$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a907043d-8870-3f2e-966e-1be6a52817cc.roa File: a907043d-8870-3f2e-966e-1be6a52817cc.roa (raw, json) Hash identifier: NAaYpcea3nqlk9WbMhJthB2p8vUCBEq8RCasY3KpvNE= Subject key identifier: BE:3E:19:B4:6B:C9:48:C8:28:53:FE:56:3D:DB:73:A4:3C:E1:A8:CC Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A44E8AE3EF1EE3FB2480 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a907043d-8870-3f2e-966e-1be6a52817cc.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a4:4e:8a:e3:ef:1e:e3:fb:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=4350f49e-8764-4195-a349-c33645c12667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:14:dc:ae:2c:3d:3e:95:63:bd:73:2f:64:f6: 7a:ff:d5:91:d9:50:95:95:54:68:f8:7f:95:af:1c: b3:5b:02:01:21:29:ea:82:15:85:a7:76:4b:d2:85: 7b:4f:76:b1:41:7a:60:95:04:e8:52:8f:47:56:45: 5e:1e:3f:42:e5:06:0e:02:7e:e1:7f:f7:6b:34:3d: d7:e3:01:5c:aa:5a:0e:29:f0:41:aa:2e:13:fa:d2: 12:cb:5e:7d:b5:a0:ad:25:f0:ee:44:06:47:38:d5: 7d:b0:6d:23:8a:55:6a:cd:c7:3e:0e:f0:7c:16:e1: d7:96:4e:0a:51:81:de:2b:8d:59:6d:9b:a8:a1:c3: bf:58:fa:85:49:e6:cb:b8:b5:6a:c9:97:7b:90:9c: f3:e2:1e:50:f1:27:72:43:31:5c:a0:60:d3:31:b2: 38:dd:45:57:2e:15:6b:f5:cb:0f:3c:23:55:a6:17: e6:d8:18:17:3b:9b:74:9a:21:88:1d:3c:10:dc:65: bb:3b:c5:fa:f2:77:28:06:a1:9a:c2:70:a9:f3:1f: aa:48:3c:89:3f:47:a1:43:ee:cd:c5:12:1e:6a:4a: a6:54:2e:11:df:19:7f:d8:66:d4:d9:06:b1:75:c1: 18:b1:5f:6b:20:52:4b:3e:4f:75:7b:ca:ca:f5:68: 8d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3E:19:B4:6B:C9:48:C8:28:53:FE:56:3D:DB:73:A4:3C:E1:A8:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a907043d-8870-3f2e-966e-1be6a52817cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:83:f3:38:ae:f5:53:bf:87:e1:aa:44:17:2d:89:9d:21:3e: f6:c2:31:2b:2e:a0:33:0b:a8:a0:96:3c:b1:03:30:1d:10:44: f8:cc:9f:03:65:af:60:bd:6e:19:7c:99:84:14:0d:a3:cf:82: 62:a2:76:9d:be:f3:08:89:d5:e1:7b:df:b1:52:af:f5:0b:6c: d7:2a:04:73:35:d1:de:af:0f:d6:b9:69:2b:d5:12:80:d0:0d: 16:8c:d4:b7:06:ee:a9:92:ea:cd:19:ba:39:56:12:14:c8:b3: 97:80:ef:b1:bf:55:5c:fe:da:99:f0:68:c7:09:24:11:a7:08: 68:0e:47:02:f5:b9:43:71:2d:5e:98:01:ac:aa:80:cd:a9:b8: 1b:d2:70:d5:c0:55:f0:4d:68:83:1c:24:9f:a6:f8:03:7a:fb: 46:c5:9c:13:32:6b:ac:8b:2e:a1:44:2d:0a:39:c4:f7:90:78: e3:22:da:2d:1d:8e:9b:8f:03:7f:9b:6e:e1:aa:be:7a:71:16: 6d:fe:dc:af:96:95:07:db:2e:a4:ee:2c:b7:2e:cc:d3:09:b5: 76:55:fe:f5:87:6c:ef:4b:08:30:66:90:0c:7d:f6:51:2d:8c: 4c:6f:60:52:ce:b3:88:11:96:b8:64:0b:46:15:0b:45:0d:64: 0d:b2:1e:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96ROiuPvHuP7JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDM1MGY0OWUtODc2NC00MTk1LWEzNDktYzMzNjQ1YzEyNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBTcriw9PpVjvXMvZPZ6/9WR2VCVlVRo+H+V rxyzWwIBISnqghWFp3ZL0oV7T3axQXpglQToUo9HVkVeHj9C5QYOAn7hf/drND3X 4wFcqloOKfBBqi4T+tISy159taCtJfDuRAZHONV9sG0jilVqzcc+DvB8FuHXlk4K UYHeK41ZbZuoocO/WPqFSebLuLVqyZd7kJzz4h5Q8SdyQzFcoGDTMbI43UVXLhVr 9csPPCNVphfm2BgXO5t0miGIHTwQ3GW7O8X68ncoBqGawnCp8x+qSDyJP0ehQ+7N xRIeakqmVC4R3xl/2GbU2QaxdcEYsV9rIFJLPk91e8rK9WiNgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4+GbRryUjIKFP+Vj3bc6Q84ajMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTkwNzA0M2QtODg3MC0z ZjJlLTk2NmUtMWJlNmE1MjgxN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2D8ziu9VO/h+GqRBctiZ0hPvbCMSsuoDMLqKCWPLEDMB0QRPjMnwNl r2C9bhl8mYQUDaPPgmKidp2+8wiJ1eF737FSr/ULbNcqBHM10d6vD9a5aSvVEoDQ DRaM1LcG7qmS6s0ZujlWEhTIs5eA77G/VVz+2pnwaMcJJBGnCGgORwL1uUNxLV6Y AayqgM2puBvScNXAVfBNaIMcJJ+m+AN6+0bFnBMya6yLLqFELQo5xPeQeOMi2i0d jpuPA3+bbuGqvnpxFm3+3K+WlQfbLqTuLLcuzNMJtXZV/vWHbO9LCDBmkAx99lEt jExvYFLOs4gRlrhkC0YVC0UNZA2yHmQ= -----END CERTIFICATE-----Generated at Mon Sep 28 21:56:28 2026 by rpki-client