$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5594c8dd-cbd6-3497-a85b-4e656a001a98.roa File: 5594c8dd-cbd6-3497-a85b-4e656a001a98.roa (raw, json) Hash identifier: T0HSBENdgZXlw8UEBxj0kSCoXM0KRfZWuxLGW3O/SRE= Subject key identifier: 20:EA:BC:CD:AB:F2:0E:6A:C6:7E:6D:F5:52:85:FA:E8:2E:F4:38:BF Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B6168F0EB2DB49F3DC00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5594c8dd-cbd6-3497-a85b-4e656a001a98.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b6:16:8f:0e:b2:db:49:f3:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=7bff1a09-b17c-410e-8af4-1e234c85e4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4f:68:a4:a2:8b:0b:ef:32:9c:6c:b4:e8:69: c1:d1:9b:67:95:bf:70:3d:fd:c9:db:62:48:f3:7b: a4:8b:69:23:c9:b3:56:ce:32:ff:62:b2:bf:81:b3: 57:3c:e9:8a:66:3c:f3:61:f2:d8:65:b7:48:49:95: 43:4c:9d:35:d7:d8:13:b4:cc:87:70:8c:aa:ee:54: 97:e2:9d:3e:6a:25:06:1d:64:b0:ec:7f:36:54:fe: 2d:72:86:58:4c:77:bb:bd:d3:84:aa:c8:40:31:5f: c7:7b:81:4c:ed:e7:5f:c7:2c:18:d7:8a:f5:83:1a: c2:2e:db:dd:6c:52:ad:33:d1:df:3d:65:8b:99:c2: ea:d9:e3:e7:56:08:ef:e1:6f:bc:54:ba:ac:10:59: 88:2e:19:6c:c3:6e:89:cc:17:8d:88:8f:e3:35:25: b5:a4:70:8d:1c:15:42:2a:6e:8b:99:bb:5f:af:62: 82:e1:46:83:6d:d0:bc:38:29:18:a4:ef:26:b0:24: 26:3e:71:3e:44:5d:c0:77:ba:ae:00:11:82:06:ca: d5:74:f8:05:3c:d9:6b:94:ff:ca:8a:3d:76:74:58: 43:53:09:55:df:5c:fe:c4:4a:22:50:f8:b1:21:b9: 5a:43:f7:70:3f:29:bb:5a:e5:a6:3f:b7:ac:ad:27: b6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EA:BC:CD:AB:F2:0E:6A:C6:7E:6D:F5:52:85:FA:E8:2E:F4:38:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5594c8dd-cbd6-3497-a85b-4e656a001a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:bf:b1:6d:7f:e4:7a:56:65:32:7a:70:6b:58:1f:64:92:d1: 4b:25:96:9e:06:f7:c1:9c:b8:46:b6:a2:9a:da:62:d0:52:e1: 21:a1:58:7c:89:26:e3:53:d1:3a:fe:f5:e0:77:1f:55:cf:3b: e4:7f:5d:ad:35:29:f2:d7:96:e5:e9:35:d5:8d:0f:2c:31:14: 75:da:9f:45:3a:0e:67:10:ce:44:98:a2:d7:24:e2:d8:3e:92: b4:14:d1:2c:84:cf:08:43:70:59:49:10:72:b7:59:93:a8:14: 33:3f:83:bc:f2:08:23:3f:0e:2a:15:25:1d:32:d7:ef:62:f7: bb:6b:f8:9e:9a:5e:06:dc:c3:45:95:8b:a8:6a:58:7c:04:34: ce:5a:29:90:ec:68:33:b8:52:8a:d7:20:45:c3:29:93:f6:86: cc:9f:77:b9:90:3e:d8:a4:79:47:22:30:be:c0:72:5e:bd:bd: 34:3f:79:55:36:18:2e:59:6a:73:84:6a:8d:d6:0f:b8:d4:34: 7b:4f:d8:79:fb:30:1c:40:a2:f4:5f:bd:bc:a8:77:e7:ce:9e: 89:bd:d4:ad:23:55:0f:47:86:37:34:0c:b2:c4:0e:1d:24:82: 0d:b8:a2:11:4a:6f:26:d7:6a:8f:30:2e:fc:d8:cf:4a:2b:78: 4f:14:a4:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97YWjw6y20nz3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk N2JmZjFhMDktYjE3Yy00MTBlLThhZjQtMWUyMzRjODVlNGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk9opKKLC+8ynGy06GnB0Ztnlb9wPf3J22JI 83uki2kjybNWzjL/YrK/gbNXPOmKZjzzYfLYZbdISZVDTJ0119gTtMyHcIyq7lSX 4p0+aiUGHWSw7H82VP4tcoZYTHe7vdOEqshAMV/He4FM7edfxywY14r1gxrCLtvd bFKtM9HfPWWLmcLq2ePnVgjv4W+8VLqsEFmILhlsw26JzBeNiI/jNSW1pHCNHBVC Km6Lmbtfr2KC4UaDbdC8OCkYpO8msCQmPnE+RF3Ad7quABGCBsrVdPgFPNlrlP/K ij12dFhDUwlV31z+xEoiUPixIblaQ/dwPym7WuWmP7esrSe21wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDqvM2r8g5qxn5t9VKF+ugu9Di/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNTU5NGM4ZGQtY2JkNi0z NDk3LWE4NWItNGU2NTZhMDAxYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa/sW1/5HpWZTJ6cGtYH2SS0Usllp4G98GcuEa2opraYtBS4SGhWHyJ JuNT0Tr+9eB3H1XPO+R/Xa01KfLXluXpNdWNDywxFHXan0U6DmcQzkSYotck4tg+ krQU0SyEzwhDcFlJEHK3WZOoFDM/g7zyCCM/DioVJR0y1+9i97tr+J6aXgbcw0WV i6hqWHwENM5aKZDsaDO4UorXIEXDKZP2hsyfd7mQPtikeUciML7Acl69vTQ/eVU2 GC5ZanOEao3WD7jUNHtP2Hn7MBxAovRfvbyod+fOnom91K0jVQ9Hhjc0DLLEDh0k gg24ohFKbybXao8wLvzYz0oreE8UpEo= -----END CERTIFICATE-----Generated at Sun Sep 20 20:03:15 2026 by rpki-client