$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/167b126e-59fd-37ab-9b05-869540ca4067.roa File: 167b126e-59fd-37ab-9b05-869540ca4067.roa (raw, json) Hash identifier: NtbXp/nj7GdjhoVPu5niECI3tlY7wfdBXsVf9StWOTs= Subject key identifier: 22:E2:00:30:3D:F7:75:DC:E0:4B:0E:58:D5:AF:C5:7E:C7:4B:1A:6C Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A7B51EBCFA59223FE000 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/167b126e-59fd-37ab-9b05-869540ca4067.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a7:b5:1e:bc:fa:59:22:3f:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=8a0fb19d-38ce-4ac5-b62b-84a0e14b1249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:21:3e:9f:6f:93:d8:07:1c:d1:d8:9c:2d: 08:8d:26:f0:27:1f:fa:e8:99:a1:27:f2:a4:cf:d0: 62:ab:2c:70:a7:59:1c:f7:58:b1:9d:3c:14:9e:14: 2e:04:7b:ff:12:bb:20:e9:6c:91:0c:91:2b:b1:ba: e3:a9:87:5a:a0:d3:af:a5:f6:5f:4d:f1:c7:0e:74: 75:e8:28:c2:48:27:64:94:2f:e3:d9:71:19:bf:d1: 00:f0:4c:c1:1f:54:d0:18:1f:da:69:8b:7f:fe:fd: ab:b4:94:55:77:0e:8b:eb:4a:31:94:8d:8e:36:af: d2:2f:90:d3:60:dd:07:31:cc:45:5e:c6:c7:35:3a: fe:12:fb:b7:93:84:70:85:f4:6b:c5:9e:33:df:86: aa:3e:8e:7f:31:c1:b7:4e:d8:2e:24:c3:24:15:43: 1e:f7:d0:15:97:5f:65:40:27:d1:b5:ca:e2:34:62: 2b:ec:1c:63:48:b1:e3:b7:a7:fe:25:27:13:5b:a4: a1:73:07:c1:75:72:4f:df:37:f5:93:6e:ea:01:7e: c4:21:19:4e:d8:5c:61:2f:d2:b9:d7:7f:88:f0:7a: 68:22:a4:b1:87:2e:bd:36:9f:7d:c9:d2:45:a4:e1: 9f:65:f3:4f:b3:d7:37:c3:75:96:fd:8f:e5:76:5b: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E2:00:30:3D:F7:75:DC:E0:4B:0E:58:D5:AF:C5:7E:C7:4B:1A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/167b126e-59fd-37ab-9b05-869540ca4067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:72:d1:54:fb:cc:6c:d1:1b:f2:f8:c0:5c:8a:0e:66:88:3b: 72:8d:a6:39:1e:ed:04:98:3c:9a:c2:04:20:09:ea:f9:1f:20: fd:db:a4:a5:f7:be:83:3c:04:79:e0:ae:52:a0:82:f2:8e:c0: 5d:fe:59:1b:9c:40:70:af:6d:80:94:ea:4e:99:56:d1:2c:b5: 9a:5e:4f:f0:35:b6:78:2b:c6:fb:3b:db:2a:44:7a:20:c5:31: 93:7b:32:22:9a:37:c5:9e:bc:8a:c9:0b:3e:f9:70:e2:38:6d: 49:69:5c:fe:35:39:c3:2d:e3:18:cf:fb:8c:50:3d:60:c4:f9: 87:1b:09:3a:9b:28:d5:e1:00:30:69:c4:9d:0c:f2:05:e2:29: 30:33:35:48:0e:72:7c:38:b5:2e:38:64:72:d4:d4:c7:b9:50: 7b:ca:2c:76:72:b4:9e:ce:f1:bb:f8:3e:34:4a:03:8c:62:c1: 60:7f:a3:82:de:5f:6a:eb:e8:c9:5f:43:2e:ea:23:94:f2:0b: 88:27:c0:0c:73:96:94:a2:29:25:5e:fe:cf:dc:ff:71:c3:6c: 58:0f:32:17:b3:d7:9f:31:c0:5f:b5:78:6a:fb:80:4e:78:ca: 1d:7e:76:99:c0:ee:7d:02:a4:bc:5d:e4:8b:70:d5:1a:97:16: 52:95:3e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96e1Hrz6WSI/4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OGEwZmIxOWQtMzhjZS00YWM1LWI2MmItODRhMGUxNGIxMjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLIhPp9vk9gHHNHYnC0IjSbwJx/66JmhJ/Kk z9Biqyxwp1kc91ixnTwUnhQuBHv/Ersg6WyRDJErsbrjqYdaoNOvpfZfTfHHDnR1 6CjCSCdklC/j2XEZv9EA8EzBH1TQGB/aaYt//v2rtJRVdw6L60oxlI2ONq/SL5DT YN0HMcxFXsbHNTr+Evu3k4RwhfRrxZ4z34aqPo5/McG3TtguJMMkFUMe99AVl19l QCfRtcriNGIr7BxjSLHjt6f+JScTW6ShcwfBdXJP3zf1k27qAX7EIRlO2FxhL9K5 13+I8HpoIqSxhy69Np99ydJFpOGfZfNPs9c3w3WW/Y/ldluApQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLiADA993Xc4EsOWNWvxX7HSxpsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMTY3YjEyNmUtNTlmZC0z N2FiLTliMDUtODY5NTQwY2E0MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFy0VT7zGzRG/L4wFyKDmaIO3KNpjke7QSYPJrCBCAJ6vkfIP3bpKX3 voM8BHngrlKggvKOwF3+WRucQHCvbYCU6k6ZVtEstZpeT/A1tngrxvs72ypEeiDF MZN7MiKaN8WevIrJCz75cOI4bUlpXP41OcMt4xjP+4xQPWDE+YcbCTqbKNXhADBp xJ0M8gXiKTAzNUgOcnw4tS44ZHLU1Me5UHvKLHZytJ7O8bv4PjRKA4xiwWB/o4Le X2rr6MlfQy7qI5TyC4gnwAxzlpSiKSVe/s/c/3HDbFgPMhez158xwF+1eGr7gE54 yh1+dpnA7n0CpLxd5Itw1RqXFlKVPk0= -----END CERTIFICATE-----Generated at Sat Oct 10 15:50:25 2026 by rpki-client