$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d02ba20e-da65-37f3-b589-bee7bf4fb053.roa File: d02ba20e-da65-37f3-b589-bee7bf4fb053.roa (raw, json) Hash identifier: R22JyQO5+Zog+NktJ20UqmYCPGugC7h66oqVli+BhW0= Subject key identifier: B1:55:AB:97:FA:E3:92:31:63:63:A7:D2:F4:E1:FD:03:D9:CF:A6:C8 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B813080CF071952D4EC0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d02ba20e-da65-37f3-b589-bee7bf4fb053.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 64.16.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b8:13:08:0c:f0:71:95:2d:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=c937017d-d082-476d-8eaa-12d3417ab8e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:80:ad:39:29:fd:9a:34:e5:f9:70:57:b8:2d: 54:51:29:ae:d2:0b:77:57:b4:54:38:b7:2c:7d:14: 10:59:e8:c0:c4:ad:ab:4e:82:0b:f9:78:52:b1:92: 3a:0a:09:0c:1c:e6:11:b2:a4:61:38:e3:ea:49:c6: 8b:36:87:ac:11:5f:37:13:02:05:3c:51:45:3b:cd: e6:e3:a3:d5:5f:b2:1b:c8:1c:72:a3:d2:6e:f5:f0: 4b:15:c6:35:16:39:28:5c:ca:d5:e9:38:72:7e:78: c5:8e:d2:f3:d9:24:d1:28:6a:e6:71:55:7b:9a:64: 87:3f:a5:a6:63:9a:a3:44:c5:63:f7:4c:f9:3b:d9: 19:1e:b1:02:1a:b1:a8:33:9e:ee:9f:ee:02:f8:de: f0:fe:04:60:fe:e5:a2:38:b3:76:d0:b8:85:e5:d6: e6:f9:d2:81:c4:34:f3:d4:60:df:61:23:da:3b:e0: 1e:a2:23:c7:16:34:3e:c3:24:d2:58:27:9b:9b:d7: b9:ad:a2:13:ef:65:e6:26:5f:68:33:e1:08:ca:ca: 8a:c2:be:83:18:c9:c9:f1:74:dd:86:c1:89:ff:a6: 36:8c:0a:04:e0:40:48:20:de:f8:19:e2:f5:46:76: f2:44:95:02:91:53:16:01:aa:3f:ba:11:01:34:ad: 65:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:55:AB:97:FA:E3:92:31:63:63:A7:D2:F4:E1:FD:03:D9:CF:A6:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d02ba20e-da65-37f3-b589-bee7bf4fb053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:b5:70:5d:c7:a4:d9:98:6c:e1:20:fe:39:00:c3:6d:8e:e2: 87:d6:ae:61:d7:71:4f:b3:cd:ca:59:cf:66:cb:25:cf:39:d9: 74:04:f5:ec:57:75:e0:84:d2:c2:4c:a6:f4:9d:09:7b:96:27: 30:fc:c2:69:8d:85:bb:cd:b8:f4:af:f7:f5:24:71:2e:2a:68: 69:ac:31:d0:4a:5f:f3:6f:c5:ab:46:12:67:af:5e:1a:30:34: 89:6e:95:89:b9:7f:2b:5a:e0:2c:f5:ae:90:6b:49:37:00:4b: b6:15:54:13:f8:8a:4f:b6:f3:19:2b:59:7b:e0:77:56:da:88: 60:eb:06:9c:5e:63:15:61:ba:28:3b:8f:6c:b9:e5:e7:eb:97: f0:f2:50:b9:50:88:0e:12:d2:72:25:32:77:d9:1f:60:74:87: ac:8d:e5:d5:9c:3b:15:f3:3f:cd:c6:d5:ba:77:24:14:cb:fa: 08:a4:ca:f8:b7:87:47:df:d6:8d:66:32:63:54:5b:89:23:77: 5d:76:82:a8:26:43:7e:6b:37:64:2c:fc:a9:26:b0:9d:b1:28: ba:96:d1:b3:a5:c8:b3:85:85:44:c0:06:4b:94:70:9b:4b:fe: 49:ee:54:6a:ec:1a:a7:ea:04:94:20:69:9d:20:9c:45:0e:f0: c1:79:d2:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97gTCAzwcZUtTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YzkzNzAxN2QtZDA4Mi00NzZkLThlYWEtMTJkMzQxN2FiOGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4CtOSn9mjTl+XBXuC1UUSmu0gt3V7RUOLcs fRQQWejAxK2rToIL+XhSsZI6CgkMHOYRsqRhOOPqScaLNoesEV83EwIFPFFFO83m 46PVX7IbyBxyo9Ju9fBLFcY1FjkoXMrV6ThyfnjFjtLz2STRKGrmcVV7mmSHP6Wm Y5qjRMVj90z5O9kZHrECGrGoM57un+4C+N7w/gRg/uWiOLN20LiF5dbm+dKBxDTz 1GDfYSPaO+AeoiPHFjQ+wyTSWCebm9e5raIT72XmJl9oM+EIysqKwr6DGMnJ8XTd hsGJ/6Y2jAoE4EBIIN74GeL1RnbyRJUCkVMWAao/uhEBNK1lOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFVq5f645IxY2On0vTh/QPZz6bIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZDAyYmEyMGUtZGE2NS0z N2YzLWI1ODktYmVlN2JmNGZiMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALq1cF3HpNmYbOEg/jkAw22O4ofWrmHXcU+zzcpZz2bLJc852XQE9exX deCE0sJMpvSdCXuWJzD8wmmNhbvNuPSv9/UkcS4qaGmsMdBKX/NvxatGEmevXhow NIlulYm5fyta4Cz1rpBrSTcAS7YVVBP4ik+28xkrWXvgd1baiGDrBpxeYxVhuig7 j2y55efrl/DyULlQiA4S0nIlMnfZH2B0h6yN5dWcOxXzP83G1bp3JBTL+gikyvi3 h0ff1o1mMmNUW4kjd112gqgmQ35rN2Qs/KkmsJ2xKLqW0bOlyLOFhUTABkuUcJtL /knuVGrsGqfqBJQgaZ0gnEUO8MF50tM= -----END CERTIFICATE-----Generated at Sun Sep 27 01:41:31 2026 by rpki-client