$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ae80c859-80ae-3eae-9b72-6cfebaa4cd21.roa File: ae80c859-80ae-3eae-9b72-6cfebaa4cd21.roa (raw, json) Hash identifier: n4ZnsFpNORH1fv9CxAptqH2I7oFY4Cs2pn1uWR5Ttcs= Subject key identifier: BE:B2:21:CA:84:83:95:7A:F0:55:B8:24:9A:A0:47:24:7B:5C:B7:77 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B225AB10568B04460640 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ae80c859-80ae-3eae-9b72-6cfebaa4cd21.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 64.16.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b2:25:ab:10:56:8b:04:46:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=e1e8f3ee-fa63-433b-ae16-fe751c75d3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:79:f8:02:13:fb:4e:98:db:41:ad:0f:75: 7d:2e:0d:28:3a:63:d2:db:bf:bb:bc:31:ab:bd:16: d9:31:3b:7e:04:06:a4:46:5f:38:b1:fc:b6:b0:bf: 48:c3:89:e7:73:4d:3f:f4:43:e0:17:ab:b9:6e:74: 7c:92:db:67:e6:36:6e:50:02:b8:89:9e:b3:e4:49: 8e:82:8c:35:f1:d3:68:c2:99:e6:ba:2e:86:d2:93: 17:15:dc:74:5a:f2:59:24:24:72:e4:ff:c4:6f:a6: 8a:51:85:dc:93:e4:aa:85:9d:15:2d:b5:7c:f1:54: 3d:36:cc:53:ce:86:93:59:be:c6:09:7a:18:00:63: 4c:eb:9e:83:1c:cf:d6:18:b5:4d:cd:29:8a:be:70: e0:db:6d:3f:9d:7b:78:9e:f8:15:1c:85:8d:b3:91: b4:fa:ef:08:5f:cd:af:29:ac:35:59:09:b9:5b:16: 61:e2:3d:f0:e5:de:3d:2c:28:62:5e:58:31:f7:fb: 0c:08:23:3a:61:6d:c1:1f:3a:15:39:b5:66:31:42: 39:fc:09:a3:0b:92:09:ce:bc:e5:a4:ad:ef:ea:ab: ce:16:f0:5c:8a:48:70:12:77:5b:f1:6b:58:9f:c6: 6c:15:6d:da:f5:5c:8c:9a:98:5f:36:77:af:4a:39: c1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B2:21:CA:84:83:95:7A:F0:55:B8:24:9A:A0:47:24:7B:5C:B7:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ae80c859-80ae-3eae-9b72-6cfebaa4cd21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:21:46:1e:72:78:7e:4d:d8:66:08:83:cd:22:1b:f4:ab:47: 96:aa:c0:6d:e3:3f:30:63:c2:86:5a:41:6a:00:e4:64:ae:2a: 82:13:a6:5d:ab:08:26:ac:fe:af:e5:7a:99:5e:e5:d3:9b:5b: c9:ea:c4:c9:ab:fa:57:9d:c9:57:8d:a1:f2:5b:a8:31:88:3f: 8f:34:74:a4:73:d6:fb:ac:8c:3e:0e:fb:d6:7e:0c:cc:47:86: 21:ef:54:ba:5f:47:17:3a:c4:24:c6:c6:e0:e6:b0:64:e2:30: b5:02:94:a7:e1:2a:ef:cc:f7:d2:4b:3b:67:95:d7:f2:53:32: 74:f7:81:ba:5b:e5:db:31:4e:7a:78:6c:85:0a:ff:c2:0f:bf: 6e:23:e2:22:74:43:63:7d:2f:70:e8:50:15:38:45:a7:1b:91: da:e9:9d:10:9f:0b:87:78:1c:7c:32:d2:d9:58:05:e1:f7:4b: 42:be:05:db:66:51:cd:fd:e6:41:51:75:a4:9b:be:37:d8:6a: 30:ad:60:ee:d3:a1:62:c9:cf:dd:66:84:89:1e:cb:d5:5d:dd: e2:1e:b6:0b:79:c1:8a:20:7d:7f:1b:c8:39:20:e3:57:60:81: 06:65:69:9d:a8:90:40:8b:8a:57:44:66:f7:d5:f1:fb:73:1e: 33:ab:35:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97IlqxBWiwRGBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTFlOGYzZWUtZmE2My00MzNiLWFlMTYtZmU3NTFjNzVkM2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7V5+AIT+06Y20GtD3V9Lg0oOmPS27+7vDGr vRbZMTt+BAakRl84sfy2sL9Iw4nnc00/9EPgF6u5bnR8kttn5jZuUAK4iZ6z5EmO gow18dNowpnmui6G0pMXFdx0WvJZJCRy5P/Eb6aKUYXck+SqhZ0VLbV88VQ9NsxT zoaTWb7GCXoYAGNM656DHM/WGLVNzSmKvnDg220/nXt4nvgVHIWNs5G0+u8IX82v Kaw1WQm5WxZh4j3w5d49LChiXlgx9/sMCCM6YW3BHzoVObVmMUI5/AmjC5IJzrzl pK3v6qvOFvBcikhwEndb8WtYn8ZsFW3a9VyMmphfNnevSjnBcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6yIcqEg5V68FW4JJqgRyR7XLd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYWU4MGM4NTktODBhZS0z ZWFlLTliNzItNmNmZWJhYTRjZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMhRh5yeH5N2GYIg80iG/SrR5aqwG3jPzBjwoZaQWoA5GSuKoITpl2r CCas/q/leple5dObW8nqxMmr+ledyVeNofJbqDGIP480dKRz1vusjD4O+9Z+DMxH hiHvVLpfRxc6xCTGxuDmsGTiMLUClKfhKu/M99JLO2eV1/JTMnT3gbpb5dsxTnp4 bIUK/8IPv24j4iJ0Q2N9L3DoUBU4RacbkdrpnRCfC4d4HHwy0tlYBeH3S0K+Bdtm Uc395kFRdaSbvjfYajCtYO7ToWLJz91mhIkey9Vd3eIetgt5wYogfX8byDkg41dg gQZlaZ2okECLildEZvfV8ftzHjOrNZg= -----END CERTIFICATE-----Generated at Wed Sep 23 12:04:38 2026 by rpki-client