$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5a899af6-258c-3b81-bc82-4110f746a591.roa File: 5a899af6-258c-3b81-bc82-4110f746a591.roa (raw, json) Hash identifier: bc3QoFoVyP41r7pAB6Y7QSPhDxGpDRKWS/YUZ36TrL8= Subject key identifier: 19:2B:52:EB:E1:5F:A9:48:4D:1C:23:79:DF:AE:12:B0:12:2D:25:E3 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D2551A916F5D04D74200 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5a899af6-258c-3b81-bc82-4110f746a591.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d2:55:1a:91:6f:5d:04:d7:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=5419e777-368d-4c0f-99e3-d2dc29249f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:36:8c:ae:b2:38:ba:9d:4a:a4:82:ca:70:e1: 7d:8a:e0:1d:ac:e6:bb:33:82:04:19:32:3e:a6:ba: 9e:75:e7:16:89:36:df:c4:07:64:6e:13:a3:14:2b: eb:0c:23:16:5b:60:ea:02:64:9c:af:4a:41:29:2e: 85:c5:03:da:76:03:d0:15:2d:81:fe:93:6d:1c:ba: d9:06:0a:aa:0c:d4:dd:e2:4b:02:a1:73:87:2b:7f: 1d:3c:2f:51:6b:47:41:ce:4d:f0:ce:11:4f:05:e7: 4f:e6:47:b0:72:ab:99:28:02:c9:d2:21:5f:f6:42: 02:b2:87:55:33:66:ec:c9:90:ba:7c:dc:16:f4:49: 78:37:2b:e4:e8:cb:f9:5c:da:9a:76:d7:3d:b2:f3: 29:c9:c4:37:76:d8:3c:c7:5d:a5:f3:f6:70:ac:89: 1f:19:3f:5d:a8:1e:a9:0f:5c:55:d0:d0:9d:bf:32: 3e:d1:2f:b3:af:01:47:9e:d4:a3:6a:4f:61:f5:b6: 53:7b:4a:bb:b4:9d:24:29:64:e0:08:2c:b0:65:b3: 83:0b:37:d8:11:3a:54:12:d1:70:96:d8:cb:74:d6: 84:db:92:0e:ee:03:88:cd:fa:44:01:dd:1f:68:ac: b1:83:4f:f0:f6:59:ba:07:3a:4e:cb:e4:fc:b7:18: fc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2B:52:EB:E1:5F:A9:48:4D:1C:23:79:DF:AE:12:B0:12:2D:25:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5a899af6-258c-3b81-bc82-4110f746a591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:bd:9e:2d:75:c3:ef:30:dd:39:64:af:32:ab:38:1b:87:d1: 04:ef:50:15:2b:96:c9:87:50:39:17:ae:1e:ac:28:03:42:d5: 11:46:30:a1:2c:58:53:a8:4d:d7:c4:ef:c9:cd:62:6b:50:f0: b6:0a:e3:7f:a7:89:bf:5c:c8:e4:da:d4:72:50:ff:28:26:c8: 1f:2b:f1:b3:7e:ff:7f:d3:21:67:a7:ea:52:ff:5a:12:66:1c: b0:20:d1:04:3f:9f:c4:cb:52:f5:e8:2d:c9:1e:1c:3d:da:e0: e8:ee:a6:38:6a:f8:51:f9:b2:fb:53:99:4a:ad:af:8d:ba:ef: dd:25:62:e6:3b:6c:3f:df:47:dc:1e:33:8b:2a:72:30:12:fe: 38:06:8a:04:31:1a:5f:1d:0d:90:cc:b3:32:c1:f7:50:a4:3f: ec:36:ca:0e:00:9a:35:52:b6:28:10:0e:69:cc:7f:4c:ad:66: 94:58:a4:4b:f1:5b:5a:e2:7d:34:6c:73:e3:ea:b3:1f:d9:d4: 7e:91:66:c0:33:f3:4c:2d:b0:d4:fc:96:6a:3e:ed:9e:12:31: a6:ab:b3:b8:0e:2c:67:1e:17:e0:db:11:03:60:26:f7:eb:23: 18:f9:c0:a5:a9:14:d4:2e:e4:ab:d4:c7:cf:df:8f:cd:3e:1f: 27:b7:53:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99JVGpFvXQTXQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTQxOWU3NzctMzY4ZC00YzBmLTk5ZTMtZDJkYzI5MjQ5Zjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjaMrrI4up1KpILKcOF9iuAdrOa7M4IEGTI+ prqedecWiTbfxAdkbhOjFCvrDCMWW2DqAmScr0pBKS6FxQPadgPQFS2B/pNtHLrZ BgqqDNTd4ksCoXOHK38dPC9Ra0dBzk3wzhFPBedP5kewcquZKALJ0iFf9kICsodV M2bsyZC6fNwW9El4Nyvk6Mv5XNqadtc9svMpycQ3dtg8x12l8/ZwrIkfGT9dqB6p D1xV0NCdvzI+0S+zrwFHntSjak9h9bZTe0q7tJ0kKWTgCCywZbODCzfYETpUEtFw ltjLdNaE25IO7gOIzfpEAd0faKyxg0/w9lm6BzpOy+T8txj8UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkrUuvhX6lITRwjed+uErASLSXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNWE4OTlhZjYtMjU4Yy0z YjgxLWJjODItNDExMGY3NDZhNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa9ni11w+8w3TlkrzKrOBuH0QTvUBUrlsmHUDkXrh6sKANC1RFGMKEs WFOoTdfE78nNYmtQ8LYK43+nib9cyOTa1HJQ/ygmyB8r8bN+/3/TIWen6lL/WhJm HLAg0QQ/n8TLUvXoLckeHD3a4Ojupjhq+FH5svtTmUqtr426790lYuY7bD/fR9we M4sqcjAS/jgGigQxGl8dDZDMszLB91CkP+w2yg4AmjVStigQDmnMf0ytZpRYpEvx W1rifTRsc+Pqsx/Z1H6RZsAz80wtsNT8lmo+7Z4SMaars7gOLGceF+DbEQNgJvfr Ixj5wKWpFNQu5KvUx8/fj80+Hye3UzQ= -----END CERTIFICATE-----Generated at Tue Oct 6 23:22:42 2026 by rpki-client