$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c5ad9c9e-fb52-3770-b68b-62b59ee9c035.roa File: c5ad9c9e-fb52-3770-b68b-62b59ee9c035.roa (raw, json) Hash identifier: W8dcuBMx9Tu63WCKAopcPcWbbaEexQqpJfBWTDncrP4= Subject key identifier: 90:4B:85:30:6C:79:34:E2:89:03:C1:2C:CE:09:62:F0:A9:86:27:0F Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B2AF667460132A65CA00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c5ad9c9e-fb52-3770-b68b-62b59ee9c035.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b2:af:66:74:60:13:2a:65:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=7b875a7c-3651-41cf-87ef-c92eb1058f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:00:87:14:e4:e3:49:7c:eb:56:39:14:d5:35: 9d:2c:30:56:f8:ec:00:77:24:01:09:5b:22:48:65: 72:da:c3:48:f8:87:6c:c2:c3:02:3f:ab:22:bf:15: dd:11:b8:82:96:f4:77:ee:32:02:ac:2e:23:31:bf: 88:eb:62:48:fd:da:60:02:9c:22:da:56:34:13:a4: f8:70:89:b0:33:00:a6:b4:33:0c:3a:be:5e:24:75: 4d:d2:15:6e:ab:df:ec:60:da:e9:ed:f9:1b:58:44: 1c:db:05:85:ff:8f:c2:b5:9b:68:32:b2:fa:63:3a: d7:70:47:26:8a:c3:c3:45:e7:08:b0:d6:28:32:6c: 22:f9:6c:51:cb:7e:30:1a:bf:5b:42:17:9c:60:8c: 6a:ff:e4:8b:e9:9d:95:72:b5:fe:46:ca:0f:95:75: 65:c6:21:72:4d:fd:34:7d:36:c4:4f:df:8f:7b:63: cf:1a:eb:e3:81:09:8c:2d:88:fd:95:8a:6b:08:95: ed:2d:98:dd:48:3a:df:b1:33:94:49:e7:ce:83:7f: e9:4a:c3:b9:ab:8a:6f:58:42:89:9e:d2:4f:21:99: 5c:b2:dd:8c:ed:db:a5:25:07:26:a3:9f:0a:9a:f6: af:17:51:b5:87:ee:ab:6c:dd:61:17:9c:80:c1:0d: 76:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4B:85:30:6C:79:34:E2:89:03:C1:2C:CE:09:62:F0:A9:86:27:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c5ad9c9e-fb52-3770-b68b-62b59ee9c035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:93:30:51:da:b8:9f:84:4e:d8:53:d7:59:0a:29:39:dd:a1: b7:d0:cb:e0:ba:34:5c:16:2e:3e:56:1d:74:14:1d:1d:db:fa: 4b:ef:5e:af:70:6b:be:66:c8:6c:90:91:14:2f:49:8f:f7:14: 5b:8b:73:43:17:cb:1e:3a:8a:b7:09:c9:fb:a4:8f:79:51:21: fa:34:1f:06:8b:58:5a:75:08:40:98:dd:b5:7d:ff:52:9a:91: 11:1c:93:a8:36:cc:b2:1f:23:81:a0:dd:50:af:90:95:c4:e0: f9:5d:eb:51:ad:78:2e:1b:db:f1:fa:6c:eb:0c:a2:4e:35:e9: cc:ce:66:5a:b9:2b:e9:08:77:e8:dd:3b:15:82:04:6a:e1:ac: 17:26:fc:6c:c9:74:f0:ae:60:9b:4d:4d:d6:ae:fa:75:f9:2c: 18:05:e7:04:1c:b1:fc:8a:d6:32:b2:5f:63:ce:83:92:da:49: a9:f8:cc:9d:49:0c:83:f1:09:d2:ab:b8:f2:ca:09:a1:a8:e6: bf:c6:14:49:86:81:f6:b3:02:2d:21:e7:29:03:c1:23:1d:51: 2b:c5:29:7c:99:da:bd:40:5e:ea:af:51:38:1b:18:0c:8d:8f: 53:46:0a:f7:f1:28:a1:d5:82:b2:d2:37:e2:c5:3f:b5:49:d5: ec:a9:a9:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97KvZnRgEyplygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk N2I4NzVhN2MtMzY1MS00MWNmLTg3ZWYtYzkyZWIxMDU4ZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQCHFOTjSXzrVjkU1TWdLDBW+OwAdyQBCVsi SGVy2sNI+IdswsMCP6sivxXdEbiClvR37jICrC4jMb+I62JI/dpgApwi2lY0E6T4 cImwMwCmtDMMOr5eJHVN0hVuq9/sYNrp7fkbWEQc2wWF/4/CtZtoMrL6YzrXcEcm isPDRecIsNYoMmwi+WxRy34wGr9bQhecYIxq/+SL6Z2VcrX+RsoPlXVlxiFyTf00 fTbET9+Pe2PPGuvjgQmMLYj9lYprCJXtLZjdSDrfsTOUSefOg3/pSsO5q4pvWEKJ ntJPIZlcst2M7dulJQcmo58KmvavF1G1h+6rbN1hF5yAwQ12bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBLhTBseTTiiQPBLM4JYvCphicPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYzVhZDljOWUtZmI1Mi0z NzcwLWI2OGItNjJiNTllZTljMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqTMFHauJ+ETthT11kKKTndobfQy+C6NFwWLj5WHXQUHR3b+kvvXq9w a75myGyQkRQvSY/3FFuLc0MXyx46ircJyfukj3lRIfo0HwaLWFp1CECY3bV9/1Ka kREck6g2zLIfI4Gg3VCvkJXE4Pld61GteC4b2/H6bOsMok416czOZlq5K+kId+jd OxWCBGrhrBcm/GzJdPCuYJtNTdau+nX5LBgF5wQcsfyK1jKyX2POg5LaSan4zJ1J DIPxCdKruPLKCaGo5r/GFEmGgfazAi0h5ykDwSMdUSvFKXyZ2r1AXuqvUTgbGAyN j1NGCvfxKKHVgrLSN+LFP7VJ1eypqfk= -----END CERTIFICATE-----Generated at Sun Sep 20 16:03:51 2026 by rpki-client