$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9162e2da-99f7-38b5-b7ee-c4c8931b73b3.roa File: 9162e2da-99f7-38b5-b7ee-c4c8931b73b3.roa (raw, json) Hash identifier: DC+4DjUOTAhsLgQsQoUYJIGSEA8lm46o9iuPiZDF2P0= Subject key identifier: 05:2E:54:07:DB:3C:CA:55:03:85:34:CC:06:3F:0F:67:D7:98:E4:D8 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A7468F2A5B6B660EFC00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9162e2da-99f7-38b5-b7ee-c4c8931b73b3.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a7:46:8f:2a:5b:6b:66:0e:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=9cffae0e-905a-4fb6-92d5-f5d7a975b607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e4:eb:25:76:82:f4:20:fe:31:40:17:56:77: 0a:64:b4:83:66:2b:cb:9b:08:95:98:f4:66:61:2d: 5b:fa:3e:ad:73:c0:af:55:64:82:5b:2b:a0:10:ca: bf:e5:24:23:e8:d9:43:e4:be:2e:bc:53:aa:86:77: 19:7a:6c:29:a7:2d:86:88:7d:b0:3c:73:1a:71:10: c5:a3:51:01:92:71:07:94:1b:e2:62:31:cb:ba:2c: a1:48:c8:8f:14:98:e4:1e:a8:8f:06:ce:66:5d:44: 93:b1:05:e1:03:86:0d:05:2a:97:6d:55:26:96:77: e0:7f:d1:b4:f2:8e:0e:16:e6:6f:be:ea:fb:6a:54: ec:53:40:ed:aa:44:69:4e:12:c7:79:bf:a8:fd:d4: 6f:ad:08:69:ab:6d:52:12:dd:a6:0c:a6:9c:a5:8d: 68:49:d2:f2:17:22:ad:87:a4:d1:1f:ae:1e:0c:9d: 27:97:05:fc:1f:e7:3b:6f:02:4e:7c:28:3a:59:2b: be:22:47:ff:72:d4:0b:44:df:9f:60:f5:52:c5:29: db:81:7d:f7:44:23:b1:7a:a6:e8:72:a5:9c:55:5c: 45:99:1e:72:30:78:8f:bd:77:8e:45:78:46:33:eb: ce:99:7e:d9:0e:7b:81:37:e6:f6:8c:9f:90:fa:90: a9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2E:54:07:DB:3C:CA:55:03:85:34:CC:06:3F:0F:67:D7:98:E4:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9162e2da-99f7-38b5-b7ee-c4c8931b73b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8d:81:36:b2:9c:9a:b8:30:25:9e:02:41:44:0e:69:d4:2f: 8e:26:56:06:6d:35:a0:70:d9:86:f4:38:0f:fa:17:38:a9:4f: 5a:5a:3d:52:12:51:90:4a:9c:bf:99:96:45:6b:3c:63:7f:60: a6:64:76:85:a5:5c:ad:75:47:00:1e:84:be:cb:bb:24:38:d2: 1b:34:2d:fe:a8:a8:c1:fe:34:10:ca:d3:f1:1f:5f:0b:d5:61: 40:b3:6d:90:3a:48:88:ad:b2:fc:b0:a8:16:ee:0c:ca:24:5c: c0:eb:45:9a:3f:7c:1e:8e:c7:42:22:3b:5c:16:20:8b:f1:70: 6d:eb:09:21:df:03:c2:31:b0:b1:26:91:51:74:01:51:9d:44: c9:3c:6c:a6:4e:52:48:b4:73:5c:16:d0:66:c5:64:f0:6e:e6: 2e:45:76:97:9d:91:7a:e2:a7:d3:85:e9:e8:00:cf:6b:48:2a: ec:ab:b4:a2:5b:38:b7:2d:66:f1:a3:9b:93:63:b7:3a:0d:25: 8c:5c:66:19:50:6f:6b:aa:18:13:6b:e0:79:99:7f:7d:b6:87: df:23:44:30:de:19:82:4d:a9:91:32:34:11:41:17:7b:06:f7: 0f:64:9a:95:47:6c:84:1f:0e:e8:d5:cd:8c:0f:1a:6f:3e:ae: cf:6d:2d:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96dGjypba2YO/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OWNmZmFlMGUtOTA1YS00ZmI2LTkyZDUtZjVkN2E5NzViNjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+TrJXaC9CD+MUAXVncKZLSDZivLmwiVmPRm YS1b+j6tc8CvVWSCWyugEMq/5SQj6NlD5L4uvFOqhncZemwppy2GiH2wPHMacRDF o1EBknEHlBviYjHLuiyhSMiPFJjkHqiPBs5mXUSTsQXhA4YNBSqXbVUmlnfgf9G0 8o4OFuZvvur7alTsU0DtqkRpThLHeb+o/dRvrQhpq21SEt2mDKacpY1oSdLyFyKt h6TRH64eDJ0nlwX8H+c7bwJOfCg6WSu+Ikf/ctQLRN+fYPVSxSnbgX33RCOxeqbo cqWcVVxFmR5yMHiPvXeORXhGM+vOmX7ZDnuBN+b2jJ+Q+pCpYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUuVAfbPMpVA4U0zAY/D2fXmOTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOTE2MmUyZGEtOTlmNy0z OGI1LWI3ZWUtYzRjODkzMWI3M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIONgTaynJq4MCWeAkFEDmnUL44mVgZtNaBw2Yb0OA/6FzipT1paPVIS UZBKnL+ZlkVrPGN/YKZkdoWlXK11RwAehL7LuyQ40hs0Lf6oqMH+NBDK0/EfXwvV YUCzbZA6SIitsvywqBbuDMokXMDrRZo/fB6Ox0IiO1wWIIvxcG3rCSHfA8IxsLEm kVF0AVGdRMk8bKZOUki0c1wW0GbFZPBu5i5FdpedkXrip9OF6egAz2tIKuyrtKJb OLctZvGjm5NjtzoNJYxcZhlQb2uqGBNr4HmZf322h98jRDDeGYJNqZEyNBFBF3sG 9w9kmpVHbIQfDujVzYwPGm8+rs9tLbc= -----END CERTIFICATE-----Generated at Sun Sep 20 18:56:45 2026 by rpki-client