$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/815e3b6f-027f-3fa0-b242-960776b8b6e9.roa File: 815e3b6f-027f-3fa0-b242-960776b8b6e9.roa (raw, json) Hash identifier: MRTnKaK+/C9377xcK746b6NAL3HclzGPVK1KL6rN8N4= Subject key identifier: 5C:EA:C2:E1:03:C1:10:7C:D3:C6:C5:64:BD:16:0E:25:67:6D:4D:77 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F18979AF475C5ABEC73B7F180 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/815e3b6f-027f-3fa0-b242-960776b8b6e9.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 64.16.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:9a:f4:75:c5:ab:ec:73:b7:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=7cd9bb9a-7f37-4e08-843d-764c2a2ea875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:63:8a:9a:76:03:66:a1:ab:e9:55:a7:c2:ad: 04:ca:11:4e:8b:c2:f7:d6:c5:ea:ea:00:2e:ab:5b: c9:ce:14:b9:42:1f:ca:1c:36:d7:97:00:9d:76:18: 6d:42:3a:f0:af:10:71:85:98:0d:fd:0e:29:c7:23: e3:57:ea:49:34:c2:4b:9e:16:09:68:a8:6e:f6:66: 00:96:52:d0:70:20:61:d8:36:13:2e:12:86:e6:0c: d2:4f:f9:72:6a:e9:09:62:24:4c:f4:95:38:57:a2: 60:2b:52:b2:73:81:33:43:dc:32:1b:58:4a:8d:5b: 27:ee:08:78:82:ed:25:22:e4:50:9b:2c:05:97:83: da:a5:de:0e:5e:c2:83:67:42:f1:0b:fc:83:fd:23: 05:ef:01:6c:9c:af:b8:29:8f:c6:7d:00:3f:3f:31: 29:da:1b:63:15:63:1a:6e:db:88:88:cc:22:dd:36: 95:85:c6:8f:d8:07:8b:a1:d2:a3:59:26:29:17:08: f0:1b:68:b9:1b:04:70:ef:e5:86:73:89:ba:28:7a: 91:eb:67:aa:95:b1:40:3e:97:c7:07:50:c7:77:4c: 78:6e:b5:3d:2f:ee:64:de:88:27:90:0d:e5:3d:a6: 6a:7a:54:7c:4e:35:64:dd:eb:51:b2:b8:bd:53:33: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EA:C2:E1:03:C1:10:7C:D3:C6:C5:64:BD:16:0E:25:67:6D:4D:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/815e3b6f-027f-3fa0-b242-960776b8b6e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a2:15:a8:3d:c4:47:82:d4:a5:f8:55:5e:4e:bc:3d:2f:0c: 49:8e:e1:7e:6b:2d:db:fe:02:04:e8:17:5d:7f:2f:d1:3d:cc: 4d:f0:c1:fe:d8:b3:1d:c2:f9:07:a8:3c:8a:27:5e:78:78:62: 1c:a1:1e:e1:29:b9:31:de:73:d9:c1:2c:e2:d5:1f:7a:67:2d: eb:42:b8:91:8d:25:51:a8:bc:87:cc:31:84:9a:5b:51:3a:1c: fa:50:a5:18:37:f2:1d:d5:13:dd:78:f0:f3:84:d7:87:94:30: be:d8:4f:db:db:d7:2a:ba:44:0c:0d:10:35:67:b4:7d:26:dd: 6a:70:15:0d:b5:a0:56:68:df:14:f0:dc:68:47:59:2a:62:88: 77:a5:3d:67:0e:b0:73:f6:1a:ab:cc:93:3d:26:66:8a:b7:4f: 3d:ea:6d:b4:bf:79:9d:bc:3b:2a:cf:b2:52:d7:2c:b6:05:11: c7:3e:1a:5b:d3:e6:c0:ae:dd:3f:24:28:da:80:7c:61:52:ee: 22:c1:5f:49:5f:ad:80:0c:21:62:64:8a:67:77:0a:77:c7:8b: 6e:e3:45:83:83:69:de:d2:47:6e:51:24:a2:21:1c:c4:b2:51: 82:f0:70:58:b2:4f:ac:a8:9b:94:10:81:32:16:50:0b:63:bb: af:c6:f9:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5r0dcWr7HO38YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk N2NkOWJiOWEtN2YzNy00ZTA4LTg0M2QtNzY0YzJhMmVhODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmOKmnYDZqGr6VWnwq0EyhFOi8L31sXq6gAu q1vJzhS5Qh/KHDbXlwCddhhtQjrwrxBxhZgN/Q4pxyPjV+pJNMJLnhYJaKhu9mYA llLQcCBh2DYTLhKG5gzST/lyaukJYiRM9JU4V6JgK1Kyc4EzQ9wyG1hKjVsn7gh4 gu0lIuRQmywFl4Papd4OXsKDZ0LxC/yD/SMF7wFsnK+4KY/GfQA/PzEp2htjFWMa btuIiMwi3TaVhcaP2AeLodKjWSYpFwjwG2i5GwRw7+WGc4m6KHqR62eqlbFAPpfH B1DHd0x4brU9L+5k3ognkA3lPaZqelR8TjVk3etRsri9UzNfFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzqwuEDwRB808bFZL0WDiVnbU13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvODE1ZTNiNmYtMDI3Zi0z ZmEwLWIyNDItOTYwNzc2YjhiNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSiFag9xEeC1KX4VV5OvD0vDEmO4X5rLdv+AgToF11/L9E9zE3wwf7Y sx3C+QeoPIonXnh4YhyhHuEpuTHec9nBLOLVH3pnLetCuJGNJVGovIfMMYSaW1E6 HPpQpRg38h3VE9148POE14eUML7YT9vb1yq6RAwNEDVntH0m3WpwFQ21oFZo3xTw 3GhHWSpiiHelPWcOsHP2GqvMkz0mZoq3Tz3qbbS/eZ28OyrPslLXLLYFEcc+GlvT 5sCu3T8kKNqAfGFS7iLBX0lfrYAMIWJkimd3CnfHi27jRYODad7SR25RJKIhHMSy UYLwcFiyT6yom5QQgTIWUAtju6/G+c0= -----END CERTIFICATE-----Generated at Sun Oct 4 22:51:26 2026 by rpki-client