$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2935d3a5-a158-3f2b-8f91-8ecb38fde544.roa File: 2935d3a5-a158-3f2b-8f91-8ecb38fde544.roa (raw, json) Hash identifier: CoSM2SIMsoenCjFvJ6SGJxza0BqPa3l/6onXGtQ9qXY= Subject key identifier: 6F:71:19:9B:63:AF:21:7B:D8:83:D3:D4:4A:27:1F:3B:3C:8C:AF:E5 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B12BC22D143962944AF0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2935d3a5-a158-3f2b-8f91-8ecb38fde544.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 64.16.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b1:2b:c2:2d:14:39:62:94:4a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=16ab72f3-a672-4229-b1de-dc9ffcd43b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bd:e5:bb:51:da:3b:0d:2b:cf:da:2d:56:3f: 42:38:86:1e:f5:92:36:16:e3:36:b8:a2:50:e0:9c: 43:63:4e:c4:03:32:ef:da:73:ec:45:f4:c5:18:af: 34:17:aa:a4:c2:6c:a1:06:ab:9b:84:1e:bc:5c:f4: 9a:70:57:b6:bc:8f:76:92:9a:4f:14:fb:63:db:73: ab:00:e6:ac:eb:56:3a:5e:81:27:cd:4f:4f:b2:db: 80:34:6e:34:40:9e:37:cc:44:60:2c:da:ff:9c:b7: 28:5b:5e:2e:19:9d:e6:48:65:ad:85:2d:85:66:78: 03:94:79:09:f8:0b:94:7c:4a:14:bb:bb:f3:ae:89: 20:a3:d8:45:f3:b4:38:61:d6:06:00:f1:c5:e0:89: 25:36:56:eb:f0:71:4d:58:00:fc:02:07:5b:0e:a3: 27:ed:41:27:29:9b:6f:0c:8e:a5:d0:cd:36:65:d6: bb:36:26:8a:8c:50:49:76:ea:42:d1:17:0d:5d:f1: c5:02:ad:e0:39:a7:7a:cd:00:d4:85:ee:38:ae:64: 11:5c:bd:95:c8:d4:c0:e7:fc:1a:29:ac:63:bb:ff: 5a:20:6f:93:74:91:a8:8f:00:ef:a2:5c:41:0f:b8: f7:d3:e5:3f:dd:92:4e:04:56:93:5f:c3:15:b5:31: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:71:19:9B:63:AF:21:7B:D8:83:D3:D4:4A:27:1F:3B:3C:8C:AF:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2935d3a5-a158-3f2b-8f91-8ecb38fde544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:59:fc:87:22:66:d5:e0:88:0a:82:b1:a8:93:82:22:48:85: d1:79:8b:42:1b:ba:2a:d8:90:e1:51:c7:76:52:31:eb:8a:d3: 8b:e9:1a:b0:af:3a:f3:fc:67:55:37:a2:10:7b:6e:a3:47:d8: 8a:4e:b7:81:18:52:84:6a:0f:48:87:e3:27:a8:97:31:64:a5: 95:6e:c4:b4:be:8f:42:c4:09:69:bf:03:2a:0c:3c:63:89:93: 6d:86:f6:f0:d8:5f:d0:a7:c2:c3:fd:cd:c4:32:e7:fb:0b:8e: c9:be:8e:9b:ab:3a:7f:73:6c:8c:84:20:6f:30:26:3d:e9:46: bb:a4:80:d2:50:40:4a:78:3a:90:a1:16:8c:74:c8:8c:5d:2f: cf:70:9b:bd:fc:fd:ca:e6:75:29:0a:6e:20:7d:27:75:5f:12: 5c:f6:7e:33:0f:8d:a4:f6:a8:ff:e3:34:64:0a:10:49:28:85: 85:e7:62:63:06:eb:73:0f:1f:ce:cc:5d:c4:b8:fb:56:b8:05: 65:7d:4e:a5:44:c7:37:b4:a5:cc:f5:03:88:bc:fc:d3:a8:5f: fc:56:21:ce:6c:94:18:c4:b8:b7:8e:42:51:79:55:99:93:bd: 58:d9:81:b0:e4:bf:af:fe:d6:6e:19:b2:69:2d:b0:39:22:60: 9b:2b:b6:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97Erwi0UOWKUSvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MTZhYjcyZjMtYTY3Mi00MjI5LWIxZGUtZGM5ZmZjZDQzYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr3lu1HaOw0rz9otVj9COIYe9ZI2FuM2uKJQ 4JxDY07EAzLv2nPsRfTFGK80F6qkwmyhBqubhB68XPSacFe2vI92kppPFPtj23Or AOas61Y6XoEnzU9PstuANG40QJ43zERgLNr/nLcoW14uGZ3mSGWthS2FZngDlHkJ +AuUfEoUu7vzrokgo9hF87Q4YdYGAPHF4IklNlbr8HFNWAD8AgdbDqMn7UEnKZtv DI6l0M02Zda7NiaKjFBJdupC0RcNXfHFAq3gOad6zQDUhe44rmQRXL2VyNTA5/wa Kaxju/9aIG+TdJGojwDvolxBD7j30+U/3ZJOBFaTX8MVtTGcRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9xGZtjryF72IPT1EonHzs8jK/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMjkzNWQzYTUtYTE1OC0z ZjJiLThmOTEtOGVjYjM4ZmRlNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdZ/IciZtXgiAqCsaiTgiJIhdF5i0IbuirYkOFRx3ZSMeuK04vpGrCv OvP8Z1U3ohB7bqNH2IpOt4EYUoRqD0iH4yeolzFkpZVuxLS+j0LECWm/AyoMPGOJ k22G9vDYX9CnwsP9zcQy5/sLjsm+jpurOn9zbIyEIG8wJj3pRrukgNJQQEp4OpCh Fox0yIxdL89wm738/crmdSkKbiB9J3VfElz2fjMPjaT2qP/jNGQKEEkohYXnYmMG 63MPH87MXcS4+1a4BWV9TqVExze0pcz1A4i8/NOoX/xWIc5slBjEuLeOQlF5VZmT vVjZgbDkv6/+1m4ZsmktsDkiYJsrtvA= -----END CERTIFICATE-----Generated at Sat Sep 26 04:59:29 2026 by rpki-client