$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9331f381-34ae-3fb8-a7a2-81f713dcb73d.roa File: 9331f381-34ae-3fb8-a7a2-81f713dcb73d.roa (raw, json) Hash identifier: 0Q4rdHfyxQJA8xr9HEK1fRAmt7Xe6iROlHSQaP0gU/o= Subject key identifier: 21:6F:C0:A4:8C:4F:D6:FD:5E:A2:D0:3D:19:B1:88:41:41:67:E6:68 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B397F4F2437F673F1D00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9331f381-34ae-3fb8-a7a2-81f713dcb73d.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b3:97:f4:f2:43:7f:67:3f:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=6fff0fb5-65a5-4129-bf46-26f0ece0e603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:34:2c:54:55:ae:1c:a5:3e:5d:cf:71:bb:0e: e9:a2:d3:6d:9b:b4:7c:07:ca:f4:93:0e:76:ba:02: 19:2a:cd:be:94:56:f4:11:70:dc:f3:09:9e:18:a9: e4:d0:03:55:50:c1:45:a5:32:bf:60:ec:74:2b:e6: 28:62:07:f3:79:af:ec:44:4b:bb:9a:1a:57:15:fb: 9c:16:62:60:47:27:ab:ed:8c:a3:e3:50:61:21:3f: 5b:d9:d0:1f:8a:bd:43:12:db:73:74:de:e6:da:74: bd:7f:38:ad:3a:27:85:ea:ce:8f:41:1a:a1:94:b6: 9c:bb:76:03:f3:2c:85:cc:c9:42:a6:22:a9:f2:e7: 30:c6:ec:73:03:4d:e3:bb:42:bf:e4:60:e0:a1:46: 62:69:9f:22:cd:fe:47:a1:d2:8c:e6:87:42:ac:f6: c2:e3:76:33:c6:29:6a:6a:8d:47:6b:3d:5e:85:b7: a9:7c:ba:a4:5c:89:1d:09:d5:fa:53:e3:e0:40:1b: 40:16:43:a9:45:a7:f7:44:3a:e1:c0:c1:b6:99:87: 7b:73:64:5e:7b:fc:c9:af:1c:01:01:7d:b3:4e:de: 5e:1c:00:4b:92:c7:56:84:98:d6:0d:df:4a:f5:f6: 12:02:e7:6f:40:6f:1f:db:32:22:c2:e6:f9:ae:bb: e2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6F:C0:A4:8C:4F:D6:FD:5E:A2:D0:3D:19:B1:88:41:41:67:E6:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9331f381-34ae-3fb8-a7a2-81f713dcb73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:02:41:76:c4:15:39:e7:e3:6b:bb:3b:dd:0f:ca:80:c6:6e: 3a:9a:38:e5:37:24:d6:b8:64:72:8c:a4:ab:de:86:c1:79:69: aa:27:2a:02:fe:01:1f:37:9f:c9:fc:21:4d:cd:70:c2:ec:81: 9f:e1:41:64:99:fa:ce:3b:6b:da:25:ed:f0:50:69:03:71:d0: 23:3c:f2:d3:ab:4e:18:b4:80:e7:c6:db:f9:f4:5d:9a:31:2f: b7:e4:9d:d7:60:57:80:c7:d6:49:dd:47:81:1b:fd:3a:fe:a5: d2:21:7e:1b:72:30:38:af:6b:9a:14:91:84:61:45:67:88:99: 25:2f:88:f3:2a:0f:46:76:ec:b6:95:0a:b6:5e:b1:77:62:31: 2d:9a:76:47:5a:ca:c8:d2:20:bb:6d:4d:d6:7c:fd:3a:7b:18: 0e:aa:bf:75:1d:f2:78:2d:b1:7e:95:d8:72:fb:2a:4c:60:c1: 59:10:c0:d2:99:19:ea:88:b4:f6:dd:78:1b:29:2f:e1:8b:ad: 9e:41:fa:af:6c:2e:ee:dc:25:f3:ca:fd:76:33:90:de:81:f7: 13:8c:a4:55:1c:84:d4:16:b3:6c:21:9a:bd:61:a4:2a:ed:54: c1:ce:b5:63:3c:23:19:8f:82:33:5a:bd:f4:2b:eb:5f:5d:6f: e8:dd:67:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97OX9PJDf2c/HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NmZmZjBmYjUtNjVhNS00MTI5LWJmNDYtMjZmMGVjZTBlNjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjQsVFWuHKU+Xc9xuw7potNtm7R8B8r0kw52 ugIZKs2+lFb0EXDc8wmeGKnk0ANVUMFFpTK/YOx0K+YoYgfzea/sREu7mhpXFfuc FmJgRyer7Yyj41BhIT9b2dAfir1DEttzdN7m2nS9fzitOieF6s6PQRqhlLacu3YD 8yyFzMlCpiKp8ucwxuxzA03ju0K/5GDgoUZiaZ8izf5HodKM5odCrPbC43Yzxilq ao1Haz1ehbepfLqkXIkdCdX6U+PgQBtAFkOpRaf3RDrhwMG2mYd7c2Ree/zJrxwB AX2zTt5eHABLksdWhJjWDd9K9fYSAudvQG8f2zIiwub5rrvi1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFvwKSMT9b9XqLQPRmxiEFBZ+ZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOTMzMWYzODEtMzRhZS0z ZmI4LWE3YTItODFmNzEzZGNiNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkCQXbEFTnn42u7O90PyoDGbjqaOOU3JNa4ZHKMpKvehsF5aaonKgL+ AR83n8n8IU3NcMLsgZ/hQWSZ+s47a9ol7fBQaQNx0CM88tOrThi0gOfG2/n0XZox L7fknddgV4DH1kndR4Eb/Tr+pdIhfhtyMDiva5oUkYRhRWeImSUviPMqD0Z27LaV CrZesXdiMS2adkdaysjSILttTdZ8/Tp7GA6qv3Ud8ngtsX6V2HL7KkxgwVkQwNKZ GeqItPbdeBspL+GLrZ5B+q9sLu7cJfPK/XYzkN6B9xOMpFUchNQWs2whmr1hpCrt VMHOtWM8IxmPgjNavfQr619db+jdZ1s= -----END CERTIFICATE-----Generated at Thu Oct 1 21:51:37 2026 by rpki-client