$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5ea92d96-450a-37e8-9c3f-6cf1d8c57e09.roa File: 5ea92d96-450a-37e8-9c3f-6cf1d8c57e09.roa (raw, json) Hash identifier: iLzY4WsfcxF/kFSDBYX8ylCaSg2CzH67biL+7LQxCD8= Subject key identifier: 66:28:8B:24:5D:A9:1B:80:DF:FE:D3:20:DC:13:4D:C0:6D:A2:C6:3E Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D249B22DD3AC5599F3C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5ea92d96-450a-37e8-9c3f-6cf1d8c57e09.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 64.16.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d2:49:b2:2d:d3:ac:55:99:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=f7c1a6da-5c56-43fe-8735-ee17b3ae0af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:8b:b0:b3:4d:09:9b:d6:50:65:44:0b:a9: 02:70:0a:8c:ca:85:c7:c1:8c:7f:10:5e:2c:76:52: b3:64:20:f0:7a:e8:47:47:2d:a1:df:87:29:35:2c: ba:54:98:e4:2b:fe:92:6f:23:e5:b4:17:1e:5d:f1: f3:18:eb:4a:7b:87:03:72:94:55:24:7d:3f:17:72: 77:04:04:15:d3:63:1b:41:a9:f0:89:3f:33:96:3b: 72:d7:81:2d:06:d8:10:29:e0:c2:f1:69:3f:e5:6a: 33:6d:8d:7f:f7:1c:6d:d5:2d:1a:13:0c:a3:53:41: 68:db:f8:79:38:17:8d:15:3e:5b:97:51:24:d3:93: 6d:5c:8b:df:6a:c8:4f:c6:e7:e1:c7:5d:af:e1:d9: ff:4c:f5:01:c3:0b:d0:3c:36:94:aa:41:78:d1:41: 05:30:67:bd:0b:f0:07:8c:0e:74:6a:2c:fe:a2:f0: 14:27:2e:84:07:1b:45:33:17:ed:ed:59:ab:2d:e6: 5c:3b:9c:bd:f6:ad:44:90:48:16:c4:3f:a4:f4:eb: 50:81:99:b4:05:ce:b1:82:79:b9:50:5e:72:6e:08: 0d:1d:26:3a:26:79:ee:2c:16:72:11:9c:c3:d2:29: 4f:90:53:60:27:34:e6:d2:d7:45:4f:40:a6:04:31: 39:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:28:8B:24:5D:A9:1B:80:DF:FE:D3:20:DC:13:4D:C0:6D:A2:C6:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5ea92d96-450a-37e8-9c3f-6cf1d8c57e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ca:3c:c4:c6:3f:7d:12:ca:70:27:73:2f:15:e9:75:de:85: f6:32:0e:35:84:f1:d2:4c:0b:0f:a3:51:c2:3d:9d:98:f7:fc: 20:f6:f0:ea:73:dc:ab:6d:75:b5:e2:9d:79:88:f5:21:f5:93: 58:aa:cc:fd:f3:fd:04:bd:2b:7e:3d:2d:e4:49:44:1c:29:f4: 7b:ec:11:69:03:1f:f6:76:47:1c:18:a4:d8:bd:12:a0:d7:35: 16:03:e3:43:19:c5:a1:29:2a:48:a6:19:ed:0c:80:08:94:42: 59:a1:72:6e:6f:fc:84:fa:c6:b1:20:06:fa:61:4f:94:72:fe: 3e:7e:93:a4:6c:0c:82:d3:d9:87:f5:f8:9d:c7:02:29:9d:86: 14:14:06:f4:e6:1d:23:44:1a:6c:be:a2:fb:86:09:89:25:3e: d2:35:2b:a4:a1:2e:91:e5:4f:d6:ed:e6:95:42:be:9e:f1:ea: 5d:b1:26:f6:07:81:38:a1:ba:29:11:55:9c:b4:17:be:90:2b: c1:b1:49:4f:39:c7:ea:58:9c:06:0b:fc:94:e2:a8:77:ef:31: b8:24:40:d0:2f:0f:5d:73:fb:79:59:4b:b8:10:10:03:1e:07: f7:8e:5d:cf:88:99:3e:69:d2:16:e8:e2:27:93:03:f6:e1:b5: ca:77:34:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99JJsi3TrFWZ88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjdjMWE2ZGEtNWM1Ni00M2ZlLTg3MzUtZWUxN2IzYWUwYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi2LsLNNCZvWUGVEC6kCcAqMyoXHwYx/EF4s dlKzZCDweuhHRy2h34cpNSy6VJjkK/6SbyPltBceXfHzGOtKe4cDcpRVJH0/F3J3 BAQV02MbQanwiT8zljty14EtBtgQKeDC8Wk/5WozbY1/9xxt1S0aEwyjU0Fo2/h5 OBeNFT5bl1Ek05NtXIvfashPxufhx12v4dn/TPUBwwvQPDaUqkF40UEFMGe9C/AH jA50aiz+ovAUJy6EBxtFMxft7VmrLeZcO5y99q1EkEgWxD+k9OtQgZm0Bc6xgnm5 UF5ybggNHSY6JnnuLBZyEZzD0ilPkFNgJzTm0tdFT0CmBDE5YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYoiyRdqRuA3/7TINwTTcBtosY+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNWVhOTJkOTYtNDUwYS0z N2U4LTljM2YtNmNmMWQ4YzU3ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDKPMTGP30SynAncy8V6XXehfYyDjWE8dJMCw+jUcI9nZj3/CD28Opz 3KttdbXinXmI9SH1k1iqzP3z/QS9K349LeRJRBwp9HvsEWkDH/Z2RxwYpNi9EqDX NRYD40MZxaEpKkimGe0MgAiUQlmhcm5v/IT6xrEgBvphT5Ry/j5+k6RsDILT2Yf1 +J3HAimdhhQUBvTmHSNEGmy+ovuGCYklPtI1K6ShLpHlT9bt5pVCvp7x6l2xJvYH gTihuikRVZy0F76QK8GxSU85x+pYnAYL/JTiqHfvMbgkQNAvD11z+3lZS7gQEAMe B/eOXc+ImT5p0hbo4ieTA/bhtcp3NEs= -----END CERTIFICATE-----Generated at Mon Sep 28 09:09:04 2026 by rpki-client