$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8c46588d-02ce-325a-9e1b-72923e267abc.roa File: 8c46588d-02ce-325a-9e1b-72923e267abc.roa (raw, json) Hash identifier: LTbRGvMILClxB/jJbmN7INlP4Ic+18gOpmMlJVopUEQ= Subject key identifier: C2:B4:5E:F6:42:FD:42:0D:3B:58:74:A4:7F:48:91:33:D1:9A:8F:52 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D63B12E468B3A5344A80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8c46588d-02ce-325a-9e1b-72923e267abc.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d6:3b:12:e4:68:b3:a5:34:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=e29ab521-db3e-44db-be00-1e3c71117530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:a3:9e:7a:76:b3:58:ca:1c:a6:2d:86:8b: f2:7b:3c:0b:72:0b:b1:72:37:0c:6e:12:1b:80:89: 20:24:dd:53:f0:85:6f:3f:73:98:f1:92:0e:67:67: d8:9e:c4:8a:6e:0b:76:07:a2:ec:67:26:d5:93:27: 3f:ee:b0:e7:a1:67:6a:42:38:67:a7:0c:ea:6a:11: 9f:c6:f6:43:4b:a7:4a:c1:d9:10:4e:05:97:4d:67: 61:07:fd:94:c9:cc:e9:fb:fb:5a:55:e3:68:2f:75: b5:41:66:9d:2e:7d:40:09:3c:81:96:23:8f:58:f5: 02:cc:4d:4e:5f:9f:f1:11:a2:ce:30:d0:bb:68:0b: f2:e8:20:2c:66:71:48:36:25:56:0f:74:07:b2:7b: 5f:eb:c4:db:09:73:f1:c2:68:14:6d:37:f2:c2:4e: 9c:24:01:1a:1a:c6:9c:39:ca:fa:c5:ba:80:31:e8: f8:3e:fd:52:49:43:20:3d:24:9f:a8:2d:50:0b:0f: 6c:5c:22:94:66:ea:c0:f1:4b:7e:4a:10:12:f7:53: ff:a0:09:20:97:72:16:c7:13:0a:c1:ac:ec:bc:f8: 37:cd:bc:7f:c8:cb:e9:00:76:a7:ef:3a:78:08:07: 78:99:99:3e:cf:f7:90:18:cd:db:e0:2a:77:b7:df: f6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B4:5E:F6:42:FD:42:0D:3B:58:74:A4:7F:48:91:33:D1:9A:8F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8c46588d-02ce-325a-9e1b-72923e267abc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:60:18:ab:32:3f:2e:6c:dc:b3:a5:b0:1d:c5:10:73:24:41: 0b:09:7f:c5:44:07:65:09:d4:79:9e:46:a1:26:08:ab:e2:f0: b9:1d:d4:11:c6:09:3c:1a:78:29:4a:a6:bb:cb:b6:7e:2e:de: 7f:73:1e:ea:8e:ac:3a:88:5e:93:dd:8b:61:0a:5d:36:32:cf: 6f:9e:df:66:7d:0a:e4:25:95:81:98:24:e1:dd:0c:1f:16:a6: 27:f9:47:52:38:90:9d:f0:df:e5:5d:47:3f:d0:5d:38:46:99: b6:8e:4b:15:18:a0:c6:51:81:93:a3:bf:29:ef:4b:b7:4b:a1: e5:78:59:c7:3a:b3:75:c0:03:fe:69:61:c8:43:1c:e6:4f:35: 22:55:1f:11:88:62:64:ca:f4:9f:44:e4:ca:1d:4b:fe:64:15: 9a:18:81:df:2d:37:d1:fd:58:85:e1:da:7b:f9:d2:e1:86:ed: 59:c0:ea:75:5f:19:13:fc:78:bb:a6:0e:34:87:9a:25:28:94: d2:6e:74:1b:ac:a0:a5:65:1b:d5:83:ba:43:71:67:f1:47:22: 0a:09:f5:2d:29:b5:16:f8:1c:3f:13:c5:ae:ba:56:11:22:f2: 5a:16:a8:78:13:3e:d6:bb:3e:82:a9:5e:56:8d:e6:74:f4:b8: 63:ed:8f:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99Y7EuRos6U0SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTI5YWI1MjEtZGIzZS00NGRiLWJlMDAtMWUzYzcxMTE3NTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU2jnnp2s1jKHKYthovyezwLcguxcjcMbhIb gIkgJN1T8IVvP3OY8ZIOZ2fYnsSKbgt2B6LsZybVkyc/7rDnoWdqQjhnpwzqahGf xvZDS6dKwdkQTgWXTWdhB/2Uyczp+/taVeNoL3W1QWadLn1ACTyBliOPWPUCzE1O X5/xEaLOMNC7aAvy6CAsZnFINiVWD3QHsntf68TbCXPxwmgUbTfywk6cJAEaGsac Ocr6xbqAMej4Pv1SSUMgPSSfqC1QCw9sXCKUZurA8Ut+ShAS91P/oAkgl3IWxxMK wazsvPg3zbx/yMvpAHan7zp4CAd4mZk+z/eQGM3b4Cp3t9/29wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMK0XvZC/UINO1h0pH9IkTPRmo9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOGM0NjU4OGQtMDJjZS0z MjVhLTllMWItNzI5MjNlMjY3YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBgGKsyPy5s3LOlsB3FEHMkQQsJf8VEB2UJ1HmeRqEmCKvi8Lkd1BHG CTwaeClKprvLtn4u3n9zHuqOrDqIXpPdi2EKXTYyz2+e32Z9CuQllYGYJOHdDB8W pif5R1I4kJ3w3+VdRz/QXThGmbaOSxUYoMZRgZOjvynvS7dLoeV4Wcc6s3XAA/5p YchDHOZPNSJVHxGIYmTK9J9E5ModS/5kFZoYgd8tN9H9WIXh2nv50uGG7VnA6nVf GRP8eLumDjSHmiUolNJudBusoKVlG9WDukNxZ/FHIgoJ9S0ptRb4HD8Txa66VhEi 8loWqHgTPta7PoKpXlaN5nT0uGPtj9I= -----END CERTIFICATE-----Generated at Sun Sep 20 16:03:36 2026 by rpki-client