$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f17fd0bd-bf17-3891-a3fd-15350b1c6a1e.roa File: f17fd0bd-bf17-3891-a3fd-15350b1c6a1e.roa (raw, json) Hash identifier: uBRiz2QH4h1uHbHuJlE5bYV9OAq6jI9ru5LIdVDoMf8= Subject key identifier: 01:7A:9B:62:85:6C:00:ED:B7:55:A3:A2:0E:7F:C9:FC:92:94:4D:4F Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D11E74C0C6809BC8A400 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f17fd0bd-bf17-3891-a3fd-15350b1c6a1e.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 64.16.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d1:1e:74:c0:c6:80:9b:c8:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=1be42824-3de8-4ce5-ad07-5e1043121d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:fb:75:83:de:57:f6:d1:84:61:78:b0:dd: fb:83:e8:ad:5c:50:3d:06:67:bc:82:0e:3a:58:18: 0b:1e:52:b9:09:32:f5:10:f7:97:9e:b5:1d:88:ca: ac:cc:a7:e3:f5:d6:83:cd:33:fc:42:95:60:ce:ec: c5:ce:e7:13:b3:cd:0d:9e:a0:f6:b4:53:41:76:3f: 51:c2:41:6f:21:b3:47:cc:6d:dc:c2:83:e0:5c:0d: c1:45:95:fe:35:3d:d8:16:98:fa:17:db:cb:51:cd: 62:29:18:79:87:42:4c:8e:04:39:c8:ae:e2:50:df: 7b:08:c0:d6:e1:80:d8:21:45:ca:47:d2:1a:85:13: 0d:04:6c:90:83:ee:58:40:f6:72:10:05:75:99:60: b4:bb:da:26:6a:33:16:f8:f9:6d:d7:d5:11:53:40: 06:e3:b3:da:ac:d4:54:eb:46:92:97:4e:e1:8e:7f: 29:0f:58:00:2f:e6:7c:97:59:3b:1d:17:67:7f:a1: 51:12:00:df:57:6e:eb:d5:e8:65:ac:ef:56:56:d9: 48:c1:e9:bf:c7:d8:36:53:4b:f8:9b:b1:0c:c4:b3: 12:77:ce:31:42:71:3c:41:f1:0b:cb:7b:32:81:6a: cb:c0:d2:55:0c:b4:52:30:69:37:94:28:91:5c:8a: bc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7A:9B:62:85:6C:00:ED:B7:55:A3:A2:0E:7F:C9:FC:92:94:4D:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f17fd0bd-bf17-3891-a3fd-15350b1c6a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e8:0e:04:7d:4a:51:31:5f:c7:45:f1:0c:99:0e:a3:51:35: 0c:6d:28:80:b7:39:98:2c:d6:7f:ca:ac:60:8d:0c:a9:cc:c0: a8:ae:89:e9:19:d2:f6:4b:fd:b1:35:52:3a:29:ed:33:bd:f8: 5f:9d:1d:4b:de:83:f0:1a:12:a3:d5:68:49:75:61:0a:98:ab: 3b:eb:ee:9c:3d:44:fb:dc:60:b8:7d:e5:07:18:27:af:ce:50: 51:5a:2e:d1:a8:69:98:de:e5:4a:f4:7c:e8:5f:47:6c:7a:83: 3f:f9:cb:5e:bc:40:7c:26:1e:80:e7:9c:95:c8:29:46:44:c4: b1:be:1f:39:19:07:f7:69:52:9c:cb:08:dd:e1:48:fb:89:c1: 4f:cd:7d:47:c2:6b:e1:bd:74:8f:f0:cb:18:cb:d2:fc:06:c6: 3f:60:44:99:11:64:48:b0:a5:0e:52:f2:2a:0e:01:40:ae:80: cd:96:d7:e8:0b:9f:06:c9:95:35:52:30:d4:27:15:9d:4d:3c: 6f:b9:96:67:ca:f5:60:5d:c9:42:7e:16:87:93:40:59:2c:8a: af:c4:ea:83:4c:22:cb:9f:ce:fd:38:07:64:41:0a:0b:d0:7f: e6:af:a1:fe:a2:66:52:25:e6:67:1a:e7:35:ab:8f:cd:cb:00: 73:cb:98:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99EedMDGgJvIpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MWJlNDI4MjQtM2RlOC00Y2U1LWFkMDctNWUxMDQzMTIxZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfL7dYPeV/bRhGF4sN37g+itXFA9Bme8gg46 WBgLHlK5CTL1EPeXnrUdiMqszKfj9daDzTP8QpVgzuzFzucTs80NnqD2tFNBdj9R wkFvIbNHzG3cwoPgXA3BRZX+NT3YFpj6F9vLUc1iKRh5h0JMjgQ5yK7iUN97CMDW 4YDYIUXKR9IahRMNBGyQg+5YQPZyEAV1mWC0u9omajMW+Plt19URU0AG47ParNRU 60aSl07hjn8pD1gAL+Z8l1k7HRdnf6FREgDfV27r1ehlrO9WVtlIwem/x9g2U0v4 m7EMxLMSd84xQnE8QfELy3sygWrLwNJVDLRSMGk3lCiRXIq8BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF6m2KFbADtt1Wjog5/yfySlE1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZjE3ZmQwYmQtYmYxNy0z ODkxLWEzZmQtMTUzNTBiMWM2YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/oDgR9SlExX8dF8QyZDqNRNQxtKIC3OZgs1n/KrGCNDKnMwKiuiekZ 0vZL/bE1Ujop7TO9+F+dHUveg/AaEqPVaEl1YQqYqzvr7pw9RPvcYLh95QcYJ6/O UFFaLtGoaZje5Ur0fOhfR2x6gz/5y168QHwmHoDnnJXIKUZExLG+HzkZB/dpUpzL CN3hSPuJwU/NfUfCa+G9dI/wyxjL0vwGxj9gRJkRZEiwpQ5S8ioOAUCugM2W1+gL nwbJlTVSMNQnFZ1NPG+5lmfK9WBdyUJ+FoeTQFksiq/E6oNMIsufzv04B2RBCgvQ f+avof6iZlIl5mca5zWrj83LAHPLmLY= -----END CERTIFICATE-----Generated at Sun Sep 20 19:16:46 2026 by rpki-client