$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ef34cb72-5ce5-3fe8-8d3f-58b5af53442e.roa File: ef34cb72-5ce5-3fe8-8d3f-58b5af53442e.roa (raw, json) Hash identifier: Ih5n0wBi3Mc+9X+9mzSUo63vKQxOeFVZCKvZP3zJuf8= Subject key identifier: 2E:48:4A:A0:96:30:19:B1:D9:0D:B1:8E:4E:8E:ED:FA:BD:EB:06:59 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A45B889AAA994CC5CE80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ef34cb72-5ce5-3fe8-8d3f-58b5af53442e.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a4:5b:88:9a:aa:99:4c:c5:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=97e59798-d138-40f4-869f-1a91130571f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:69:e1:78:c8:69:49:dc:fe:16:d2:da:17:b3: 0b:69:e3:db:a4:3c:11:65:0d:f1:96:0e:9c:f2:f8: 51:0a:e4:31:06:22:12:75:e5:24:a4:b1:24:bb:75: 22:60:f6:16:28:a6:2a:3e:0d:6a:cd:c5:b3:5a:90: 24:2d:e2:00:9e:58:a7:f8:ad:dd:09:01:8d:5c:b8: a9:40:09:70:2b:fc:93:67:1e:9e:f0:8c:fd:73:50: 2d:5e:47:b0:a6:2a:87:f6:5e:14:63:84:72:04:61: 31:c4:25:9f:1d:11:7a:fb:6b:b8:ac:ad:50:6e:72: e2:1f:cb:40:39:28:d1:c8:3c:b3:06:b4:53:e2:ae: 20:41:09:f3:9c:c0:33:74:bb:8b:56:4f:9e:c9:9a: 5c:7e:95:34:83:3e:1f:f4:74:ce:bd:2c:cc:22:d2: 3e:04:d5:74:79:49:61:3b:5b:d3:93:aa:ba:26:9d: 97:72:c6:92:73:ee:fd:1e:93:2d:70:f8:d0:a3:83: 88:3f:2c:66:4d:53:40:8b:a9:1c:67:93:80:d2:91: 23:f2:94:18:15:f4:45:fd:f3:03:7b:3d:50:4f:f9: 30:c9:74:06:57:73:d2:40:60:1f:d3:8a:e4:7f:69: dc:a4:d9:8f:6d:1e:da:4b:23:e1:bc:3e:8f:f6:d6: 33:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:48:4A:A0:96:30:19:B1:D9:0D:B1:8E:4E:8E:ED:FA:BD:EB:06:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ef34cb72-5ce5-3fe8-8d3f-58b5af53442e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:eb:0a:0e:a4:1b:91:40:23:89:25:2f:de:dd:84:a5:ae:76: b3:f8:c0:a0:17:1f:b4:b4:f9:ec:13:59:f8:32:a2:d8:48:b5: c6:26:e1:30:61:63:40:f7:67:ac:40:34:d2:ea:c0:11:7e:28: 41:49:a4:52:1b:c3:32:b1:12:ae:4c:ed:ec:f6:8d:4d:69:7f: 33:f6:d7:0b:8f:ba:c8:30:25:3e:de:92:4d:2e:db:eb:65:05: b9:e9:31:ff:85:4c:8e:7a:d7:1d:77:fe:08:50:18:af:8d:45: 80:28:86:32:95:9d:9d:b5:3d:80:82:14:e7:46:e8:fc:5e:df: 8c:41:fc:93:78:05:64:23:f4:b8:79:06:a6:39:02:c0:7b:e3: 0e:7d:43:a4:2f:45:e3:05:82:4a:fa:03:90:77:aa:a9:ef:09: 04:cd:a8:24:6a:e2:d4:0c:22:9b:12:98:89:17:4e:b3:d3:31: 59:e9:9a:06:e5:b3:51:1e:95:a6:57:b8:13:da:cc:11:e1:2f: 91:73:89:d6:e8:82:ac:4e:c2:5b:cb:75:b2:86:8b:3e:cb:d7: 4c:fb:b9:8f:b3:73:b3:05:fe:32:b7:34:1e:9b:5f:c0:84:85: f1:c8:e2:9b:b5:3a:38:33:c2:9c:c0:76:aa:7f:f5:22:32:a6: d4:e2:ac:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96RbiJqqmUzFzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OTdlNTk3OTgtZDEzOC00MGY0LTg2OWYtMWE5MTEzMDU3MWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWnheMhpSdz+FtLaF7MLaePbpDwRZQ3xlg6c 8vhRCuQxBiISdeUkpLEku3UiYPYWKKYqPg1qzcWzWpAkLeIAnlin+K3dCQGNXLip QAlwK/yTZx6e8Iz9c1AtXkewpiqH9l4UY4RyBGExxCWfHRF6+2u4rK1QbnLiH8tA OSjRyDyzBrRT4q4gQQnznMAzdLuLVk+eyZpcfpU0gz4f9HTOvSzMItI+BNV0eUlh O1vTk6q6Jp2XcsaSc+79HpMtcPjQo4OIPyxmTVNAi6kcZ5OA0pEj8pQYFfRF/fMD ez1QT/kwyXQGV3PSQGAf04rkf2ncpNmPbR7aSyPhvD6P9tYz5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5ISqCWMBmx2Q2xjk6O7fq96wZZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWYzNGNiNzItNWNlNS0z ZmU4LThkM2YtNThiNWFmNTM0NDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvrCg6kG5FAI4klL97dhKWudrP4wKAXH7S0+ewTWfgyothItcYm4TBh Y0D3Z6xANNLqwBF+KEFJpFIbwzKxEq5M7ez2jU1pfzP21wuPusgwJT7ekk0u2+tl BbnpMf+FTI561x13/ghQGK+NRYAohjKVnZ21PYCCFOdG6Pxe34xB/JN4BWQj9Lh5 BqY5AsB74w59Q6QvReMFgkr6A5B3qqnvCQTNqCRq4tQMIpsSmIkXTrPTMVnpmgbl s1EelaZXuBPazBHhL5FzidbogqxOwlvLdbKGiz7L10z7uY+zc7MF/jK3NB6bX8CE hfHI4pu1OjgzwpzAdqp/9SIyptTirEE= -----END CERTIFICATE-----Generated at Tue Sep 22 07:28:44 2026 by rpki-client