$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/666200aa-4d9e-303e-9815-1b88a9ab7e3b.roa File: 666200aa-4d9e-303e-9815-1b88a9ab7e3b.roa (raw, json) Hash identifier: 9s7NKMaZ1f/U4EhnOtQCDEnVQLPJ6cvoDVi4u4g8kug= Subject key identifier: F4:E3:58:61:FE:1C:59:47:A7:43:89:FB:E4:9E:C1:AE:20:27:43:D6 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7CED4F9B5D1824CD69520 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/666200aa-4d9e-303e-9815-1b88a9ab7e3b.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ce:d4:f9:b5:d1:82:4c:d6:95:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=9520d812-8097-46dc-9cff-99749d8f0a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cd:e0:e9:18:6a:11:63:3f:a3:a1:76:e4:1d: ef:66:19:b3:1c:01:6d:7b:f2:6e:52:7b:e3:b4:4d: b8:28:d1:60:3d:f4:e6:36:da:cd:0f:ea:c8:64:3a: 30:58:73:5e:e1:93:66:67:f6:00:3d:dd:ae:46:09: 42:c6:5b:e0:dd:99:6a:39:07:67:d7:f6:50:06:3b: 0c:12:80:b1:45:b3:59:5d:d1:cb:7a:2e:4c:0c:88: 5a:fe:50:c5:ff:c1:c5:9f:5d:89:f5:5e:e5:f7:79: 1f:f2:6d:0c:d0:37:83:52:57:e2:89:8d:fa:a8:fc: 35:46:60:e7:e4:43:93:93:60:54:99:ab:a8:61:2a: 0b:00:26:66:82:bf:80:dd:ca:1e:2f:8e:26:28:a6: 0a:5c:c7:fd:f5:97:a4:1e:6e:28:b7:cc:cb:46:40: 14:50:59:e4:ae:dd:25:5c:f0:dd:a9:53:8b:e0:4d: 37:a4:8f:cf:8a:dd:8d:7e:0e:6e:1e:ab:66:5c:4c: 2f:1d:c7:fa:31:eb:e2:9c:a3:af:90:9e:59:15:73: d5:4c:f6:a3:01:e7:37:ce:43:43:4c:fa:e5:d3:b1: ee:c8:59:aa:45:c9:ac:9e:84:a0:80:2b:5f:f1:25: c2:86:cf:9e:02:2a:29:f8:0a:a5:39:7c:c7:20:61: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E3:58:61:FE:1C:59:47:A7:43:89:FB:E4:9E:C1:AE:20:27:43:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/666200aa-4d9e-303e-9815-1b88a9ab7e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:4d:a6:76:63:01:e3:de:98:a6:42:cd:1e:42:06:45:01:f5: 44:f3:ca:d0:f0:26:63:ef:40:85:e0:93:d1:9e:16:17:c5:43: ab:53:5e:75:37:ad:70:a1:5d:28:98:be:f0:12:52:1f:63:21: 58:db:02:6e:03:a3:b5:57:ed:19:ae:0f:58:22:c3:50:5c:6b: fd:26:0f:86:be:bc:32:a6:69:8a:89:ad:b3:64:91:d8:dc:5e: 2b:dc:76:a5:22:74:2f:d2:20:7c:5e:ae:47:d7:de:84:ff:dd: 6b:e1:83:a7:d8:59:6a:9a:83:e8:ec:1a:8e:66:e5:28:25:9f: 4f:d2:bc:c9:01:91:53:0c:7a:f2:91:c9:87:ce:31:af:10:a4: ec:18:7d:4e:36:26:88:46:c2:d9:b3:15:79:67:48:1c:14:fb: 0d:56:68:09:77:7d:1a:68:82:3e:84:2c:80:05:f6:1f:7c:08: 93:79:3b:67:75:b3:fa:09:70:8e:9c:36:c2:02:a3:3b:b1:7e: e7:98:ef:8b:11:96:e3:ab:44:d4:48:06:1b:99:6f:cd:ca:ac: 1b:7c:82:92:5e:1c:20:a8:11:0e:46:64:a8:c7:96:c8:e2:fc: 01:bc:97:d0:00:51:15:80:d7:33:69:18:58:45:9d:f0:fa:4f: 6a:5d:c9:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g987U+bXRgkzWlSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OTUyMGQ4MTItODA5Ny00NmRjLTljZmYtOTk3NDlkOGYwYTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM3g6RhqEWM/o6F25B3vZhmzHAFte/JuUnvj tE24KNFgPfTmNtrND+rIZDowWHNe4ZNmZ/YAPd2uRglCxlvg3ZlqOQdn1/ZQBjsM EoCxRbNZXdHLei5MDIha/lDF/8HFn12J9V7l93kf8m0M0DeDUlfiiY36qPw1RmDn 5EOTk2BUmauoYSoLACZmgr+A3coeL44mKKYKXMf99ZekHm4ot8zLRkAUUFnkrt0l XPDdqVOL4E03pI/Pit2Nfg5uHqtmXEwvHcf6MevinKOvkJ5ZFXPVTPajAec3zkND TPrl07HuyFmqRcmsnoSggCtf8SXChs+eAiop+AqlOXzHIGFXgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTjWGH+HFlHp0OJ++Sewa4gJ0PWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjY2MjAwYWEtNGQ5ZS0z MDNlLTk4MTUtMWI4OGE5YWI3ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxNpnZjAePemKZCzR5CBkUB9UTzytDwJmPvQIXgk9GeFhfFQ6tTXnU3 rXChXSiYvvASUh9jIVjbAm4Do7VX7RmuD1giw1Bca/0mD4a+vDKmaYqJrbNkkdjc XivcdqUidC/SIHxerkfX3oT/3Wvhg6fYWWqag+jsGo5m5Sgln0/SvMkBkVMMevKR yYfOMa8QpOwYfU42JohGwtmzFXlnSBwU+w1WaAl3fRpogj6ELIAF9h98CJN5O2d1 s/oJcI6cNsICozuxfueY74sRluOrRNRIBhuZb83KrBt8gpJeHCCoEQ5GZKjHlsji /AG8l9AAURWA1zNpGFhFnfD6T2pdyTQ= -----END CERTIFICATE-----Generated at Sun Oct 4 22:19:58 2026 by rpki-client