$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/47acfa3d-57c5-374d-a709-a28399c8e639.roa File: 47acfa3d-57c5-374d-a709-a28399c8e639.roa (raw, json) Hash identifier: en3mxcVt2TFC5NHn8XBWevAdYnl3EDaPrBkGxL2d43g= Subject key identifier: 23:97:FF:F7:A7:3F:13:59:E7:86:6A:E5:EC:DB:21:3A:69:3E:B3:C5 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7CD61AB858F55A97F5680 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/47acfa3d-57c5-374d-a709-a28399c8e639.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cd:61:ab:85:8f:55:a9:7f:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=1aac3819-4407-4818-bc55-611cd403d60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:75:0c:7c:80:02:ac:3e:cb:3e:dc:62:a8:28: 89:9d:40:ad:a4:56:83:90:79:fe:2d:31:f1:ca:1c: c5:f7:b1:2a:00:92:bf:42:91:d0:38:80:4f:d1:57: f0:3d:41:cb:7d:75:55:97:e4:da:52:a7:e7:4b:4e: b8:95:88:7c:8b:74:c0:49:8c:40:bc:cd:2d:ae:e4: 45:62:a2:5b:4f:f2:b5:b0:b9:f3:81:b0:75:d3:0a: 20:3d:f1:51:9a:2c:62:47:d2:de:ed:a5:ba:b3:51: 12:3f:4b:bb:dd:86:9b:8b:ea:27:9e:fa:e4:fc:5e: 60:cf:1d:9a:2a:21:5c:0c:f7:01:51:b7:5c:38:4a: 9b:d4:e3:72:f7:d4:f0:e1:d1:c3:a3:2c:c6:fe:2e: 73:6a:6c:fa:ba:91:c5:b8:1c:d6:0f:61:51:08:71: 0e:48:fe:d0:ae:09:e9:34:e3:41:ba:53:5f:d1:75: 64:b8:1c:6e:8e:66:89:db:e2:fa:bb:9c:6f:3f:ea: 55:38:9b:30:e8:08:e7:72:fb:da:92:c9:9c:75:58: 84:03:30:7f:cc:da:3d:93:c1:fe:06:48:83:94:5c: ca:f8:15:86:46:e7:ab:07:50:e5:cf:c1:af:f6:b0: ee:bb:86:09:53:fc:38:fc:d1:66:22:26:46:f5:9d: 43:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:97:FF:F7:A7:3F:13:59:E7:86:6A:E5:EC:DB:21:3A:69:3E:B3:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/47acfa3d-57c5-374d-a709-a28399c8e639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b3:5a:62:41:9a:a1:90:60:c0:ec:c3:b9:f8:3b:f8:8c:27: 3d:c8:f8:9b:95:19:80:2f:b3:70:94:3d:80:3b:fb:09:17:96: d7:75:78:f1:ab:1c:57:2f:27:ef:9e:01:58:a2:3c:a2:7f:1c: bf:77:38:ec:81:90:94:6f:71:36:bd:cc:de:de:e5:7d:ab:ce: d8:f1:7f:9e:43:e5:1c:57:67:4a:52:44:69:fb:12:ae:13:de: 67:cb:a3:34:28:b7:fd:04:04:ce:f7:52:66:ec:90:b2:e7:4c: 02:20:7b:59:30:23:bb:e7:6a:8f:e0:85:bd:7b:ab:98:f4:9e: b5:fb:ea:bb:76:61:20:fc:de:a9:b6:8a:cd:f9:ba:cf:23:44: 27:7b:2b:3b:1f:bd:ce:50:b9:e5:0d:80:a0:b8:e5:eb:cd:d5: 32:a1:1f:b8:23:84:60:c6:a7:06:b5:6f:e9:5f:88:42:c8:e7: d9:a3:46:79:05:b6:ea:cb:94:17:f4:d5:c2:08:95:dd:7e:ea: 8d:a0:e9:e0:c0:58:53:fe:d6:1f:90:68:97:01:fc:04:00:cf: 1c:d1:2e:d2:b4:4c:fa:ad:c0:f9:a0:0d:1c:5b:42:a7:f9:c0: 5e:b0:c7:d2:18:d1:55:ef:b2:42:14:d8:32:af:71:26:de:f3: 2a:a0:c7:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g981hq4WPVal/VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MWFhYzM4MTktNDQwNy00ODE4LWJjNTUtNjExY2Q0MDNkNjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3UMfIACrD7LPtxiqCiJnUCtpFaDkHn+LTHx yhzF97EqAJK/QpHQOIBP0VfwPUHLfXVVl+TaUqfnS064lYh8i3TASYxAvM0truRF YqJbT/K1sLnzgbB10wogPfFRmixiR9Le7aW6s1ESP0u73Yabi+onnvrk/F5gzx2a KiFcDPcBUbdcOEqb1ONy99Tw4dHDoyzG/i5zamz6upHFuBzWD2FRCHEOSP7Qrgnp NONBulNf0XVkuBxujmaJ2+L6u5xvP+pVOJsw6AjncvvaksmcdViEAzB/zNo9k8H+ BkiDlFzK+BWGRuerB1Dlz8Gv9rDuu4YJU/w4/NFmIiZG9Z1DtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOX//enPxNZ54Zq5ezbITppPrPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNDdhY2ZhM2QtNTdjNS0z NzRkLWE3MDktYTI4Mzk5YzhlNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+zWmJBmqGQYMDsw7n4O/iMJz3I+JuVGYAvs3CUPYA7+wkXltd1ePGr HFcvJ++eAViiPKJ/HL93OOyBkJRvcTa9zN7e5X2rztjxf55D5RxXZ0pSRGn7Eq4T 3mfLozQot/0EBM73UmbskLLnTAIge1kwI7vnao/ghb17q5j0nrX76rt2YSD83qm2 is35us8jRCd7Kzsfvc5QueUNgKC45evN1TKhH7gjhGDGpwa1b+lfiELI59mjRnkF turLlBf01cIIld1+6o2g6eDAWFP+1h+QaJcB/AQAzxzRLtK0TPqtwPmgDRxbQqf5 wF6wx9IY0VXvskIU2DKvcSbe8yqgx80= -----END CERTIFICATE-----Generated at Sun Sep 20 21:00:16 2026 by rpki-client