$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a09bde37-5a9e-350b-bbc8-6724e8866d49.roa File: a09bde37-5a9e-350b-bbc8-6724e8866d49.roa (raw, json) Hash identifier: stXu98oy6/aCxJxC3kICdCiECRBOxY5ULCU+G/F+3qE= Subject key identifier: A7:F4:54:29:D6:D4:F3:4E:40:14:88:72:32:2A:07:3C:93:41:70:93 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D1BDDD7D8020E9463780 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a09bde37-5a9e-350b-bbc8-6724e8866d49.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d1:bd:dd:7d:80:20:e9:46:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=18b4e082-0662-4123-a8b7-e25a0432c158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c7:c2:69:a6:75:65:c3:eb:82:8d:7e:c8:98: c4:62:db:e4:2c:ca:9e:b6:84:42:7e:18:81:a5:6e: 01:0b:aa:92:e7:52:bb:81:b8:2b:dc:2a:39:ce:13: 22:20:3e:9d:0f:dd:fa:a4:d9:80:91:b6:50:cf:87: cc:39:c3:77:82:48:03:b0:60:11:c9:48:4d:8f:c9: cb:74:00:67:f7:81:e1:7c:ce:eb:5e:56:62:48:d6: ac:c3:57:67:ef:44:83:61:d9:41:b1:3c:7c:8c:22: 8e:22:98:17:ff:d3:9e:e6:c2:ce:fe:d5:ab:11:1f: fd:0f:66:91:34:c5:94:4b:00:5e:19:98:30:06:59: b6:cd:80:5a:34:e5:c5:fd:9e:55:05:91:06:e0:9e: d2:74:e3:44:b8:89:57:b9:58:c3:92:26:a7:32:e6: 4e:38:37:95:8e:a0:c3:b9:19:5e:4b:e8:c1:81:a6: b2:3e:10:9e:95:8f:fe:69:df:b7:ea:ce:3d:5a:ca: 13:91:c6:6b:86:d2:21:4d:3f:d5:14:82:a8:71:70: a1:37:c8:80:4b:90:fc:7d:94:85:3f:b5:a9:23:1f: 12:0a:36:e4:31:89:71:9d:4a:06:d3:de:d3:03:d8: 72:97:f0:51:59:e4:ac:44:c6:73:82:6b:78:ae:e4: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F4:54:29:D6:D4:F3:4E:40:14:88:72:32:2A:07:3C:93:41:70:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a09bde37-5a9e-350b-bbc8-6724e8866d49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:6b:73:d5:2e:9a:fc:48:69:7c:48:38:14:ee:ec:ba:9a:a1: 65:97:a8:df:77:f0:08:99:fb:a9:16:1b:a7:2f:c0:a1:66:e0: 25:52:d5:1e:61:98:d9:f7:2c:49:b7:a4:15:cf:e7:b0:cf:67: f4:a7:91:db:ba:dd:71:f5:f8:80:62:fa:35:2e:4d:b9:7c:b6: 84:a5:5c:04:76:72:3d:7b:21:2e:95:46:0f:54:24:d5:89:8f: a5:f5:ee:94:5e:88:e3:0c:e3:93:d5:f8:19:a0:83:2f:b3:a6: d2:42:b9:22:09:8b:40:5b:b5:d6:01:24:8d:2e:ae:24:ff:08: 37:d6:aa:d6:b2:4b:63:19:f0:17:69:88:86:cd:7a:c1:0b:20: 26:12:09:a2:19:75:ea:5e:47:54:d0:9d:8c:69:ad:62:2a:50: 20:e9:0a:6b:24:fe:e3:cc:4b:dd:d1:16:9b:c8:fc:15:8d:07: d8:b4:b8:de:2c:4d:3a:a8:17:b4:c1:99:bf:7c:fb:14:b5:fa: 1f:b6:c7:78:4c:1a:9d:f5:29:70:58:7d:d1:e1:6f:e9:90:cc: 3a:c1:e5:44:3f:b6:c5:e7:6a:ea:fe:c0:ed:ec:48:9c:41:10: d7:fc:f3:9f:1e:dc:46:aa:69:6d:33:50:bb:d8:54:ba:57:26: 74:26:4a:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99G93X2AIOlGN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MThiNGUwODItMDY2Mi00MTIzLWE4YjctZTI1YTA0MzJjMTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcfCaaZ1ZcPrgo1+yJjEYtvkLMqetoRCfhiB pW4BC6qS51K7gbgr3Co5zhMiID6dD936pNmAkbZQz4fMOcN3gkgDsGARyUhNj8nL dABn94HhfM7rXlZiSNasw1dn70SDYdlBsTx8jCKOIpgX/9Oe5sLO/tWrER/9D2aR NMWUSwBeGZgwBlm2zYBaNOXF/Z5VBZEG4J7SdONEuIlXuVjDkianMuZOODeVjqDD uRleS+jBgaayPhCelY/+ad+36s49WsoTkcZrhtIhTT/VFIKocXChN8iAS5D8fZSF P7WpIx8SCjbkMYlxnUoG097TA9hyl/BRWeSsRMZzgmt4ruQZrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKf0VCnW1PNOQBSIcjIqBzyTQXCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTA5YmRlMzctNWE5ZS0z NTBiLWJiYzgtNjcyNGU4ODY2ZDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBrc9UumvxIaXxIOBTu7LqaoWWXqN938AiZ+6kWG6cvwKFm4CVS1R5h mNn3LEm3pBXP57DPZ/Snkdu63XH1+IBi+jUuTbl8toSlXAR2cj17IS6VRg9UJNWJ j6X17pReiOMM45PV+Bmggy+zptJCuSIJi0BbtdYBJI0uriT/CDfWqtayS2MZ8Bdp iIbNesELICYSCaIZdepeR1TQnYxprWIqUCDpCmsk/uPMS93RFpvI/BWNB9i0uN4s TTqoF7TBmb98+xS1+h+2x3hMGp31KXBYfdHhb+mQzDrB5UQ/tsXnaur+wO3sSJxB ENf8858e3EaqaW0zULvYVLpXJnQmSgQ= -----END CERTIFICATE-----Generated at Sat Sep 26 22:47:50 2026 by rpki-client