$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/68872726-a853-3323-ab31-c8efeec5cb62.roa File: 68872726-a853-3323-ab31-c8efeec5cb62.roa (raw, json) Hash identifier: M2zT6Fx8MlNlrq+b8H8zSP2ggvQkt7xwzxKHQLJFlAU= Subject key identifier: A1:9A:34:68:C0:9C:E0:59:07:36:85:BC:C1:14:B1:E9:7C:4F:6A:A8 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B451E72CC2998528ED00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/68872726-a853-3323-ab31-c8efeec5cb62.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b4:51:e7:2c:c2:99:85:28:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=80ee8ec6-fd4c-4eb6-ac49-c8bd9459ed1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cb:7f:91:a5:34:44:11:27:cf:04:6c:e9:ce: d0:13:2b:38:10:4d:c4:da:ba:6e:0a:83:56:43:98: 3b:d4:94:5f:ab:45:d8:5c:e2:ee:37:3d:b6:8e:79: 69:71:8b:db:bf:8d:c5:7f:5a:31:b0:49:eb:15:98: 2a:16:a1:82:15:c6:a1:d5:74:4e:0b:07:37:b7:83: 56:54:ce:01:d2:a8:97:f9:1d:43:7b:d5:0d:ca:3f: 30:11:45:57:40:b0:5a:39:09:bd:99:d0:47:4c:a4: 63:02:b5:58:48:de:07:69:86:1b:50:9c:76:34:20: f7:9e:9e:1d:06:fe:cb:af:27:ca:87:e1:ff:e4:97: 19:42:9a:62:b2:a0:58:e5:fc:a7:2a:ba:2a:cc:fc: 6d:42:1d:3e:c1:d7:42:c2:ae:43:bd:a6:f2:19:60: 95:23:28:f2:01:c0:bf:c8:46:b0:d0:a8:c8:86:8d: 82:a7:64:e8:09:7d:55:a0:a3:f8:47:a3:6f:70:59: 34:ba:df:13:3e:98:44:c0:44:ee:f9:62:55:75:92: c3:24:a5:6b:6c:90:54:bb:9c:02:0e:ec:13:54:39: da:6c:16:5e:8c:05:9f:2e:c4:ba:46:3d:0e:9e:92: e6:01:6a:77:bb:03:f0:07:3f:f9:7c:55:1c:7f:b1: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9A:34:68:C0:9C:E0:59:07:36:85:BC:C1:14:B1:E9:7C:4F:6A:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/68872726-a853-3323-ab31-c8efeec5cb62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:18:68:eb:04:13:07:65:68:c1:61:6b:fa:25:b4:93:34:85: c4:38:32:37:a7:e8:6a:da:37:8e:2f:d3:cf:ff:86:63:ce:5d: d4:56:5d:f0:b9:0b:c9:7f:95:a9:a9:62:fd:cc:a9:48:6c:64: a6:b3:8d:c3:29:1b:92:3f:6e:1d:4f:17:f8:a6:8f:b0:a0:69: 80:b1:37:94:9f:c4:51:db:45:f9:7c:24:9c:65:89:e1:21:8e: 7f:c4:88:38:15:28:91:21:47:94:36:ec:7b:ed:b2:fe:4e:2c: a8:a1:11:dc:cb:b2:25:97:9b:b5:31:09:d3:2e:c4:c7:3b:72: e4:66:9e:e6:f4:50:2b:dc:d0:a1:8a:0e:e7:94:dc:7f:1f:22: 19:34:f3:20:4e:37:2b:43:38:4a:6a:f8:a3:10:43:f1:a7:f8: 09:fb:15:98:fd:51:da:e4:54:5e:e8:1e:f1:2a:33:0e:90:93: 73:6f:22:91:ba:54:bd:00:e5:86:05:fb:f0:b6:71:80:a2:71: 27:0b:c4:1d:34:37:b6:3d:53:ed:f1:d6:bc:bb:c2:1e:66:b5: 6f:e6:9d:52:58:8b:d5:f2:98:38:cb:f1:fe:51:70:b3:29:33: 4b:03:a1:8d:3f:88:94:c5:70:ae:18:f1:68:11:bc:af:00:27: 5a:85:06:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97RR5yzCmYUo7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODBlZThlYzYtZmQ0Yy00ZWI2LWFjNDktYzhiZDk0NTllZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjct/kaU0RBEnzwRs6c7QEys4EE3E2rpuCoNW Q5g71JRfq0XYXOLuNz22jnlpcYvbv43Ff1oxsEnrFZgqFqGCFcah1XROCwc3t4NW VM4B0qiX+R1De9UNyj8wEUVXQLBaOQm9mdBHTKRjArVYSN4HaYYbUJx2NCD3np4d Bv7LryfKh+H/5JcZQppisqBY5fynKroqzPxtQh0+wddCwq5DvabyGWCVIyjyAcC/ yEaw0KjIho2Cp2ToCX1VoKP4R6NvcFk0ut8TPphEwETu+WJVdZLDJKVrbJBUu5wC DuwTVDnabBZejAWfLsS6Rj0OnpLmAWp3uwPwBz/5fFUcf7EpfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGaNGjAnOBZBzaFvMEUsel8T2qoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjg4NzI3MjYtYTg1My0z MzIzLWFiMzEtYzhlZmVlYzVjYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIYaOsEEwdlaMFha/oltJM0hcQ4Mjen6GraN44v08//hmPOXdRWXfC5 C8l/lampYv3MqUhsZKazjcMpG5I/bh1PF/imj7CgaYCxN5SfxFHbRfl8JJxlieEh jn/EiDgVKJEhR5Q27Hvtsv5OLKihEdzLsiWXm7UxCdMuxMc7cuRmnub0UCvc0KGK DueU3H8fIhk08yBONytDOEpq+KMQQ/Gn+An7FZj9UdrkVF7oHvEqMw6Qk3NvIpG6 VL0A5YYF+/C2cYCicScLxB00N7Y9U+3x1ry7wh5mtW/mnVJYi9XymDjL8f5RcLMp M0sDoY0/iJTFcK4Y8WgRvK8AJ1qFBmc= -----END CERTIFICATE-----Generated at Sat Oct 3 14:11:20 2026 by rpki-client