$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/edbfec74-02d6-309e-9e46-91a4f7e5a1ed.roa File: edbfec74-02d6-309e-9e46-91a4f7e5a1ed.roa (raw, json) Hash identifier: kfCUunbU7p8P+bWRAr8ox04csosOzQ1TH3hyzirhgkc= Subject key identifier: 13:96:15:06:19:86:71:E3:D4:18:AE:75:14:43:D9:B3:DD:C2:6D:3A Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D76B3AFBD54A3E77B280 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/edbfec74-02d6-309e-9e46-91a4f7e5a1ed.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d7:6b:3a:fb:d5:4a:3e:77:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=bc5a011c-fa53-416e-86a9-b19fbd09efe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:5f:c8:bb:8e:84:0a:4b:e6:af:62:f4:9e: b9:27:98:7d:7b:b3:48:b5:12:b4:40:e9:ee:5a:a1: 95:4e:68:08:fe:df:f0:07:81:74:8f:bd:4a:68:15: d0:0e:f1:0e:9c:7c:9b:ad:03:b6:f0:4f:bd:df:b7: e2:a9:cd:35:35:ae:d0:0d:3c:9d:28:32:cf:81:e0: ea:dd:02:89:33:ed:ae:c0:dd:70:6f:ca:7c:b9:2d: 16:27:a0:26:63:81:03:08:82:db:f7:59:07:7d:ca: 72:fd:15:12:0f:ad:43:eb:b9:9e:80:12:bc:97:e8: cf:c0:1d:06:99:8b:3f:d5:f4:95:fc:87:fe:d6:23: 4f:90:20:b7:0f:91:f1:fc:89:c9:80:4a:a4:56:d1: 57:22:b2:70:27:87:f8:40:8a:e2:49:a5:25:3b:c7: 9e:61:39:be:60:cd:50:9b:01:7a:7d:53:f6:4e:76: b6:94:43:b7:2f:1b:37:39:57:54:e8:f2:3d:9c:be: ef:36:75:3b:66:fc:8d:5c:61:ad:2d:1c:e5:55:0f: a4:7f:6e:e1:b5:04:7f:3d:02:54:3c:d6:d9:f7:63: ed:18:89:97:4a:40:c8:19:94:cb:d4:4e:7a:88:af: d1:41:4d:38:68:22:47:af:44:dd:33:ce:0f:e4:27: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:96:15:06:19:86:71:E3:D4:18:AE:75:14:43:D9:B3:DD:C2:6D:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/edbfec74-02d6-309e-9e46-91a4f7e5a1ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:14:f3:5a:19:1e:96:1e:0e:df:9d:b0:ee:2d:6a:73:70:bd: 50:81:90:c3:0e:62:19:60:7f:84:fa:07:98:ee:c2:ca:03:88: 8a:48:2c:c1:2f:11:b2:72:31:c5:e9:b1:f1:f4:1b:7c:73:4b: 50:0b:23:4a:c8:0b:2d:97:c2:7b:19:5c:bf:59:7c:10:bb:b5: 42:57:b1:12:b5:36:db:ba:48:89:9e:af:93:9d:50:99:09:84: 12:61:b9:42:56:5e:27:79:3b:7f:03:27:d0:67:d6:52:91:63: e0:d8:e9:4d:cd:81:35:3b:69:2d:a7:e5:4a:19:c5:01:84:3d: e2:ff:5b:84:93:04:28:a9:0e:c2:db:52:fc:a4:8e:6d:78:50: 93:f2:45:7a:a8:ef:3e:4c:eb:5c:64:c6:25:75:20:32:6e:c7: a2:e3:2c:84:e8:60:33:29:fd:3b:72:9e:41:20:c0:29:75:7d: c7:ae:36:da:f5:f5:8d:2c:fe:f1:99:f4:25:aa:43:fc:4b:75: f0:85:d3:cc:ae:13:86:8b:5d:32:4f:c5:74:6a:cc:06:aa:d6: 45:f8:c0:cf:98:65:5b:21:4c:27:91:b1:7f:b7:a5:93:54:f9: 43:f8:0d:94:5e:2f:7a:7c:27:ed:10:f1:58:76:85:9b:d8:52: ba:35:7a:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99drOvvVSj53soAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YmM1YTAxMWMtZmE1My00MTZlLTg2YTktYjE5ZmJkMDllZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0pfyLuOhApL5q9i9J65J5h9e7NItRK0QOnu WqGVTmgI/t/wB4F0j71KaBXQDvEOnHybrQO28E+937fiqc01Na7QDTydKDLPgeDq 3QKJM+2uwN1wb8p8uS0WJ6AmY4EDCILb91kHfcpy/RUSD61D67megBK8l+jPwB0G mYs/1fSV/If+1iNPkCC3D5Hx/InJgEqkVtFXIrJwJ4f4QIriSaUlO8eeYTm+YM1Q mwF6fVP2Tna2lEO3Lxs3OVdU6PI9nL7vNnU7ZvyNXGGtLRzlVQ+kf27htQR/PQJU PNbZ92PtGImXSkDIGZTL1E56iK/RQU04aCJHr0TdM84P5CdgkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOWFQYZhnHj1BiudRRD2bPdwm06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWRiZmVjNzQtMDJkNi0z MDllLTllNDYtOTFhNGY3ZTVhMWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsU81oZHpYeDt+dsO4tanNwvVCBkMMOYhlgf4T6B5juwsoDiIpILMEv EbJyMcXpsfH0G3xzS1ALI0rICy2XwnsZXL9ZfBC7tUJXsRK1Ntu6SImer5OdUJkJ hBJhuUJWXid5O38DJ9Bn1lKRY+DY6U3NgTU7aS2n5UoZxQGEPeL/W4STBCipDsLb Uvykjm14UJPyRXqo7z5M61xkxiV1IDJux6LjLIToYDMp/TtynkEgwCl1fceuNtr1 9Y0s/vGZ9CWqQ/xLdfCF08yuE4aLXTJPxXRqzAaq1kX4wM+YZVshTCeRsX+3pZNU +UP4DZReL3p8J+0Q8Vh2hZvYUro1eko= -----END CERTIFICATE-----Generated at Tue Sep 22 11:43:20 2026 by rpki-client