$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fc0adb68-765d-3a3a-969a-b290502baa77.roa File: fc0adb68-765d-3a3a-969a-b290502baa77.roa (raw, json) Hash identifier: CcRmvgyuqgtiBqhue0JGZiQ33Y9OCyPlpxjyl2XATW0= Subject key identifier: 27:60:A5:D2:20:35:25:EB:16:8A:72:48:87:FE:C2:2B:7D:0A:36:18 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F1897C14F898A2698FA894580 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fc0adb68-765d-3a3a-969a-b290502baa77.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:c1:4f:89:8a:26:98:fa:89:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=3cbc7018-31a2-4f6a-a85d-146ce3309263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:7c:ad:db:10:d0:f9:39:38:f8:da:a5:03: 18:30:28:77:65:58:60:c1:45:a9:a9:51:83:41:70: 41:61:d8:d5:88:d9:a6:45:16:f2:d1:c5:bc:80:00: 22:88:cc:3e:f6:72:18:a4:da:85:63:88:a1:a3:08: 4b:5f:30:e0:f1:bc:fa:cd:97:61:a5:33:90:c0:ef: c7:43:d6:13:41:df:ac:9e:07:43:b8:ab:ff:ff:05: 28:77:81:4b:2a:f3:ff:9c:84:32:c9:d9:77:f2:74: 7d:e0:dc:b4:10:88:a7:e2:68:57:b8:07:01:58:7e: be:ed:93:ed:15:d4:15:61:f6:9c:74:ed:45:3f:6d: a1:4f:71:2c:9d:c9:10:f0:bb:2d:b7:a1:6c:19:ee: 29:90:80:6e:cd:fe:7f:77:2b:67:e1:08:80:70:b0: 33:3e:05:a9:71:f1:d7:39:ff:a4:c7:d4:74:a6:48: 22:33:0d:17:2f:40:f9:37:d9:4d:9a:62:ae:7c:83: 19:9b:86:6f:eb:bc:a9:a1:8c:00:c4:fb:99:e3:6f: 98:27:39:e4:a7:44:dc:19:25:ec:3d:b9:eb:df:45: 58:36:b6:9e:1d:55:1d:5c:bb:33:2a:7b:84:9a:1c: cf:b5:60:dd:9c:d6:80:b8:53:e6:bc:07:a7:9e:4b: c0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:60:A5:D2:20:35:25:EB:16:8A:72:48:87:FE:C2:2B:7D:0A:36:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fc0adb68-765d-3a3a-969a-b290502baa77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:5e:a1:1a:a2:e7:80:86:8a:bc:4a:9a:bc:da:21:f4:4d:bd: 17:0f:14:7a:c8:e1:49:06:ef:c5:7d:d6:55:d3:83:de:01:2e: 76:c9:e7:7c:db:cf:42:58:9c:ab:cc:53:7c:83:47:68:0b:58: 45:bf:6a:1a:46:c3:41:dc:44:14:45:f9:3e:b8:b8:a9:81:1b: 1e:71:a0:ba:d7:2a:5e:a2:cb:aa:9a:f9:31:8e:04:38:c1:76: df:9a:dd:93:69:b9:94:d7:72:05:fd:c0:1d:fa:59:55:02:0e: ab:38:b7:ae:57:54:53:aa:f3:68:aa:b0:80:fc:d3:7b:3b:fc: ad:e2:6f:fe:3e:50:49:01:73:31:ef:05:d2:0f:a0:4a:99:ba: 22:7e:28:46:9c:07:f4:b7:98:4b:9e:4d:ec:86:11:65:0c:20: 89:5b:ad:a6:3a:0d:37:06:0d:dc:7c:ce:09:1a:19:c8:87:ca: 81:a1:bd:20:2f:87:e6:ee:c2:be:f1:16:52:b9:3d:62:e3:1c: d4:77:f2:95:76:18:f8:8a:c2:f9:af:98:24:39:bd:03:f7:37: 64:92:16:21:70:15:d0:7a:f1:53:ce:cc:06:f3:00:11:52:b1: b0:77:e2:2d:91:5d:89:f5:a8:a2:86:c4:cd:12:6e:0b:38:2d: 53:da:85:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl8FPiYommPqJRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk M2NiYzcwMTgtMzFhMi00ZjZhLWE4NWQtMTQ2Y2UzMzA5MjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZd8rdsQ0Pk5OPjapQMYMCh3ZVhgwUWpqVGD QXBBYdjViNmmRRby0cW8gAAiiMw+9nIYpNqFY4ihowhLXzDg8bz6zZdhpTOQwO/H Q9YTQd+sngdDuKv//wUod4FLKvP/nIQyydl38nR94Ny0EIin4mhXuAcBWH6+7ZPt FdQVYfacdO1FP22hT3EsnckQ8Lstt6FsGe4pkIBuzf5/dytn4QiAcLAzPgWpcfHX Of+kx9R0pkgiMw0XL0D5N9lNmmKufIMZm4Zv67ypoYwAxPuZ42+YJznkp0TcGSXs Pbnr30VYNraeHVUdXLszKnuEmhzPtWDdnNaAuFPmvAennkvAxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdgpdIgNSXrFopySIf+wit9CjYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZmMwYWRiNjgtNzY1ZC0z YTNhLTk2OWEtYjI5MDUwMmJhYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNeoRqi54CGirxKmrzaIfRNvRcPFHrI4UkG78V91lXTg94BLnbJ53zb z0JYnKvMU3yDR2gLWEW/ahpGw0HcRBRF+T64uKmBGx5xoLrXKl6iy6qa+TGOBDjB dt+a3ZNpuZTXcgX9wB36WVUCDqs4t65XVFOq82iqsID803s7/K3ib/4+UEkBczHv BdIPoEqZuiJ+KEacB/S3mEueTeyGEWUMIIlbraY6DTcGDdx8zgkaGciHyoGhvSAv h+buwr7xFlK5PWLjHNR38pV2GPiKwvmvmCQ5vQP3N2SSFiFwFdB68VPOzAbzABFS sbB34i2RXYn1qKKGxM0Sbgs4LVPahdA= -----END CERTIFICATE-----Generated at Sun Sep 20 16:05:37 2026 by rpki-client