$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/549571a3-7535-3a4e-a618-76404eba9e59.roa File: 549571a3-7535-3a4e-a618-76404eba9e59.roa (raw, json) Hash identifier: bXTY7Vq8AhqZS8n0sWlNyLICeb2Ssp4LNXjrPIg451A= Subject key identifier: D7:1D:44:4A:D7:5B:09:FB:47:8E:30:54:B7:E3:22:34:F5:F1:3A:EE Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B59FD7A9FFDC7B3EAD80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/549571a3-7535-3a4e-a618-76404eba9e59.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 64.16.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b5:9f:d7:a9:ff:dc:7b:3e:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=3905f73b-29d5-4dcf-8d4c-11a98dd58049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2e:5e:f9:f9:55:09:98:66:2c:29:5d:0c:76: 48:24:a1:cc:b8:2c:69:8a:a0:ac:02:05:62:5e:94: 6d:f9:4d:2a:fa:a4:2d:89:e3:05:b9:c5:f8:61:6f: 7d:1d:dc:72:56:db:16:3a:d7:8f:b6:55:70:32:91: a2:67:ce:c3:d1:4a:2e:94:9a:0c:59:8b:f3:0e:b7: 9e:65:e8:1d:40:75:4e:e5:a6:64:46:c2:1c:d8:20: df:a9:27:1b:a3:36:12:e0:ef:f5:8f:68:17:2d:1d: 93:ba:7c:db:0e:76:8a:cb:8d:b0:9d:35:d2:d3:09: 77:ec:a3:2c:1f:84:b2:ac:67:74:0c:08:a9:7b:d6: 53:e4:cd:0a:66:dd:4a:96:6d:33:1d:95:b8:ee:fc: fa:57:e6:54:e2:c7:eb:2e:c8:3c:d4:51:e5:19:6b: 5e:d5:37:d6:35:cf:3a:6f:1d:7c:d2:fa:11:7e:c5: 22:40:3e:6b:49:52:f8:94:8c:95:7a:9d:79:f0:dc: 8f:79:e0:8d:26:94:98:b0:55:df:d1:25:0e:49:f0: 5f:71:78:02:2b:78:84:49:04:e2:be:12:3d:5b:f1: 65:50:74:fb:a7:41:a4:6a:9f:42:4d:1b:b1:35:aa: 0d:d3:c7:7d:e2:d9:b0:cf:3a:ca:de:18:9b:58:ff: eb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1D:44:4A:D7:5B:09:FB:47:8E:30:54:B7:E3:22:34:F5:F1:3A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/549571a3-7535-3a4e-a618-76404eba9e59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:17:50:f3:53:b9:84:59:fa:c2:ea:25:1b:d8:13:84:a9:2e: e1:df:f5:47:ed:40:24:0d:01:65:7b:aa:e0:6b:05:e0:07:59: 27:e0:5c:b2:50:2d:a8:39:13:33:17:60:a5:09:ee:e5:2c:8d: de:be:83:07:93:9f:7a:3d:13:2d:34:b7:29:96:b7:a7:a9:8b: 3c:8d:f5:74:d6:c5:da:e1:9a:78:d4:9a:f5:85:39:81:02:54: ca:61:07:34:a5:04:39:fa:e0:f3:94:49:c5:98:d8:8b:1b:a4: b0:24:f5:92:00:3a:00:40:29:a6:31:4b:12:64:00:2a:c5:03: c7:d4:c5:4f:ed:ea:e9:5d:ba:51:eb:f9:61:27:04:71:c5:d3: e8:06:af:6d:6e:9f:0c:9d:02:64:a7:b3:10:74:22:ef:52:8e: ee:b6:57:ab:88:14:91:d1:a0:4d:3b:76:08:e0:63:6f:b8:38: 9b:2b:f2:81:7a:4e:97:8f:b1:2e:8b:50:92:c2:4d:9b:fa:f9: 62:e5:25:91:c3:83:a4:80:59:d2:f1:03:48:b5:07:3e:d0:74: 5f:42:a7:70:c2:59:5e:55:82:0c:92:bb:60:4b:b3:16:d4:d9: 38:6a:72:d6:37:52:e5:a3:ac:63:c3:5d:0e:ef:23:47:92:a5: a8:81:14:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97Wf16n/3Hs+rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MzkwNWY3M2ItMjlkNS00ZGNmLThkNGMtMTFhOThkZDU4MDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS5e+flVCZhmLCldDHZIJKHMuCxpiqCsAgVi XpRt+U0q+qQtieMFucX4YW99HdxyVtsWOtePtlVwMpGiZ87D0UoulJoMWYvzDree ZegdQHVO5aZkRsIc2CDfqScbozYS4O/1j2gXLR2TunzbDnaKy42wnTXS0wl37KMs H4SyrGd0DAipe9ZT5M0KZt1Klm0zHZW47vz6V+ZU4sfrLsg81FHlGWte1TfWNc86 bx180voRfsUiQD5rSVL4lIyVep158NyPeeCNJpSYsFXf0SUOSfBfcXgCK3iESQTi vhI9W/FlUHT7p0Gkap9CTRuxNaoN08d94tmwzzrK3hibWP/rbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcdRErXWwn7R44wVLfjIjT18TruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNTQ5NTcxYTMtNzUzNS0z YTRlLWE2MTgtNzY0MDRlYmE5ZTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwXUPNTuYRZ+sLqJRvYE4SpLuHf9UftQCQNAWV7quBrBeAHWSfgXLJQ Lag5EzMXYKUJ7uUsjd6+gweTn3o9Ey00tymWt6epizyN9XTWxdrhmnjUmvWFOYEC VMphBzSlBDn64POUScWY2IsbpLAk9ZIAOgBAKaYxSxJkACrFA8fUxU/t6uldulHr +WEnBHHF0+gGr21unwydAmSnsxB0Iu9Sju62V6uIFJHRoE07dgjgY2+4OJsr8oF6 TpePsS6LUJLCTZv6+WLlJZHDg6SAWdLxA0i1Bz7QdF9Cp3DCWV5VggySu2BLsxbU 2ThqctY3UuWjrGPDXQ7vI0eSpaiBFEg= -----END CERTIFICATE-----Generated at Mon Sep 21 17:22:25 2026 by rpki-client