$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/53820eff-5ed6-38a2-884c-b8f1f6f9828e.roa File: 53820eff-5ed6-38a2-884c-b8f1f6f9828e.roa (raw, json) Hash identifier: y/TS+2BJmXeKzxNQg4UiW4HNMdCFkbumtmPHLLAbmZE= Subject key identifier: 62:ED:8D:F5:FC:60:F8:C4:8B:9F:D9:72:25:9D:D4:31:21:D3:63:3B Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F18979AC916D103F294C6C980 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/53820eff-5ed6-38a2-884c-b8f1f6f9828e.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:9a:c9:16:d1:03:f2:94:c6:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=69b19b95-5777-41f2-a8e0-4bfb53d0d47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:57:6a:f2:dc:9a:11:fd:a5:59:44:07:f1:6c: e6:28:57:e0:c7:92:d7:eb:8b:94:0b:0e:74:b0:a2: 2a:39:20:67:fe:2d:2a:b6:48:16:eb:46:88:15:52: 85:8a:e7:ab:26:ed:47:f9:d0:6b:23:e6:db:23:2e: 1c:bb:65:25:a0:dc:4d:fd:2c:94:8b:b3:e7:c7:68: fd:32:d8:57:2f:de:70:2c:d5:b2:f1:b0:fe:7d:74: f7:65:01:52:86:d8:ac:5f:6d:b9:e4:3f:45:ab:b2: 0b:1f:79:49:79:3a:fe:40:9e:08:86:13:3e:ad:85: 9c:be:5b:23:7c:f3:e3:23:6b:24:2d:38:1c:6c:8a: 47:95:93:58:84:36:09:e3:42:04:9e:29:24:27:6b: ee:83:e9:f9:ff:84:0f:73:6f:ea:91:57:cd:49:4c: 6f:b5:f1:a5:0e:32:3e:77:17:e1:c0:f9:2c:20:98: 36:ff:66:4d:71:76:af:7d:2c:08:42:dd:ac:63:15: ae:a3:95:b8:11:37:f4:75:b4:75:37:f3:0f:d1:81: 19:77:6a:10:16:dc:cb:46:cc:11:3a:9c:17:7f:b9: ef:73:a5:08:e5:45:4c:33:93:f9:4a:4a:56:66:ea: b6:3f:84:e9:b1:b3:d9:42:9d:c0:d6:f2:0c:a1:cc: ab:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:ED:8D:F5:FC:60:F8:C4:8B:9F:D9:72:25:9D:D4:31:21:D3:63:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/53820eff-5ed6-38a2-884c-b8f1f6f9828e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:bf:5d:3d:d7:7f:ec:65:07:aa:b0:a8:fe:90:4e:15:f5:52: c7:13:fd:c1:62:49:bf:f0:b7:03:7d:b8:62:75:a8:57:4a:8a: 50:69:ae:dc:27:63:d3:5e:c5:ab:59:4a:5f:fa:f1:ce:ef:20: ed:c2:b1:ac:b2:9f:6c:7f:47:f0:0e:2f:d3:ef:a1:29:83:72: 23:a9:0b:9b:49:32:fe:df:79:49:30:af:2b:b0:f9:8c:f1:44: d4:86:c6:a2:ed:8c:da:a2:5d:a7:51:7a:49:af:e2:51:88:fa: 69:fd:14:45:fe:9a:ab:71:eb:a3:c8:ee:70:db:32:9b:5b:86: 02:d4:a3:32:24:71:99:ff:42:4f:51:50:3d:d3:da:fb:12:ad: 81:42:93:30:21:48:85:6b:20:48:f6:8c:71:c9:39:a5:ca:45: 25:d0:07:58:d1:8d:6e:fd:c0:3d:46:1a:3a:52:b2:e9:07:8d: 78:9e:d1:25:69:73:f4:a4:1a:ac:cd:e4:a2:96:10:1e:0a:92: 93:f5:96:cf:e4:7c:12:d4:5f:64:a5:25:dd:b1:90:fc:62:b8: 4e:77:0e:64:a9:96:7d:25:c1:6a:f8:33:fd:ad:90:89:68:f8: 1c:2c:4d:23:2f:47:0a:94:a8:f6:31:3e:89:34:de:f1:90:7b: ba:a2:64:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5rJFtED8pTGyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NjliMTliOTUtNTc3Ny00MWYyLWE4ZTAtNGJmYjUzZDBkNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1dq8tyaEf2lWUQH8WzmKFfgx5LX64uUCw50 sKIqOSBn/i0qtkgW60aIFVKFiuerJu1H+dBrI+bbIy4cu2UloNxN/SyUi7Pnx2j9 MthXL95wLNWy8bD+fXT3ZQFShtisX2255D9Fq7ILH3lJeTr+QJ4IhhM+rYWcvlsj fPPjI2skLTgcbIpHlZNYhDYJ40IEnikkJ2vug+n5/4QPc2/qkVfNSUxvtfGlDjI+ dxfhwPksIJg2/2ZNcXavfSwIQt2sYxWuo5W4ETf0dbR1N/MP0YEZd2oQFtzLRswR OpwXf7nvc6UI5UVMM5P5SkpWZuq2P4TpsbPZQp3A1vIMocyrpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLtjfX8YPjEi5/ZciWd1DEh02M7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNTM4MjBlZmYtNWVkNi0z OGEyLTg4NGMtYjhmMWY2Zjk4MjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2/XT3Xf+xlB6qwqP6QThX1UscT/cFiSb/wtwN9uGJ1qFdKilBprtwn Y9NexatZSl/68c7vIO3Csayyn2x/R/AOL9PvoSmDciOpC5tJMv7feUkwryuw+Yzx RNSGxqLtjNqiXadRekmv4lGI+mn9FEX+mqtx66PI7nDbMptbhgLUozIkcZn/Qk9R UD3T2vsSrYFCkzAhSIVrIEj2jHHJOaXKRSXQB1jRjW79wD1GGjpSsukHjXie0SVp c/SkGqzN5KKWEB4KkpP1ls/kfBLUX2SlJd2xkPxiuE53DmSpln0lwWr4M/2tkIlo +BwsTSMvRwqUqPYxPok03vGQe7qiZFs= -----END CERTIFICATE-----Generated at Tue Oct 13 08:35:28 2026 by rpki-client