$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f0a2230e-71ff-35ca-9cd1-969bc18a2220.roa File: f0a2230e-71ff-35ca-9cd1-969bc18a2220.roa (raw, json) Hash identifier: MAHOvZIhBPRs2qSXXZnDNq/HBo9cxVPx7P4cCBKS9hY= Subject key identifier: 76:42:17:09:A0:40:E7:14:8C:D9:BF:42:4B:F5:0E:EB:F3:D2:F9:80 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D0673C641F3CADFA7680 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f0a2230e-71ff-35ca-9cd1-969bc18a2220.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d0:67:3c:64:1f:3c:ad:fa:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=1a1eae6b-d778-4ac3-9ee2-0cd0757919d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9f:66:95:62:a4:ac:55:db:e1:de:2f:f1:80: f7:7e:be:a7:46:90:2c:8a:77:37:0f:46:3e:48:15: da:d7:ed:2b:32:4d:b8:16:93:32:9e:a0:ca:3b:e4: 78:43:47:dc:0d:9c:82:58:00:61:0e:cb:c3:a3:84: 5f:5f:5a:93:86:d4:2b:25:af:68:a1:f0:32:44:40: 37:2f:57:4a:57:e9:db:17:88:ce:52:a6:14:42:bf: 66:85:b5:76:f6:dc:02:36:8d:e6:ce:c9:19:a9:cb: 0b:c9:75:c6:f1:71:94:a8:62:34:ef:76:56:4f:9c: 49:cc:33:10:ac:aa:c1:2f:f8:00:a8:2d:9d:68:06: 40:f1:a8:cd:dc:10:dc:1b:27:f5:3b:fb:36:99:ec: 3d:ba:97:6c:39:26:5e:87:6d:66:53:95:37:54:49: ec:40:e9:f0:73:f4:1e:d0:b4:d3:3e:4e:fb:3b:80: f9:61:19:93:22:7b:01:d6:5f:e7:15:e4:26:35:2d: ce:a0:4b:69:a8:aa:66:87:5e:e6:dd:9c:28:af:db: c0:28:6a:72:b2:5a:e7:9d:db:3d:68:f4:0e:6e:82: e6:40:f9:bd:3f:8e:50:15:32:d9:08:ff:3d:9d:8b: 85:79:1c:5f:94:19:47:bc:98:7a:74:63:06:69:31: 81:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:42:17:09:A0:40:E7:14:8C:D9:BF:42:4B:F5:0E:EB:F3:D2:F9:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f0a2230e-71ff-35ca-9cd1-969bc18a2220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:80:f2:b4:b0:46:55:2c:d1:40:74:3b:d7:90:1b:9b:b6:40: c4:76:1d:03:7a:4c:93:4d:ea:07:76:a2:29:3f:16:da:bf:2c: 07:12:05:a4:3b:db:17:c0:92:33:b2:47:df:4c:7d:ea:cf:84: 65:7f:a6:8a:28:0c:a0:f1:ed:3a:36:b4:29:66:44:f6:eb:5d: ab:c0:56:94:8c:86:b0:71:e4:2e:80:6f:21:21:2d:1c:69:47: d2:01:5e:60:29:e2:af:a1:25:cc:4c:f9:25:2b:6c:22:3d:14: f7:bc:49:09:7c:33:df:ff:51:04:8d:1f:8a:75:7a:91:98:dc: e4:c0:b0:90:06:89:d6:c2:3e:96:84:c9:de:df:45:63:76:db: 91:17:99:ae:38:4d:84:70:d9:c4:c5:86:ae:88:3b:04:44:ab: 2b:83:bf:16:b5:df:c6:92:0f:67:32:39:69:51:6a:3f:2e:d8: d2:5b:07:b1:9f:45:56:d5:a0:8b:9f:96:ed:6d:28:3a:dc:60: 53:14:03:4a:91:22:b9:3f:df:7c:a0:d2:fd:0e:8c:e9:e6:43: 5b:59:d9:a7:c5:1e:13:ed:b3:10:9b:a5:45:6c:58:43:09:d3: 0e:b2:e3:e1:2b:b3:77:50:89:ca:25:a9:ad:70:b8:7a:4f:62: 01:c9:57:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99BnPGQfPK36doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MWExZWFlNmItZDc3OC00YWMzLTllZTItMGNkMDc1NzkxOWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ9mlWKkrFXb4d4v8YD3fr6nRpAsinc3D0Y+ SBXa1+0rMk24FpMynqDKO+R4Q0fcDZyCWABhDsvDo4RfX1qThtQrJa9oofAyREA3 L1dKV+nbF4jOUqYUQr9mhbV29twCNo3mzskZqcsLyXXG8XGUqGI073ZWT5xJzDMQ rKrBL/gAqC2daAZA8ajN3BDcGyf1O/s2mew9updsOSZeh21mU5U3VEnsQOnwc/Qe 0LTTPk77O4D5YRmTInsB1l/nFeQmNS3OoEtpqKpmh17m3Zwor9vAKGpyslrnnds9 aPQOboLmQPm9P45QFTLZCP89nYuFeRxflBlHvJh6dGMGaTGBQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZCFwmgQOcUjNm/Qkv1Duvz0vmAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZjBhMjIzMGUtNzFmZi0z NWNhLTljZDEtOTY5YmMxOGEyMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWA8rSwRlUs0UB0O9eQG5u2QMR2HQN6TJNN6gd2oik/Ftq/LAcSBaQ7 2xfAkjOyR99MferPhGV/poooDKDx7To2tClmRPbrXavAVpSMhrBx5C6AbyEhLRxp R9IBXmAp4q+hJcxM+SUrbCI9FPe8SQl8M9//UQSNH4p1epGY3OTAsJAGidbCPpaE yd7fRWN225EXma44TYRw2cTFhq6IOwREqyuDvxa138aSD2cyOWlRaj8u2NJbB7Gf RVbVoIuflu1tKDrcYFMUA0qRIrk/33yg0v0OjOnmQ1tZ2afFHhPtsxCbpUVsWEMJ 0w6y4+Ers3dQicolqa1wuHpPYgHJVyg= -----END CERTIFICATE-----Generated at Sun Oct 11 17:44:37 2026 by rpki-client