$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e2c572f2-ba28-3d7b-9553-0b75fd75f47a.roa File: e2c572f2-ba28-3d7b-9553-0b75fd75f47a.roa (raw, json) Hash identifier: 164JBUPKdmX4x/reTkVlj4wdJb0g1wMBFCe4+3EGzw0= Subject key identifier: 0C:E8:EB:EA:A5:25:F1:B9:77:52:9D:43:F7:77:2B:3F:A9:36:B3:40 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D1F7D5D3EBCAAC9F4F80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e2c572f2-ba28-3d7b-9553-0b75fd75f47a.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d1:f7:d5:d3:eb:ca:ac:9f:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=4e031593-a83b-4ecc-ad15-e8fecf718ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:95:59:00:53:22:20:af:e5:ad:87:f5:7d: 75:bf:bf:7c:e2:f6:2e:68:40:98:08:2d:fc:33:f4: 0c:e6:59:47:5b:e9:68:8a:ab:44:bf:73:13:1d:76: e4:2a:38:10:aa:71:89:c3:31:87:04:08:ac:3a:88: 52:a0:67:3c:8d:f7:9e:50:90:93:44:d6:51:13:af: 4d:3c:f9:08:24:1f:e1:d1:39:d9:4f:ba:bf:a6:04: e0:16:8d:cf:13:49:6a:1d:69:81:ec:70:06:61:7e: f5:b7:55:c9:ca:0e:ed:bd:d1:6c:7f:27:28:01:13: 5a:0d:cf:13:4f:db:9a:ba:03:b0:b2:7e:a0:d9:9a: 3d:5e:a4:5e:9d:17:e3:18:d8:d1:e9:63:c2:13:74: 47:ef:ab:b9:d5:24:63:6b:b8:87:50:ce:9b:97:f0: de:9a:f2:b2:3f:42:55:62:72:b7:aa:18:56:b5:2c: de:e5:ea:b9:26:34:ad:bf:82:87:a7:af:63:fc:a6: a7:82:50:16:fc:0d:a0:9d:8b:34:fc:6c:53:9c:ea: 54:2a:c8:e1:59:9c:fa:6b:ab:31:b9:49:c6:3c:3d: 43:f7:fc:e6:5e:55:ca:9c:a3:ee:bf:f1:7b:f6:e8: 03:a7:df:8b:56:6e:41:88:92:e2:d1:51:b1:dc:7f: e3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E8:EB:EA:A5:25:F1:B9:77:52:9D:43:F7:77:2B:3F:A9:36:B3:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e2c572f2-ba28-3d7b-9553-0b75fd75f47a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:8d:86:a9:31:4f:f3:40:b2:e3:73:ec:77:9c:21:51:25:00: a2:b2:d8:f7:d0:e8:de:12:ff:9e:89:17:1b:99:21:e2:65:53: b9:e8:76:99:09:0c:6a:ce:c9:9c:fe:db:03:3d:51:43:e7:df: d5:09:2c:77:b8:41:88:fa:71:1f:86:41:f7:1e:22:68:25:05: 6f:e5:16:63:ea:4d:30:44:e9:c0:a7:60:36:8f:76:7a:b9:0c: f9:98:43:5b:57:52:51:bb:dc:5a:c8:04:0f:fb:d5:3f:ec:53: 19:f6:c3:5d:96:65:ef:e9:b8:f9:c1:d4:4b:bd:07:69:28:2e: f4:3b:8e:53:f6:0e:32:39:f8:ef:26:e7:37:f6:bc:b8:03:44: f0:41:d2:4f:26:b8:18:27:6d:68:0a:80:e8:52:b9:2c:4d:23: 53:24:48:ed:99:70:b3:78:4a:f8:ce:75:45:43:bd:f4:22:3a: a0:94:f3:aa:8c:84:d1:ad:55:0e:86:20:be:fc:3a:58:6c:3e: 44:99:18:86:e5:c0:3a:14:50:7a:a4:ab:15:04:8f:ba:f0:a0: 23:6e:ab:18:88:18:ed:51:36:9c:ab:a7:ad:9e:04:0b:51:27: 2a:c6:e8:1c:2f:90:d3:bc:0a:32:df:71:85:c6:59:d0:dd:7c: 92:0f:d6:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99H31dPryqyfT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NGUwMzE1OTMtYTgzYi00ZWNjLWFkMTUtZThmZWNmNzE4YWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwyVWQBTIiCv5a2H9X11v7984vYuaECYCC38 M/QM5llHW+loiqtEv3MTHXbkKjgQqnGJwzGHBAisOohSoGc8jfeeUJCTRNZRE69N PPkIJB/h0TnZT7q/pgTgFo3PE0lqHWmB7HAGYX71t1XJyg7tvdFsfycoARNaDc8T T9uaugOwsn6g2Zo9XqRenRfjGNjR6WPCE3RH76u51SRja7iHUM6bl/DemvKyP0JV YnK3qhhWtSze5eq5JjStv4KHp69j/KanglAW/A2gnYs0/GxTnOpUKsjhWZz6a6sx uUnGPD1D9/zmXlXKnKPuv/F79ugDp9+LVm5BiJLi0VGx3H/jKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzo6+qlJfG5d1KdQ/d3Kz+pNrNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZTJjNTcyZjItYmEyOC0z ZDdiLTk1NTMtMGI3NWZkNzVmNDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACNhqkxT/NAsuNz7HecIVElAKKy2PfQ6N4S/56JFxuZIeJlU7nodpkJ DGrOyZz+2wM9UUPn39UJLHe4QYj6cR+GQfceImglBW/lFmPqTTBE6cCnYDaPdnq5 DPmYQ1tXUlG73FrIBA/71T/sUxn2w12WZe/puPnB1Eu9B2koLvQ7jlP2DjI5+O8m 5zf2vLgDRPBB0k8muBgnbWgKgOhSuSxNI1MkSO2ZcLN4SvjOdUVDvfQiOqCU86qM hNGtVQ6GIL78OlhsPkSZGIblwDoUUHqkqxUEj7rwoCNuqxiIGO1RNpyrp62eBAtR JyrG6BwvkNO8CjLfcYXGWdDdfJIP1tA= -----END CERTIFICATE-----Generated at Sun Oct 11 14:51:45 2026 by rpki-client