Sun Sep 20 20:36:51 2026 by rpki-client