$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c020fc05-e712-3bd4-8014-89246e16c4ff.roa File: c020fc05-e712-3bd4-8014-89246e16c4ff.roa (raw, json) Hash identifier: 171iQRIE5qVM29SpRycsbqxO+LY1ege7EbbWWn1TyiM= Subject key identifier: B9:D2:61:66:55:72:31:9C:14:83:7F:B8:94:EE:6B:CF:4F:D9:BB:2E Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A0C760180E250EA048C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c020fc05-e712-3bd4-8014-89246e16c4ff.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a0:c7:60:18:0e:25:0e:a0:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=b92f527d-d419-4890-95d5-da1ec5bb3527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5c:94:d8:97:f0:03:42:1f:89:70:c2:47:63: b1:4f:46:69:c3:59:58:ad:1e:06:18:87:fc:12:4d: 93:a0:4f:35:49:97:c3:9f:a5:9c:01:17:ec:cf:a5: c3:4f:c5:02:ea:e1:c0:c8:80:a8:aa:a8:2c:68:1e: 94:8a:78:6b:09:22:e1:23:39:c7:63:81:b1:fe:fd: 4b:06:fb:90:71:cf:19:03:2c:f0:09:f6:ff:1a:7d: 43:d8:34:b7:2b:68:58:15:64:4d:42:75:dd:57:9d: 10:e2:3c:4b:ac:0d:30:d9:58:11:96:33:26:4c:73: 34:fa:d8:63:4b:52:3c:ed:31:9d:b8:0d:00:d5:fd: 7f:9e:b7:5d:9f:a9:59:08:5b:31:66:61:e8:7d:7d: 83:ee:96:ab:9c:9f:90:ab:7a:68:45:6e:84:24:3d: c4:e1:8f:29:b2:52:ac:7a:e6:f5:5a:20:a5:39:8b: d3:c3:7d:6b:9b:31:e1:8c:75:82:20:94:41:3d:1d: 24:e9:57:d5:70:2a:12:dc:73:35:d9:b2:54:48:57: 2d:6b:72:83:dc:d0:38:34:75:8d:59:e2:88:e8:23: ff:57:c9:df:cc:b4:cf:90:79:c7:d3:e4:ee:11:15: f9:4e:af:dd:30:9d:ab:2f:08:ab:8b:e1:00:16:ed: 81:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D2:61:66:55:72:31:9C:14:83:7F:B8:94:EE:6B:CF:4F:D9:BB:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c020fc05-e712-3bd4-8014-89246e16c4ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:5a:a1:ff:9e:f7:dd:39:f1:b5:59:4a:16:12:c7:7d:e5:0e: bf:90:f3:f6:95:d9:0f:73:04:a7:03:bf:02:90:d9:1c:ab:0c: b5:6c:7f:2d:75:60:b8:03:84:b0:dd:ee:c3:9a:90:f0:d9:05: 41:eb:3e:f5:0f:3e:89:c3:90:a0:4d:f4:98:a8:aa:0e:5c:51: d3:8a:66:33:50:f3:da:11:9f:09:42:3e:58:f0:03:71:62:c1: cf:2e:f5:28:dc:7b:d6:4a:9f:fa:71:52:db:7d:ec:13:e8:94: de:4f:49:e3:27:ed:1d:69:7d:63:7e:f3:ae:14:09:c7:3c:bc: b8:e6:b9:82:18:69:b1:2a:6c:11:ad:c3:80:be:26:8a:0d:57: aa:6d:ad:95:e9:22:94:9e:c1:f1:6c:80:dd:60:be:15:65:4e: 45:0f:27:24:44:d8:29:84:c3:a6:ea:d0:41:0f:5c:96:03:a5: 86:7e:ee:45:fb:8c:7c:8e:76:92:27:86:3d:1c:cc:fa:55:6e: 87:55:17:f0:a6:d6:44:eb:b8:00:be:b0:6a:ec:0a:dc:77:64: 28:1a:0a:45:db:07:0b:47:a8:3c:d9:cc:c5:ee:a4:8f:a7:73: 14:a2:9e:4d:10:f6:36:d1:23:b2:83:09:a9:2c:40:76:b3:df: b1:a0:bd:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96DHYBgOJQ6gSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YjkyZjUyN2QtZDQxOS00ODkwLTk1ZDUtZGExZWM1YmIzNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFyU2JfwA0IfiXDCR2OxT0Zpw1lYrR4GGIf8 Ek2ToE81SZfDn6WcARfsz6XDT8UC6uHAyICoqqgsaB6UinhrCSLhIznHY4Gx/v1L BvuQcc8ZAyzwCfb/Gn1D2DS3K2hYFWRNQnXdV50Q4jxLrA0w2VgRljMmTHM0+thj S1I87TGduA0A1f1/nrddn6lZCFsxZmHofX2D7parnJ+Qq3poRW6EJD3E4Y8pslKs eub1WiClOYvTw31rmzHhjHWCIJRBPR0k6VfVcCoS3HM12bJUSFcta3KD3NA4NHWN WeKI6CP/V8nfzLTPkHnH0+TuERX5Tq/dMJ2rLwiri+EAFu2BxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnSYWZVcjGcFIN/uJTua89P2bsuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYzAyMGZjMDUtZTcxMi0z YmQ0LTgwMTQtODkyNDZlMTZjNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNaof+e99058bVZShYSx33lDr+Q8/aV2Q9zBKcDvwKQ2RyrDLVsfy11 YLgDhLDd7sOakPDZBUHrPvUPPonDkKBN9Jioqg5cUdOKZjNQ89oRnwlCPljwA3Fi wc8u9Sjce9ZKn/pxUtt97BPolN5PSeMn7R1pfWN+864UCcc8vLjmuYIYabEqbBGt w4C+JooNV6ptrZXpIpSewfFsgN1gvhVlTkUPJyRE2CmEw6bq0EEPXJYDpYZ+7kX7 jHyOdpInhj0czPpVbodVF/Cm1kTruAC+sGrsCtx3ZCgaCkXbBwtHqDzZzMXupI+n cxSink0Q9jbRI7KDCaksQHaz37GgvSU= -----END CERTIFICATE-----Generated at Sun Sep 20 17:34:42 2026 by rpki-client