$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8402f520-c85b-359c-a454-1cedfef7c566.roa File: 8402f520-c85b-359c-a454-1cedfef7c566.roa (raw, json) Hash identifier: OxqCpBjqcVFLKZq7y4uBLvFCQ6jpk3tiK1tBAOV6jkQ= Subject key identifier: DC:98:38:EF:5F:9A:A4:A2:B6:33:D7:A2:3E:4A:A3:FB:75:E8:58:9F Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F1897C0281AAF70DDE80CE280 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8402f520-c85b-359c-a454-1cedfef7c566.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:c0:28:1a:af:70:dd:e8:0c:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=e0086b4e-2eb7-40b7-a250-509879ffa750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:13:63:ce:a2:31:49:8d:5a:58:5a:6e:a7: dd:cb:a3:bc:08:91:c4:38:fd:4f:4a:fd:4f:b7:18: 51:9b:eb:52:45:59:91:d3:a7:f0:6e:e2:3e:e6:9f: 20:97:90:bf:2c:45:36:57:49:b6:7a:91:52:f4:e6: 98:cd:04:9c:7a:7a:53:4e:d4:7b:63:f6:76:e6:da: a9:47:ed:25:b0:84:74:a8:e5:85:83:14:67:b8:ea: 3d:b8:68:5e:df:24:5b:b8:65:c2:8c:91:47:4f:61: a3:7d:a8:bd:b5:bf:cf:e3:6c:11:ce:df:fe:f3:41: 6c:57:f7:c8:3e:f6:5e:76:39:a8:fa:53:47:61:40: f4:85:a8:4e:2e:d4:ba:f5:20:dc:c9:27:6b:2b:d4: c0:8e:a1:95:81:04:81:75:b7:5d:57:b3:64:68:5c: 83:91:cd:dd:58:60:33:e0:63:4c:05:26:b1:6c:46: 64:f9:e7:0d:82:ef:4c:73:80:14:33:e3:b0:fc:70: 7f:a8:47:e4:7e:a2:7f:fe:2d:21:46:59:77:9f:01: ba:6b:7a:62:11:df:50:6f:2e:e8:d2:5e:e3:a9:fb: 63:c7:01:f8:85:2f:3a:01:61:33:f0:3f:48:c0:0c: c7:4a:d1:21:ec:13:0e:c3:58:83:22:30:56:a3:2c: 14:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:98:38:EF:5F:9A:A4:A2:B6:33:D7:A2:3E:4A:A3:FB:75:E8:58:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8402f520-c85b-359c-a454-1cedfef7c566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:6f:e1:78:47:d7:8d:8f:f9:5f:4a:d4:28:91:83:ce:9a:f0: c4:ca:47:e2:3b:dd:a2:f5:42:98:5d:a3:f2:04:d3:f8:db:b6: ad:76:df:ab:ec:74:5a:60:af:56:b2:87:86:23:81:b0:e1:66: d6:3d:4d:1d:13:bf:93:cf:a6:c7:b5:f4:70:fe:9b:29:55:da: 46:f8:5e:04:83:c2:58:fb:64:45:95:89:96:ad:33:46:9b:42: ab:36:b1:9f:e8:63:ad:8d:ec:46:6e:ad:64:e2:79:c4:8e:41: 63:e9:9a:d5:da:e4:ba:fb:b8:28:73:55:a9:43:59:66:ed:d3: a0:6b:02:3b:6a:3f:39:d3:27:11:aa:2f:6f:a1:7d:92:17:80: 6e:9a:49:be:3d:48:77:d8:31:d0:df:0e:71:a4:94:da:2a:28: da:e4:5a:5a:ab:37:8c:8c:8e:73:70:4b:8d:93:bc:58:eb:d2: d4:b5:06:fb:fa:31:f9:ca:ed:9d:d8:77:b0:07:be:92:e2:39: 06:4e:db:f4:19:4c:4c:51:ca:58:a6:31:1b:d5:1b:2f:0c:7e: a2:43:0c:a5:21:dc:43:43:8f:58:29:f7:6b:b8:9e:f9:da:40: c8:66:f9:34:93:6e:a2:0f:75:6d:45:3b:ac:74:a2:92:66:1d: 6f:06:b7:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl8AoGq9w3egM4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZTAwODZiNGUtMmViNy00MGI3LWEyNTAtNTA5ODc5ZmZhNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqYTY86iMUmNWlhabqfdy6O8CJHEOP1PSv1P txhRm+tSRVmR06fwbuI+5p8gl5C/LEU2V0m2epFS9OaYzQScenpTTtR7Y/Z25tqp R+0lsIR0qOWFgxRnuOo9uGhe3yRbuGXCjJFHT2Gjfai9tb/P42wRzt/+80FsV/fI PvZedjmo+lNHYUD0hahOLtS69SDcySdrK9TAjqGVgQSBdbddV7NkaFyDkc3dWGAz 4GNMBSaxbEZk+ecNgu9Mc4AUM+Ow/HB/qEfkfqJ//i0hRll3nwG6a3piEd9Qby7o 0l7jqftjxwH4hS86AWEz8D9IwAzHStEh7BMOw1iDIjBWoywULwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyYOO9fmqSitjPXoj5Ko/t16FifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvODQwMmY1MjAtYzg1Yi0z NTljLWE0NTQtMWNlZGZlZjdjNTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBv4XhH142P+V9K1CiRg86a8MTKR+I73aL1Qphdo/IE0/jbtq1236vs dFpgr1ayh4YjgbDhZtY9TR0Tv5PPpse19HD+mylV2kb4XgSDwlj7ZEWViZatM0ab Qqs2sZ/oY62N7EZurWTiecSOQWPpmtXa5Lr7uChzValDWWbt06BrAjtqPznTJxGq L2+hfZIXgG6aSb49SHfYMdDfDnGklNoqKNrkWlqrN4yMjnNwS42TvFjr0tS1Bvv6 MfnK7Z3Yd7AHvpLiOQZO2/QZTExRylimMRvVGy8MfqJDDKUh3ENDj1gp92u4nvna QMhm+TSTbqIPdW1FO6x0opJmHW8Gt18= -----END CERTIFICATE-----Generated at Sun Sep 20 16:04:00 2026 by rpki-client