$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/24811dae-1ce6-3dbd-845b-f79aafe06a39.roa File: 24811dae-1ce6-3dbd-845b-f79aafe06a39.roa (raw, json) Hash identifier: 7KYIVH+Y3/tcun64luib9dYegGXBf7x9+g8qqZ8S3gA= Subject key identifier: BB:07:F6:E8:2A:F6:6A:9E:F0:B2:9D:FC:66:5D:45:8C:14:D4:08:C7 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EFCACBD55156F719999791800 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/24811dae-1ce6-3dbd-845b-f79aafe06a39.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 20473 IP address blocks: 64.154.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:bd:55:15:6f:71:99:99:79:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=165da14b-6078-42fd-9615-328037005bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:c8:84:04:d7:bc:bf:4d:2c:73:db:8d:34: 67:15:f7:f2:d9:19:4f:4d:54:31:41:d3:b0:71:84: 08:15:80:d2:f0:30:4c:05:6a:0e:37:78:e7:b4:a9: 80:14:82:92:b3:6e:ab:4f:ba:16:e6:e7:e6:f9:26: 09:11:7a:03:40:8b:d8:ca:8f:38:3c:52:7f:0b:ed: dd:36:8b:c3:76:c7:6d:39:5d:6a:c4:d1:e6:02:ca: dc:5a:9a:3d:33:8d:3c:e1:1b:79:17:b2:6e:ee:57: 7d:e9:81:43:da:82:9f:a3:a8:43:a2:1a:46:02:ac: 51:21:23:3b:ef:03:33:03:f4:80:69:03:83:d0:b3: 0d:c5:66:08:79:e1:92:78:8d:60:79:56:c1:91:2a: 8c:91:dd:ce:ef:8d:2f:af:79:a2:4b:f5:57:41:dc: 7b:fd:39:20:e5:44:53:5d:e2:b9:07:75:55:9e:73: 56:e3:e4:a8:a9:eb:9b:5f:f8:28:12:96:35:9c:64: 40:c4:7a:ce:a4:c1:cf:73:75:0d:53:73:f0:51:07: 34:94:81:27:32:4c:30:ad:3c:74:6f:a4:89:2a:7d: 94:4b:0c:b9:fc:3d:7b:6e:bc:e0:b4:eb:c1:fb:b4: 33:7a:45:06:45:28:1d:21:21:09:45:07:00:cb:d6: 30:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:07:F6:E8:2A:F6:6A:9E:F0:B2:9D:FC:66:5D:45:8C:14:D4:08:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/24811dae-1ce6-3dbd-845b-f79aafe06a39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.154.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:9f:c8:ac:af:da:3b:13:10:63:e8:fb:5b:b1:66:26:46:6c: b9:09:62:57:95:9e:23:c3:2e:81:cb:41:2b:37:ab:24:70:87: d5:94:7e:83:c0:f4:fe:20:9a:bf:ad:57:fd:53:d5:4d:76:24: bc:62:0d:db:de:b7:1d:61:d9:ee:5a:27:d1:d5:63:25:a4:c4: 16:a8:17:a1:3a:d5:17:44:b1:1a:96:ab:e4:77:8b:9c:49:56: fb:f1:cc:55:24:1f:78:71:a1:45:9d:57:12:c1:ac:7c:b9:e7: 83:35:5a:15:8c:cb:1c:37:06:65:16:46:50:75:03:7f:d0:3a: b2:a3:2c:5c:04:f7:5b:a6:0c:4d:d0:83:54:e4:da:53:8b:18: 6c:74:b4:5c:af:17:6c:3e:c7:d1:ea:5e:f1:db:63:a9:33:27: 18:13:9a:69:bd:5a:bc:79:da:b5:c0:a4:19:f7:93:6e:98:6c: c6:e6:6d:ac:02:b8:e0:00:8e:19:17:71:ea:a2:73:00:af:9e: 23:f9:17:82:80:0c:d6:95:c7:44:7b:03:5f:93:0a:8d:51:3c: b9:0a:b1:92:07:a2:65:a2:c2:30:97:f1:d8:f3:f9:f6:f6:39: 3b:96:73:dc:50:46:a4:77:49:61:24:c7:23:3a:04:13:44:1a: 7f:89:bc:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rL1VFW9xmZl5GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MTY1ZGExNGItNjA3OC00MmZkLTk2MTUtMzI4MDM3MDA1YmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznvIhATXvL9NLHPbjTRnFffy2RlPTVQxQdOw cYQIFYDS8DBMBWoON3jntKmAFIKSs26rT7oW5ufm+SYJEXoDQIvYyo84PFJ/C+3d NovDdsdtOV1qxNHmAsrcWpo9M4084Rt5F7Ju7ld96YFD2oKfo6hDohpGAqxRISM7 7wMzA/SAaQOD0LMNxWYIeeGSeI1geVbBkSqMkd3O740vr3miS/VXQdx7/Tkg5URT XeK5B3VVnnNW4+SoqeubX/goEpY1nGRAxHrOpMHPc3UNU3PwUQc0lIEnMkwwrTx0 b6SJKn2USwy5/D17brzgtOvB+7QzekUGRSgdISEJRQcAy9YwiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsH9ugq9mqe8LKd/GZdRYwU1AjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMjQ4MTFkYWUtMWNlNi0z ZGJkLTg0NWItZjc5YWFmZTA2YTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJomMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2fyKyv2jsTEGPo+1uxZiZGbLkJYleVniPDLoHLQSs3qyRwh9WUfoPA 9P4gmr+tV/1T1U12JLxiDdvetx1h2e5aJ9HVYyWkxBaoF6E61RdEsRqWq+R3i5xJ VvvxzFUkH3hxoUWdVxLBrHy554M1WhWMyxw3BmUWRlB1A3/QOrKjLFwE91umDE3Q g1Tk2lOLGGx0tFyvF2w+x9HqXvHbY6kzJxgTmmm9Wrx52rXApBn3k26YbMbmbawC uOAAjhkXceqicwCvniP5F4KADNaVx0R7A1+TCo1RPLkKsZIHomWiwjCX8djz+fb2 OTuWc9xQRqR3SWEkxyM6BBNEGn+JvAQ= -----END CERTIFICATE-----Generated at Sun Sep 20 04:41:38 2026 by rpki-client