$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/63c5a1bd-c65b-3521-a66b-3fca4cd57415.roa File: 63c5a1bd-c65b-3521-a66b-3fca4cd57415.roa (raw, json) Hash identifier: jL8UrqYJmCtK9R11qJxvUVq8zOQb2PeuOHMze2H5lKo= Subject key identifier: 86:19:13:FF:17:41:A4:61:03:4A:D3:64:E6:60:C6:86:59:5E:45:6C Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D0B29640C2BFEB272900 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/63c5a1bd-c65b-3521-a66b-3fca4cd57415.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d0:b2:96:40:c2:bf:eb:27:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=e144a155-3f64-43c6-b3f2-d5ed5a29cc96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:34:57:4c:c6:0c:5a:7d:39:b4:76:23:c1: 79:1a:b1:8e:7c:65:ad:c4:5e:54:7a:43:6a:60:db: 56:ef:b6:30:6a:25:ab:20:af:35:1e:6c:02:cc:e4: 59:e4:08:ac:1b:b4:f6:a0:e8:b7:24:72:72:3b:34: 46:62:01:29:c3:26:4f:f1:28:a5:47:dd:26:1f:63: cb:e8:37:c1:e3:19:20:d8:de:fb:04:b0:d6:76:56: f6:18:bd:95:8f:0f:ec:b2:db:b2:91:bc:17:1c:25: 94:9a:9a:d5:75:ed:e3:00:05:01:50:e7:cd:5d:5c: 9b:3d:9c:a5:23:16:6d:87:50:71:f9:33:4f:76:ea: 83:a0:64:f9:f9:28:27:e6:52:b2:8e:b2:83:55:dd: 7b:b8:a9:48:af:48:34:e2:fb:20:bc:8e:44:37:bc: fd:53:6f:a0:3b:9f:3a:3d:b6:31:92:06:e7:3f:e6: 95:33:04:32:83:48:cd:a3:ca:c1:58:06:40:6a:fa: 0d:ee:8a:68:ce:6a:30:31:1f:6c:58:4a:89:59:3a: 35:e2:bd:b1:d6:6e:c2:14:71:ee:5e:f5:ba:4c:4a: ae:b8:7b:03:bf:45:1b:b7:c1:76:f7:b5:4f:90:3f: 03:88:f7:93:af:60:4f:02:3d:0f:bf:ce:97:05:e0: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:19:13:FF:17:41:A4:61:03:4A:D3:64:E6:60:C6:86:59:5E:45:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/63c5a1bd-c65b-3521-a66b-3fca4cd57415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:45:9b:35:b7:1d:2a:94:2a:39:4d:a2:23:d0:3a:a6:05:e4: fb:09:69:0c:ab:d9:c5:f6:ce:78:24:4e:2d:de:d9:43:e0:ac: aa:5a:e0:ba:32:5e:fc:ed:05:4b:be:d3:d0:5c:92:19:ae:0a: 63:ac:90:0b:1c:7e:77:9f:0a:56:e1:8b:52:bf:1f:68:3a:f8: 92:de:ec:08:e5:f5:d0:ea:3f:8c:84:62:e9:36:f4:ad:09:52: 7e:9f:dd:a3:ee:d8:86:4d:76:71:38:83:d0:27:08:76:e9:43: f0:d5:4c:9d:81:d0:c3:1e:b9:01:2b:53:8d:f1:26:9c:10:8c: 9e:5f:65:b1:dd:b4:ef:35:06:42:1e:d0:70:c9:de:a9:e8:da: 86:60:93:76:2f:b3:e3:54:80:67:4e:41:87:2b:a5:5e:2f:2d: 21:89:60:16:df:95:0c:aa:ec:39:33:f6:73:8c:8b:4d:cb:26: b0:77:7d:13:20:a5:d6:7d:ae:85:bd:a3:26:43:df:7d:40:93: 79:56:f4:f6:58:4e:c4:20:77:5d:47:a0:c7:73:07:8a:da:a1: bd:b7:46:99:53:d0:4d:a6:83:7d:10:e0:b9:a1:79:c7:e6:88: ed:fd:17:a9:38:dc:91:1d:bf:22:be:3e:80:aa:4c:a0:71:12: cf:5a:a5:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99CylkDCv+snKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTE0NGExNTUtM2Y2NC00M2M2LWIzZjItZDVlZDVhMjljYzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGM0V0zGDFp9ObR2I8F5GrGOfGWtxF5UekNq YNtW77YwaiWrIK81HmwCzORZ5AisG7T2oOi3JHJyOzRGYgEpwyZP8SilR90mH2PL 6DfB4xkg2N77BLDWdlb2GL2Vjw/sstuykbwXHCWUmprVde3jAAUBUOfNXVybPZyl IxZth1Bx+TNPduqDoGT5+Sgn5lKyjrKDVd17uKlIr0g04vsgvI5EN7z9U2+gO586 PbYxkgbnP+aVMwQyg0jNo8rBWAZAavoN7opozmowMR9sWEqJWTo14r2x1m7CFHHu XvW6TEquuHsDv0Ubt8F297VPkD8DiPeTr2BPAj0Pv86XBeAbswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYZE/8XQaRhA0rTZOZgxoZZXkVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjNjNWExYmQtYzY1Yi0z NTIxLWE2NmItM2ZjYTRjZDU3NDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARFmzW3HSqUKjlNoiPQOqYF5PsJaQyr2cX2zngkTi3e2UPgrKpa4Loy XvztBUu+09BckhmuCmOskAscfnefClbhi1K/H2g6+JLe7Ajl9dDqP4yEYuk29K0J Un6f3aPu2IZNdnE4g9AnCHbpQ/DVTJ2B0MMeuQErU43xJpwQjJ5fZbHdtO81BkIe 0HDJ3qno2oZgk3Yvs+NUgGdOQYcrpV4vLSGJYBbflQyq7Dkz9nOMi03LJrB3fRMg pdZ9roW9oyZD331Ak3lW9PZYTsQgd11HoMdzB4raob23RplT0E2mg30Q4Lmhecfm iO39F6k43JEdvyK+PoCqTKBxEs9apUg= -----END CERTIFICATE-----Generated at Sat Oct 3 14:21:45 2026 by rpki-client