$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/bc5d4f49-e748-329d-bd9b-4f941981b39b.roa File: bc5d4f49-e748-329d-bd9b-4f941981b39b.roa (raw, json) Hash identifier: 6rS/ZiOV+d2JLagOeqfued3RB5li8+Kyp2bDBlbXFXo= Subject key identifier: 6C:BA:75:F1:21:42:2C:11:B7:69:48:DE:08:A1:D3:4B:30:34:94:86 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D224D6C97FFE164E95C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/bc5d4f49-e748-329d-bd9b-4f941981b39b.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d2:24:d6:c9:7f:fe:16:4e:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=8eef207d-6e61-4d97-9dc9-9d10cdb0a876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5c:b0:fa:ca:eb:a9:1f:ac:56:a0:ed:ae:0a: d5:35:db:21:2b:d7:45:b0:c6:88:42:f3:55:9c:e3: 35:13:64:28:a7:08:2a:00:d8:81:4a:b2:85:b0:fe: de:d9:8b:76:e8:66:46:54:4e:74:3c:f7:51:61:1a: eb:b3:2e:fb:df:a3:8c:ad:17:57:ac:1b:52:e7:14: 44:3a:06:b2:a2:de:4b:8b:69:92:94:ab:84:f4:15: aa:01:58:c6:f1:b3:8c:5b:8b:75:54:51:22:e0:d7: 30:7f:25:b2:ea:d6:e5:84:29:d7:6e:7e:9e:05:7e: b8:7c:cd:a8:40:17:0d:8e:0b:fa:13:e3:9d:90:9b: 34:06:6f:cd:e9:6a:c6:d3:08:1b:48:32:e3:f3:61: ab:6a:fa:1f:a8:3e:69:7a:5b:3c:ec:7b:ec:7e:f4: c1:4f:0f:c2:df:4f:a6:c3:e1:db:0a:a4:54:7e:a7: 22:7f:c7:7d:89:3d:6a:26:20:a2:d3:91:10:26:b2: 77:a7:c5:db:d6:95:e8:1a:34:6f:ad:d2:80:e2:7f: 8d:2e:46:e3:96:ba:47:a2:00:38:c5:a4:b0:f8:b8: 34:16:85:7e:a0:16:fb:32:72:3f:22:59:dc:3b:11: 7a:48:21:2b:b5:fa:f2:94:e3:1c:15:0e:28:50:4a: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BA:75:F1:21:42:2C:11:B7:69:48:DE:08:A1:D3:4B:30:34:94:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/bc5d4f49-e748-329d-bd9b-4f941981b39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:0e:53:b8:dc:ff:94:be:36:0d:cf:49:1b:64:7d:e5:7b:72: 66:d8:fe:ed:c3:87:43:2c:71:1d:23:11:a0:13:1d:3e:0d:8b: 1a:0c:13:69:7b:64:a3:27:0f:2d:93:61:b6:fe:25:a8:cf:72: 52:de:75:f2:38:2d:0b:aa:fb:1a:d3:9c:7c:50:9a:01:d0:0f: 10:dd:1a:e6:67:66:93:fa:01:d6:cf:c1:b6:c6:a4:5b:83:0a: 2c:ff:15:d3:48:73:ab:e4:e8:ee:2c:ee:72:ba:e5:e1:2f:c3: bf:6f:1e:b3:b6:1a:14:1d:e5:a8:87:c5:08:8e:e2:78:cd:70: 40:e0:03:bc:de:c7:a6:17:e3:3b:8f:cd:27:90:df:ef:86:ed: 7b:e6:af:7d:31:57:b3:1c:f0:68:97:72:ba:ec:b4:4a:3e:fd: 69:92:b1:88:f1:a7:31:11:1f:9d:47:01:06:62:e4:af:81:9f: 8a:f5:bf:1c:0d:b8:47:6a:b2:9f:bb:8b:59:45:ef:94:2b:e3: 00:d4:83:ed:c3:b2:b9:a8:30:26:4a:39:42:a5:a0:10:52:f8: 83:14:e7:58:4c:ea:e1:a9:24:31:ad:e8:1c:bd:23:35:1f:40: be:a6:b5:0c:f8:7a:42:7e:a2:0b:a2:94:b4:4a:5e:60:0e:f2: 7b:69:61:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99Ik1sl//hZOlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OGVlZjIwN2QtNmU2MS00ZDk3LTlkYzktOWQxMGNkYjBhODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFyw+srrqR+sVqDtrgrVNdshK9dFsMaIQvNV nOM1E2QopwgqANiBSrKFsP7e2Yt26GZGVE50PPdRYRrrsy7736OMrRdXrBtS5xRE Ogayot5Li2mSlKuE9BWqAVjG8bOMW4t1VFEi4NcwfyWy6tblhCnXbn6eBX64fM2o QBcNjgv6E+OdkJs0Bm/N6WrG0wgbSDLj82GravofqD5pels87HvsfvTBTw/C30+m w+HbCqRUfqcif8d9iT1qJiCi05EQJrJ3p8Xb1pXoGjRvrdKA4n+NLkbjlrpHogA4 xaSw+Lg0FoV+oBb7MnI/IlncOxF6SCErtfrylOMcFQ4oUErkywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGy6dfEhQiwRt2lI3gih00swNJSGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYmM1ZDRmNDktZTc0OC0z MjlkLWJkOWItNGY5NDE5ODFiMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAOU7jc/5S+Ng3PSRtkfeV7cmbY/u3Dh0MscR0jEaATHT4NixoME2l7 ZKMnDy2TYbb+JajPclLedfI4LQuq+xrTnHxQmgHQDxDdGuZnZpP6AdbPwbbGpFuD Ciz/FdNIc6vk6O4s7nK65eEvw79vHrO2GhQd5aiHxQiO4njNcEDgA7zex6YX4zuP zSeQ3++G7Xvmr30xV7Mc8GiXcrrstEo+/WmSsYjxpzERH51HAQZi5K+Bn4r1vxwN uEdqsp+7i1lF75Qr4wDUg+3DsrmoMCZKOUKloBBS+IMU51hM6uGpJDGt6By9IzUf QL6mtQz4ekJ+oguilLRKXmAO8ntpYao= -----END CERTIFICATE-----Generated at Tue Sep 22 18:13:51 2026 by rpki-client