$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5e04455f-2994-35f2-828c-f16e9fd3bfb6.roa File: 5e04455f-2994-35f2-828c-f16e9fd3bfb6.roa (raw, json) Hash identifier: 3fgcMiozJm68+DJR0FJCAetJ4tG2mkH+B6L6IeBtpjk= Subject key identifier: 78:8C:A1:DF:6A:07:F7:D9:6E:5F:91:69:4F:CB:30:72:E8:B6:11:14 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A1AB1193067717DDC080 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5e04455f-2994-35f2-828c-f16e9fd3bfb6.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a1:ab:11:93:06:77:17:dd:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=031c0702-b827-408c-86de-0e87d1af0314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:04:b7:b9:0f:c9:d6:43:4f:38:64:79:2e:b8: b3:bf:75:57:b2:b2:cb:40:87:eb:5d:a8:f1:c1:f5: e7:89:93:85:7e:d6:3c:5e:9e:63:cf:91:34:cb:9b: 0f:95:70:2c:08:0a:78:d5:c8:be:ff:99:a5:d9:67: 79:76:f2:14:cf:33:98:0a:37:68:c5:24:53:df:dc: ed:f7:2d:7b:a6:23:4d:3e:11:12:d6:35:98:56:fd: 16:65:7b:fe:b5:e0:4d:a1:a8:75:e0:c8:69:71:c3: 98:e7:14:20:66:11:96:c0:cb:72:9c:df:48:3d:4d: dd:58:60:c5:25:02:28:01:1b:41:09:12:2d:b2:e0: 70:a8:76:ad:5e:29:81:f3:a5:f3:39:66:ea:1a:d0: 1e:42:7f:9f:dc:34:f2:ab:fc:55:68:c7:6b:4b:8e: ad:62:bb:40:33:96:91:e6:36:8b:b3:a0:98:22:b9: 45:1a:aa:0e:e7:15:3d:37:f9:2c:12:f9:bb:fe:c5: fd:53:46:96:b1:eb:06:65:35:7b:a4:03:7e:8b:03: b6:fa:73:5d:10:36:42:0f:d2:86:d3:1a:2c:e9:fe: ca:c9:07:24:1e:63:33:08:35:8b:2b:fd:86:3a:ef: bc:d7:37:7e:47:c9:a2:2b:bb:76:99:a1:9d:0f:ad: 88:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8C:A1:DF:6A:07:F7:D9:6E:5F:91:69:4F:CB:30:72:E8:B6:11:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5e04455f-2994-35f2-828c-f16e9fd3bfb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:bc:20:f2:82:d5:81:fd:ce:16:dd:80:08:0a:b9:c9:cb:71: 26:0c:d6:db:1b:d2:95:e2:f6:68:ef:4d:3f:8a:07:7d:9f:79: af:18:96:40:19:1a:08:40:47:61:7b:d2:f5:e5:09:62:63:3f: 13:cc:f9:c3:96:23:5b:a8:62:b8:3c:c9:41:a3:a7:1d:e3:28: 89:8f:8b:3f:e6:27:a1:d0:82:10:89:68:63:12:64:60:13:bc: 0a:a1:91:88:54:30:bf:57:08:ca:41:29:4f:22:7f:3f:80:53: de:d4:57:5f:09:6c:75:36:30:1c:f9:d1:01:cd:14:43:02:9c: e9:c3:7f:cb:cc:ff:39:f4:52:a7:20:ab:4f:fe:97:cd:7c:a6: c6:f9:10:b3:54:77:4e:64:cf:91:d9:6a:1c:07:0e:74:96:12: 84:28:8e:b2:cc:a6:0c:07:8b:82:09:1c:0d:1e:d0:5f:63:43: 68:10:e0:c4:e0:f2:c3:3f:0c:67:fd:b3:d4:68:f8:73:32:48: 2b:b3:ee:80:c6:20:82:8c:7a:f6:19:cd:3c:9d:c0:5c:29:fc: 76:a7:9f:86:95:60:8e:07:94:61:ed:6d:7e:d5:bf:8a:15:ea: 99:d9:ee:9b:22:f2:21:72:bb:a9:69:75:10:35:41:b6:90:ba: d2:47:d5:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96GrEZMGdxfdwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MDMxYzA3MDItYjgyNy00MDhjLTg2ZGUtMGU4N2QxYWYwMzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwS3uQ/J1kNPOGR5Lrizv3VXsrLLQIfrXajx wfXniZOFftY8Xp5jz5E0y5sPlXAsCAp41ci+/5ml2Wd5dvIUzzOYCjdoxSRT39zt 9y17piNNPhES1jWYVv0WZXv+teBNoah14MhpccOY5xQgZhGWwMtynN9IPU3dWGDF JQIoARtBCRItsuBwqHatXimB86XzOWbqGtAeQn+f3DTyq/xVaMdrS46tYrtAM5aR 5jaLs6CYIrlFGqoO5xU9N/ksEvm7/sX9U0aWsesGZTV7pAN+iwO2+nNdEDZCD9KG 0xos6f7KyQckHmMzCDWLK/2GOu+81zd+R8miK7t2maGdD62ICwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiMod9qB/fZbl+RaU/LMHLothEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNWUwNDQ1NWYtMjk5NC0z NWYyLTgyOGMtZjE2ZTlmZDNiZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKu8IPKC1YH9zhbdgAgKucnLcSYM1tsb0pXi9mjvTT+KB32fea8YlkAZ GghAR2F70vXlCWJjPxPM+cOWI1uoYrg8yUGjpx3jKImPiz/mJ6HQghCJaGMSZGAT vAqhkYhUML9XCMpBKU8ifz+AU97UV18JbHU2MBz50QHNFEMCnOnDf8vM/zn0Uqcg q0/+l818psb5ELNUd05kz5HZahwHDnSWEoQojrLMpgwHi4IJHA0e0F9jQ2gQ4MTg 8sM/DGf9s9Ro+HMySCuz7oDGIIKMevYZzTydwFwp/Hann4aVYI4HlGHtbX7Vv4oV 6pnZ7psi8iFyu6lpdRA1QbaQutJH1ZM= -----END CERTIFICATE-----Generated at Sat Oct 3 11:01:10 2026 by rpki-client