$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/afcfeb7d-1368-38a9-ad0a-3b59c1e4dfcd.roa File: afcfeb7d-1368-38a9-ad0a-3b59c1e4dfcd.roa (raw, json) Hash identifier: wFgcPVUIudE7fVWWhFM58RTPVLYujHxlJ/0Otl9EkGc= Subject key identifier: FA:86:AE:B2:A2:90:60:32:6A:95:75:9B:E2:27:55:29:35:21:E2:90 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D8041B7D7FD21E429E00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/afcfeb7d-1368-38a9-ad0a-3b59c1e4dfcd.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d8:04:1b:7d:7f:d2:1e:42:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=06cbdbe5-d783-4ac2-8f67-1c99d5911437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:99:1e:6a:63:9b:00:1c:7b:23:70:59:c9:a1: 92:ea:d1:94:e6:f3:87:07:4c:ec:df:d1:2c:a2:76: 1c:9f:97:6c:3a:72:13:e8:76:2f:70:92:ee:27:2d: 91:9d:fb:50:e0:8c:a3:e9:74:e8:76:f8:a1:67:ff: b0:37:9a:85:b8:fb:ea:30:21:e2:a9:d3:ee:69:ad: de:13:c6:1b:30:5b:cd:e6:2e:52:2a:20:46:1f:7c: d4:56:09:ed:da:40:12:4b:15:13:de:f3:ca:15:ac: 93:3b:38:07:bb:72:78:d3:c9:0b:f9:39:c7:bc:56: 96:49:80:8a:20:09:fa:a1:31:ba:0b:dc:eb:5e:8e: 1c:9c:8f:ba:14:ca:e6:c5:1e:b8:20:e1:a1:2c:c1: 10:58:92:7f:fe:c1:f1:cc:b3:6e:d5:0e:66:bc:29: 72:99:86:5a:4a:91:05:64:52:d1:fe:10:ea:ff:f5: 90:48:87:2a:e2:22:1f:29:78:4f:2c:f6:44:9a:f2: 89:fa:98:5e:6f:a9:bb:77:de:ea:3b:ec:a9:b7:0d: e5:04:7b:8b:46:85:d1:61:32:05:9f:7b:fb:8d:d5: 17:af:2a:4b:8f:1f:06:8b:3d:ce:4f:5c:2c:58:91: f4:60:fe:ef:b6:79:df:85:aa:00:c6:20:3e:3c:e4: 02:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:86:AE:B2:A2:90:60:32:6A:95:75:9B:E2:27:55:29:35:21:E2:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/afcfeb7d-1368-38a9-ad0a-3b59c1e4dfcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d7:90:e3:3d:3f:f0:56:1f:81:0e:81:fb:2c:52:8d:60:bb: 8d:2e:e7:08:bb:31:26:10:7e:a1:99:d8:5a:b1:79:5e:db:96: de:ff:b7:d7:52:c4:dd:4f:d5:52:fc:e6:05:3b:49:71:c5:bd: 77:e2:2a:81:1a:a5:80:cc:b5:59:12:ea:6e:db:05:f7:e5:b7: b1:c9:b4:b8:59:a6:f8:a5:b9:77:48:2c:7b:82:2b:2b:c0:fd: 0e:e1:94:f9:99:af:bd:52:1c:10:c3:bb:14:28:21:83:62:32: de:93:a2:d9:1a:40:ce:ef:ef:31:ba:d1:bb:f3:e7:2f:27:76: 4d:95:e4:58:72:92:36:03:ad:07:09:8e:3c:1d:52:97:37:ed: c3:e3:5c:2a:92:5e:06:ee:c5:0d:0f:10:78:74:fe:02:2f:55: f8:29:b7:84:23:17:0f:4d:db:07:20:49:d5:9a:db:5d:21:a7: c1:2e:a5:e5:1b:0d:54:c9:76:43:49:be:83:49:70:51:2e:63: c8:21:d2:be:cf:d5:58:21:93:92:d2:23:fb:76:a5:5f:cc:82: d1:8e:ce:81:48:6f:ad:89:b9:6f:35:43:94:7c:2b:f3:c9:65: bd:0c:c7:60:8c:a6:ab:a6:2a:b2:54:7a:a1:c0:26:74:ad:af: b5:02:74:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99gEG31/0h5CngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MDZjYmRiZTUtZDc4My00YWMyLThmNjctMWM5OWQ1OTExNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpkeamObABx7I3BZyaGS6tGU5vOHB0zs39Es onYcn5dsOnIT6HYvcJLuJy2RnftQ4Iyj6XTodvihZ/+wN5qFuPvqMCHiqdPuaa3e E8YbMFvN5i5SKiBGH3zUVgnt2kASSxUT3vPKFayTOzgHu3J408kL+TnHvFaWSYCK IAn6oTG6C9zrXo4cnI+6FMrmxR64IOGhLMEQWJJ//sHxzLNu1Q5mvClymYZaSpEF ZFLR/hDq//WQSIcq4iIfKXhPLPZEmvKJ+pheb6m7d97qO+yptw3lBHuLRoXRYTIF n3v7jdUXrypLjx8Giz3OT1wsWJH0YP7vtnnfhaoAxiA+POQCpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqGrrKikGAyapV1m+InVSk1IeKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYWZjZmViN2QtMTM2OC0z OGE5LWFkMGEtM2I1OWMxZTRkZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPXkOM9P/BWH4EOgfssUo1gu40u5wi7MSYQfqGZ2FqxeV7blt7/t9dS xN1P1VL85gU7SXHFvXfiKoEapYDMtVkS6m7bBfflt7HJtLhZpviluXdILHuCKyvA /Q7hlPmZr71SHBDDuxQoIYNiMt6TotkaQM7v7zG60bvz5y8ndk2V5FhykjYDrQcJ jjwdUpc37cPjXCqSXgbuxQ0PEHh0/gIvVfgpt4QjFw9N2wcgSdWa210hp8EupeUb DVTJdkNJvoNJcFEuY8gh0r7P1Vghk5LSI/t2pV/MgtGOzoFIb62JuW81Q5R8K/PJ Zb0Mx2CMpqumKrJUeqHAJnStr7UCdEk= -----END CERTIFICATE-----Generated at Sun Sep 20 18:50:05 2026 by rpki-client