$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7f67d81c-fc64-3238-8240-e56e4b61c5b8.roa File: 7f67d81c-fc64-3238-8240-e56e4b61c5b8.roa (raw, json) Hash identifier: svCYTmtGitmziZo+RCB6TFWpN81ngdJ7OmsbUjbYaWo= Subject key identifier: D4:98:1D:47:F8:72:D6:1B:86:AE:D0:0A:93:0F:4D:F3:5E:EF:2F:E3 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F79E88C29C83F1E8AC1A80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7f67d81c-fc64-3238-8240-e56e4b61c5b8.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:9e:88:c2:9c:83:f1:e8:ac:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=7ff0a27c-48f3-49ad-94ee-0fb7f1985771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e4:3d:20:67:2c:12:1f:97:07:96:35:39:fb: d1:bb:fa:8a:6d:0f:3b:09:7d:c2:e4:5c:ec:56:5e: 6d:72:48:42:6c:58:cf:fd:9c:ce:2d:26:67:3f:12: 4f:0a:c4:f6:ee:cd:7f:a2:11:a8:5e:2b:96:01:05: bc:31:6f:b7:ae:33:2f:6f:4c:3f:31:89:49:19:12: db:ef:89:a7:77:01:0f:09:57:ec:6d:3f:46:d5:5c: 25:78:d3:5a:ad:08:76:01:62:01:be:5f:67:b3:be: 70:9d:54:5e:05:cf:53:5f:7e:1c:54:a1:9b:9a:c6: 6c:bb:0d:7c:c9:5f:4c:26:09:23:65:93:f7:a3:71: dc:f6:fb:b2:9b:b0:8b:bf:00:84:91:7c:19:54:1e: 10:e2:a8:1e:42:19:c7:ca:e4:d8:10:6d:80:4d:67: 4e:9e:30:ef:02:c0:30:c9:90:ec:0f:fc:12:a8:f9: df:be:6a:32:03:44:aa:e2:ed:30:07:0e:79:90:f7: 3e:1d:3f:9c:31:37:24:6a:bb:68:9f:4e:e0:71:2c: 4f:dd:66:ef:85:e1:4a:c2:86:fc:61:c6:bc:35:4d: 15:ef:ec:b8:34:a1:01:2d:c3:03:79:fa:59:39:5b: a1:c9:e3:98:33:72:63:36:1b:d0:b6:62:06:ed:8b: d4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:98:1D:47:F8:72:D6:1B:86:AE:D0:0A:93:0F:4D:F3:5E:EF:2F:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7f67d81c-fc64-3238-8240-e56e4b61c5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:aa:db:32:8d:e2:19:23:91:ff:4d:63:d7:bc:45:23:91:62: cf:51:5c:67:cc:5d:a9:c9:77:71:1b:78:f1:69:d7:5b:a0:19: 27:d5:58:52:a3:3d:0a:d8:3c:be:23:ec:8f:9c:00:2d:1d:94: b6:6f:8d:51:71:5b:d1:0f:e7:4e:20:b4:a9:31:b2:8d:fd:7e: 9d:c1:6c:35:ea:e0:a2:82:ac:f3:ad:f1:3f:b0:48:a6:8f:4d: 8c:48:2c:5a:ba:57:ce:f6:ab:46:d4:16:ee:6d:03:08:85:d0: 82:16:3a:2c:66:a0:a7:61:4d:b0:9b:f7:21:d9:a3:48:3f:a2: 8b:8a:4f:7a:38:3a:53:4d:ce:be:e7:20:5e:a8:0a:66:f3:f3: 48:d7:1f:35:1d:ea:1c:a1:5f:5b:16:87:9c:1e:d7:4e:e1:bb: a3:e3:c6:76:8c:d1:ec:7b:c3:9e:bf:38:3f:e9:7a:db:79:ed: 91:55:08:72:b3:09:c1:0b:7e:10:dc:ce:3f:4c:c6:bc:b6:74: e0:15:29:10:3e:3f:fb:ba:6b:ff:b4:11:13:16:5a:32:db:6a: fe:3b:9d:23:a4:69:04:06:54:f6:b4:3c:e5:82:38:ee:ce:e2: e5:64:5b:ac:af:5c:22:5e:5d:dc:7b:0f:a0:aa:26:b1:02:25: 12:57:10:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g956IwpyD8eisGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk N2ZmMGEyN2MtNDhmMy00OWFkLTk0ZWUtMGZiN2YxOTg1NzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieQ9IGcsEh+XB5Y1OfvRu/qKbQ87CX3C5Fzs Vl5tckhCbFjP/ZzOLSZnPxJPCsT27s1/ohGoXiuWAQW8MW+3rjMvb0w/MYlJGRLb 74mndwEPCVfsbT9G1VwleNNarQh2AWIBvl9ns75wnVReBc9TX34cVKGbmsZsuw18 yV9MJgkjZZP3o3Hc9vuym7CLvwCEkXwZVB4Q4qgeQhnHyuTYEG2ATWdOnjDvAsAw yZDsD/wSqPnfvmoyA0Sq4u0wBw55kPc+HT+cMTckarton07gcSxP3WbvheFKwob8 Yca8NU0V7+y4NKEBLcMDefpZOVuhyeOYM3JjNhvQtmIG7YvUtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSYHUf4ctYbhq7QCpMPTfNe7y/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvN2Y2N2Q4MWMtZmM2NC0z MjM4LTgyNDAtZTU2ZTRiNjFjNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCq2zKN4hkjkf9NY9e8RSORYs9RXGfMXanJd3EbePFp11ugGSfVWFKj PQrYPL4j7I+cAC0dlLZvjVFxW9EP504gtKkxso39fp3BbDXq4KKCrPOt8T+wSKaP TYxILFq6V872q0bUFu5tAwiF0IIWOixmoKdhTbCb9yHZo0g/oouKT3o4OlNNzr7n IF6oCmbz80jXHzUd6hyhX1sWh5we107hu6PjxnaM0ex7w56/OD/pett57ZFVCHKz CcELfhDczj9Mxry2dOAVKRA+P/u6a/+0ERMWWjLbav47nSOkaQQGVPa0POWCOO7O 4uVkW6yvXCJeXdx7D6CqJrECJRJXEHg= -----END CERTIFICATE-----Generated at Sat Oct 10 14:42:30 2026 by rpki-client