$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f1aea5-9fe6-3937-a1d0-5db3957de106.roa File: 61f1aea5-9fe6-3937-a1d0-5db3957de106.roa (raw, json) Hash identifier: M6ucgLIBnQcu4wISuL5v4ATCLdLeiNS8TdADcv9s6lE= Subject key identifier: 00:03:A9:A7:C6:30:7B:52:F1:E1:25:ED:97:5D:22:FA:DE:31:7C:5D Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7CF0DED895096F0D70000 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f1aea5-9fe6-3937-a1d0-5db3957de106.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cf:0d:ed:89:50:96:f0:d7:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=b7cdd265-bb72-44dc-b8d6-e5780b601fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:98:34:4b:89:94:c8:25:6f:4d:bf:ab:91:7c: 1e:21:f0:33:ca:a7:90:f2:54:e6:58:94:02:78:9b: b3:42:80:1c:b4:ba:86:78:e7:c7:97:2b:3b:50:42: 33:ed:5f:56:4c:17:be:72:4e:96:ad:22:3f:76:7d: f7:33:50:2b:e1:c5:2e:b4:88:b6:ec:19:10:82:49: c8:c4:b8:11:da:17:0d:a4:2e:24:d2:91:87:9a:fb: e5:ff:37:0c:33:9e:02:64:23:e9:20:d3:92:a9:86: 19:00:a9:f5:50:e5:bb:e0:b2:ff:d7:18:63:50:b2: 22:d3:1a:ee:23:80:3f:02:15:c9:f8:05:2a:43:62: 85:fb:20:b6:a7:64:ef:99:a3:5c:c1:0f:e2:9b:68: bb:91:de:3b:3c:2d:71:b8:e5:de:6f:46:9b:d8:26: 22:09:af:06:42:c8:10:23:2b:c0:1f:2c:e2:b7:3a: af:0a:64:6b:ec:ed:6e:08:92:1a:52:30:a9:c0:20: 0c:06:ea:20:bc:d7:19:db:fa:86:ef:39:a0:3c:40: 10:a1:64:4a:0c:1b:8c:44:75:0f:68:70:ef:e4:c9: 37:e9:23:21:ed:6a:4e:90:35:f4:6b:a5:9f:7d:a8: 76:aa:fd:66:04:b0:7c:fa:6f:ba:82:ae:37:65:57: e4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:03:A9:A7:C6:30:7B:52:F1:E1:25:ED:97:5D:22:FA:DE:31:7C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f1aea5-9fe6-3937-a1d0-5db3957de106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:19:5f:5d:c7:21:86:ba:7b:1c:ec:58:42:a4:67:e4:5e:b0: 48:50:a4:f5:b0:dd:2b:6f:0d:fc:4d:3d:02:70:a5:57:ef:ef: 9b:e3:c9:6b:ad:95:95:db:0b:db:62:9d:cd:cc:17:99:ad:22: 6b:14:9e:f6:10:b9:05:19:3c:f7:21:3c:32:49:46:ae:c1:22: f5:71:d8:11:a1:92:b0:d9:d7:e9:bc:ed:a6:14:b0:88:f0:2f: 2c:01:d0:99:db:85:96:bc:e5:80:80:8e:d3:95:c2:4e:48:c2: 0d:32:52:b6:e1:67:4f:02:a8:24:65:37:67:c8:d7:9b:49:8e: b6:79:8b:95:a7:0d:b8:bc:4f:c3:68:73:c6:96:fb:34:34:ac: 99:66:e3:76:c6:fa:8e:ca:74:29:ae:83:e2:ac:95:3c:07:80: 62:95:2f:9a:16:23:63:1c:76:10:1b:54:76:39:d1:c1:ba:4a: 36:46:46:00:80:c7:e7:21:c0:e5:ee:f7:6b:15:f2:b6:90:b9: be:bc:de:a5:b1:2f:ba:cb:00:1f:44:3e:92:74:83:59:be:44: 8b:2e:24:17:a0:35:e6:a9:fb:89:3d:8f:6a:ed:a2:80:64:89: af:41:0e:be:ca:24:85:97:21:3a:66:8d:60:4a:d4:57:f3:47: 74:83:ba:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g988N7YlQlvDXAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YjdjZGQyNjUtYmI3Mi00NGRjLWI4ZDYtZTU3ODBiNjAxZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5g0S4mUyCVvTb+rkXweIfAzyqeQ8lTmWJQC eJuzQoActLqGeOfHlys7UEIz7V9WTBe+ck6WrSI/dn33M1Ar4cUutIi27BkQgknI xLgR2hcNpC4k0pGHmvvl/zcMM54CZCPpINOSqYYZAKn1UOW74LL/1xhjULIi0xru I4A/AhXJ+AUqQ2KF+yC2p2TvmaNcwQ/im2i7kd47PC1xuOXeb0ab2CYiCa8GQsgQ IyvAHyzitzqvCmRr7O1uCJIaUjCpwCAMBuogvNcZ2/qG7zmgPEAQoWRKDBuMRHUP aHDv5Mk36SMh7WpOkDX0a6Wffah2qv1mBLB8+m+6gq43ZVfkJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAADqafGMHtS8eEl7ZddIvreMXxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjFmMWFlYTUtOWZlNi0z OTM3LWExZDAtNWRiMzk1N2RlMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4ZX13HIYa6exzsWEKkZ+ResEhQpPWw3StvDfxNPQJwpVfv75vjyWut lZXbC9tinc3MF5mtImsUnvYQuQUZPPchPDJJRq7BIvVx2BGhkrDZ1+m87aYUsIjw LywB0JnbhZa85YCAjtOVwk5Iwg0yUrbhZ08CqCRlN2fI15tJjrZ5i5WnDbi8T8No c8aW+zQ0rJlm43bG+o7KdCmug+KslTwHgGKVL5oWI2McdhAbVHY50cG6SjZGRgCA x+chwOXu92sV8raQub683qWxL7rLAB9EPpJ0g1m+RIsuJBegNeap+4k9j2rtooBk ia9BDr7KJIWXITpmjWBK1FfzR3SDutY= -----END CERTIFICATE-----Generated at Sat Oct 10 17:15:09 2026 by rpki-client