$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5e7d3cb3-0411-3766-907c-ca6d965a4ffa.roa File: 5e7d3cb3-0411-3766-907c-ca6d965a4ffa.roa (raw, json) Hash identifier: HCrSJVvrIaJPsnD+ICoyCIqXXsA7VhtLhSLlwiltT6M= Subject key identifier: 9B:77:5B:DA:39:4C:C9:95:38:93:C4:04:AA:55:DA:3F:7A:7D:44:7C Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A2FCC7226C5153D55FC0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5e7d3cb3-0411-3766-907c-ca6d965a4ffa.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a2:fc:c7:22:6c:51:53:d5:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=3a2a0b90-74b1-42a8-aa24-c0db519cd538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:82:7b:8d:9f:93:ae:f6:1c:eb:2d:eb:03:26: ee:b5:59:20:1a:67:3b:5a:82:78:0d:7f:b3:eb:04: 24:e6:3e:15:73:4c:49:ed:3c:2f:47:f7:79:23:98: 7c:3d:c3:43:1d:cf:16:fe:0a:c9:d5:1c:31:bf:bd: 76:ea:dc:c0:85:5b:2c:cf:ab:13:ab:6b:a7:0c:ad: 44:65:ce:14:b2:7e:28:56:00:df:46:54:05:24:8e: 43:0a:17:86:c5:92:2f:3d:12:2e:df:93:07:bf:27: cf:a0:62:69:d5:60:6f:af:bc:4e:3b:85:07:c7:0f: 3d:dc:b7:d4:6b:62:9d:8e:5e:4e:e5:70:59:aa:8a: d5:e0:d1:29:40:ff:bd:f2:11:fb:cb:c7:65:ce:e2: ca:b1:65:12:ef:49:4e:af:af:62:25:02:54:22:77: e4:45:72:a7:e0:f4:96:91:9e:53:6f:fa:33:33:78: a5:79:31:40:de:5b:03:83:04:5f:a4:55:d8:47:e3: 52:11:90:f0:cd:d3:35:c3:fa:76:1d:1c:5d:65:07: 70:69:69:81:69:42:c5:23:fa:0f:46:02:21:81:5c: 03:b7:db:5e:fa:7c:b9:db:79:72:dd:1e:cf:36:a2: 59:98:e9:8e:89:12:3c:22:2b:22:49:5f:84:ee:6f: ee:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:77:5B:DA:39:4C:C9:95:38:93:C4:04:AA:55:DA:3F:7A:7D:44:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5e7d3cb3-0411-3766-907c-ca6d965a4ffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9f:50:9a:72:c1:37:1c:0a:8d:80:ae:a0:77:43:ec:61:21: d6:11:86:d0:98:a1:f9:1a:35:44:d0:6d:2f:3c:a6:30:2d:93: 95:74:3b:bf:46:93:45:c7:ff:f5:b5:91:31:34:b0:db:8d:da: a8:c6:02:47:d6:c1:cf:dc:a0:54:39:c6:89:56:e9:e2:6e:17: 0f:4a:c0:3b:39:dc:16:86:e6:9b:f4:b5:57:e1:64:6a:44:b1: b4:b6:4a:d0:09:c5:21:39:93:d2:40:8c:6a:8e:3b:a6:15:3a: f2:d8:e1:b1:0b:1a:95:6f:96:ca:e6:d7:64:45:63:55:e0:dd: 04:76:79:e6:b7:5a:26:98:78:47:6a:99:b5:86:cf:df:f5:62: ac:cd:97:7e:01:b0:28:d0:73:9f:7f:34:fa:be:ff:21:4e:4f: 1c:d7:9c:a0:1a:57:9a:de:d7:e3:fe:e6:f9:01:df:70:20:f1: e9:a8:4d:ad:53:13:7f:bc:e9:55:81:2a:5a:20:c4:64:76:0f: 34:9b:72:c7:30:41:4e:0c:b9:b3:e9:0b:76:c6:85:35:df:d1: ff:f9:a2:ab:ec:d7:58:e6:26:ec:41:af:1c:95:b6:63:e4:b3: b5:99:6c:20:8d:ec:7c:0c:26:1d:84:17:6e:02:6f:98:1f:b1: 5f:cc:2f:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96L8xyJsUVPVX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk M2EyYTBiOTAtNzRiMS00MmE4LWFhMjQtYzBkYjUxOWNkNTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloJ7jZ+TrvYc6y3rAybutVkgGmc7WoJ4DX+z 6wQk5j4Vc0xJ7TwvR/d5I5h8PcNDHc8W/grJ1Rwxv7126tzAhVssz6sTq2unDK1E Zc4Usn4oVgDfRlQFJI5DCheGxZIvPRIu35MHvyfPoGJp1WBvr7xOO4UHxw893LfU a2Kdjl5O5XBZqorV4NEpQP+98hH7y8dlzuLKsWUS70lOr69iJQJUInfkRXKn4PSW kZ5Tb/ozM3ileTFA3lsDgwRfpFXYR+NSEZDwzdM1w/p2HRxdZQdwaWmBaULFI/oP RgIhgVwDt9te+ny523ly3R7PNqJZmOmOiRI8IisiSV+E7m/uXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJt3W9o5TMmVOJPEBKpV2j96fUR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNWU3ZDNjYjMtMDQxMS0z NzY2LTkwN2MtY2E2ZDk2NWE0ZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHefUJpywTccCo2ArqB3Q+xhIdYRhtCYofkaNUTQbS88pjAtk5V0O79G k0XH//W1kTE0sNuN2qjGAkfWwc/coFQ5xolW6eJuFw9KwDs53BaG5pv0tVfhZGpE sbS2StAJxSE5k9JAjGqOO6YVOvLY4bELGpVvlsrm12RFY1Xg3QR2eea3WiaYeEdq mbWGz9/1YqzNl34BsCjQc59/NPq+/yFOTxzXnKAaV5re1+P+5vkB33Ag8emoTa1T E3+86VWBKlogxGR2DzSbcscwQU4MubPpC3bGhTXf0f/5oqvs11jmJuxBrxyVtmPk s7WZbCCN7HwMJh2EF24Cb5gfsV/ML6Y= -----END CERTIFICATE-----Generated at Tue Sep 22 11:21:25 2026 by rpki-client