$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a3796f5c-d560-3ed2-b2b1-b7e0af94121e.roa File: a3796f5c-d560-3ed2-b2b1-b7e0af94121e.roa (raw, json) Hash identifier: jpaRHlaQQ+hpFrhHKDyWE5ep3yEOoSO2+3HG45BFdA0= Subject key identifier: BC:98:CB:9D:DB:17:21:2C:F7:48:8E:21:38:C6:50:7E:E7:67:7A:82 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7CF490362AF7070E4FD80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a3796f5c-d560-3ed2-b2b1-b7e0af94121e.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cf:49:03:62:af:70:70:e4:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=a9714e45-86c8-4b0b-85de-61ef5569e280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:cd:29:c6:28:7b:66:fe:f4:35:07:6d:06: fe:9b:79:f5:d3:7b:dd:06:8e:13:62:40:7a:be:67: 4f:78:64:cb:08:41:da:c8:5d:bb:e5:2b:fa:91:07: a7:c0:d9:64:4c:b6:9b:17:3f:8f:ed:96:43:89:38: 5a:21:13:76:61:14:2f:5f:49:fb:fe:33:c4:03:97: ba:47:5c:64:a0:40:06:e4:cc:b1:0a:f2:cc:82:bf: 52:cb:d9:92:29:ee:79:59:1f:a2:b1:58:c6:c6:e2: 04:d9:65:e2:90:ee:3c:46:1c:48:e6:76:05:d9:2c: c2:09:27:d0:4e:f3:90:77:f7:cf:e6:31:05:0e:c2: a9:00:c9:39:34:02:81:5c:13:80:4b:af:01:25:d9: f1:f0:10:99:1b:b2:eb:be:8d:e9:2b:8f:e8:27:16: c0:51:d0:a7:e3:76:ce:64:d9:78:3e:ad:90:4c:bc: a0:25:e7:78:3e:49:bc:b5:bb:ad:c1:58:7d:40:c0: c7:ae:cb:1b:64:45:e8:77:01:4b:a0:d9:d8:9f:eb: 1d:fb:99:ed:78:a3:49:df:99:40:81:c7:10:20:c9: e2:b2:76:4e:0c:10:d1:58:dd:30:39:c8:42:c1:e1: 30:f6:e5:a1:db:37:17:7e:90:55:be:5d:dd:5a:98: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:98:CB:9D:DB:17:21:2C:F7:48:8E:21:38:C6:50:7E:E7:67:7A:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a3796f5c-d560-3ed2-b2b1-b7e0af94121e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:16:c6:b1:39:f0:e6:4d:63:52:79:44:34:e3:34:de:b8:93: 47:a7:ac:88:30:83:4c:ee:c4:db:a5:42:14:a1:ad:ab:cb:c0: 84:60:5f:fd:c0:5d:ad:5f:98:b8:4a:19:d3:7e:fc:7c:07:23: 32:0c:42:c6:90:ae:ff:5e:10:50:97:a6:91:3b:a4:22:c3:3a: f2:92:bc:c2:06:60:6a:58:58:f2:b2:cc:7d:78:ea:f7:9b:95: 3e:ea:6a:6c:91:de:43:6b:4b:cf:28:75:d4:62:47:ea:c6:33: 8c:5e:ac:ef:17:ca:e1:7f:a8:7f:f9:23:30:eb:ac:7b:20:a8: 8d:b1:4d:e7:43:d5:fc:f3:93:55:a7:10:36:a0:c6:9d:10:4c: 0d:7d:0c:36:ae:ea:2d:9e:1d:8c:98:6e:a6:88:df:02:a4:9a: 7f:e9:f1:f3:aa:6c:50:7f:bf:a8:1c:2b:3a:3a:bf:db:ee:a7: 52:c8:f3:af:b3:1c:96:2f:c8:01:fa:6c:aa:12:eb:fe:f5:f3: 08:fd:f1:1e:87:f0:3c:0a:74:a3:5a:02:0a:46:e2:3e:66:1f: 80:2b:e3:76:a8:42:3e:e1:c1:be:58:10:9b:06:a5:56:31:56: 64:39:59:be:ad:16:f3:6f:fb:35:25:eb:5e:d0:d3:ca:81:b7: 5c:4f:f0:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g989JA2KvcHDk/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YTk3MTRlNDUtODZjOC00YjBiLTg1ZGUtNjFlZjU1NjllMjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5XNKcYoe2b+9DUHbQb+m3n103vdBo4TYkB6 vmdPeGTLCEHayF275Sv6kQenwNlkTLabFz+P7ZZDiThaIRN2YRQvX0n7/jPEA5e6 R1xkoEAG5MyxCvLMgr9Sy9mSKe55WR+isVjGxuIE2WXikO48RhxI5nYF2SzCCSfQ TvOQd/fP5jEFDsKpAMk5NAKBXBOAS68BJdnx8BCZG7Lrvo3pK4/oJxbAUdCn43bO ZNl4Pq2QTLygJed4Pkm8tbutwVh9QMDHrssbZEXodwFLoNnYn+sd+5nteKNJ35lA gccQIMnisnZODBDRWN0wOchCweEw9uWh2zcXfpBVvl3dWpjiYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyYy53bFyEs90iOITjGUH7nZ3qCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTM3OTZmNWMtZDU2MC0z ZWQyLWIyYjEtYjdlMGFmOTQxMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkWxrE58OZNY1J5RDTjNN64k0enrIgwg0zuxNulQhShravLwIRgX/3A Xa1fmLhKGdN+/HwHIzIMQsaQrv9eEFCXppE7pCLDOvKSvMIGYGpYWPKyzH146veb lT7qamyR3kNrS88oddRiR+rGM4xerO8XyuF/qH/5IzDrrHsgqI2xTedD1fzzk1Wn EDagxp0QTA19DDau6i2eHYyYbqaI3wKkmn/p8fOqbFB/v6gcKzo6v9vup1LI86+z HJYvyAH6bKoS6/718wj98R6H8DwKdKNaAgpG4j5mH4Ar43aoQj7hwb5YEJsGpVYx VmQ5Wb6tFvNv+zUl617Q08qBt1xP8BQ= -----END CERTIFICATE-----Generated at Sun Sep 27 00:14:30 2026 by rpki-client