$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a22d29b4-17d2-3588-90c1-8a717e103076.roa File: a22d29b4-17d2-3588-90c1-8a717e103076.roa (raw, json) Hash identifier: WdGqw5PdKuc0okcrBc0g0xT0AcZG0C5Yj/RYtUzw5A8= Subject key identifier: CE:2A:99:6B:D0:F6:B6:3D:9D:74:C8:28:D0:A0:7E:0C:6C:20:0D:A3 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7CBA40A3937D7E88549C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a22d29b4-17d2-3588-90c1-8a717e103076.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 64.16.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cb:a4:0a:39:37:d7:e8:85:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=bb640496-539e-42e5-a0b0-9886c5a4dd7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:96:87:80:87:68:c5:ef:3f:ca:71:55:b4:05: 19:c6:56:97:18:c2:bd:c9:cc:3b:d0:83:6f:35:bf: 3a:0b:4c:7a:f5:ac:b8:64:18:ad:37:e4:51:2f:f1: da:5e:0d:74:e0:fe:13:33:88:d8:36:22:08:d9:5b: d4:f6:92:e4:96:f9:41:15:32:77:df:7d:ea:68:03: 45:e7:cb:aa:64:83:c7:0b:4b:27:f2:e7:8f:ab:a0: 6f:8f:f1:1d:fb:3b:4e:84:f8:68:a7:2f:6c:6c:a0: f6:27:2e:c7:b4:fb:63:5e:ec:b0:82:a4:62:f6:28: 12:67:70:ed:7d:20:52:29:c9:52:7d:98:f8:8a:e6: 10:64:ae:e1:3c:9b:87:9d:0d:c1:fd:7a:ea:e3:04: 63:c2:86:a9:a9:86:19:0f:e4:54:4f:3b:58:64:db: 90:64:6f:0a:83:d8:ad:6a:a8:26:53:58:45:9a:98: f0:8c:36:6d:de:b7:6d:f5:6a:33:67:ac:8f:8b:cc: 95:d4:ed:71:07:66:4b:c7:7a:ef:db:70:f1:b5:2d: 65:ce:af:53:d8:7a:3f:ed:6e:ec:92:f0:80:88:6a: 94:cb:3a:95:9c:52:9e:d5:57:07:fb:ca:3e:c1:b1: 20:c6:ce:fc:e7:ad:1e:a3:da:8d:05:c0:31:de:0b: a1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2A:99:6B:D0:F6:B6:3D:9D:74:C8:28:D0:A0:7E:0C:6C:20:0D:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a22d29b4-17d2-3588-90c1-8a717e103076.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4d:ff:54:ca:44:af:a2:f7:20:73:f7:e8:f3:81:bc:77:3b: 85:c6:27:1e:e9:27:5d:51:72:7b:91:fa:c2:bf:5c:f8:e6:21: 4d:23:ad:fc:a2:2d:71:38:cc:4c:99:25:f9:d3:49:29:c0:df: df:86:a1:5f:8e:5e:9e:17:1a:5d:b1:e5:82:a8:ef:3e:a2:fa: 17:2d:f8:28:47:cd:a8:44:95:db:f8:36:91:c7:14:22:7d:f0: 9c:19:08:87:88:17:0e:b5:98:fa:fd:7e:e7:00:18:e8:84:b5: 88:f7:72:e9:1a:82:c7:16:04:e1:a7:04:92:2f:19:ae:ec:d6: dd:7f:26:03:43:74:7d:f7:a0:3c:39:88:d8:1e:e2:29:6c:f9: 8d:23:2f:94:67:0c:6e:f9:62:2d:05:c2:6b:34:d3:7d:5a:b0: 99:01:ca:85:1f:e1:4a:02:74:d7:95:11:f5:e3:8f:12:ac:ef: d4:f4:49:d9:34:94:d0:e8:95:6f:4e:81:ff:2b:2d:f4:99:d9: 6f:73:97:15:9c:e3:5a:37:1f:f9:37:a2:65:82:0e:f4:bd:b3: b0:bf:c9:c8:c7:87:22:96:3c:2b:3e:cc:4b:2f:d5:e2:52:d3: da:40:98:78:49:8b:e7:02:47:9f:0a:0a:cf:16:69:6d:67:65: 3e:69:92:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98ukCjk31+iFScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YmI2NDA0OTYtNTM5ZS00MmU1LWEwYjAtOTg4NmM1YTRkZDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZaHgIdoxe8/ynFVtAUZxlaXGMK9ycw70INv Nb86C0x69ay4ZBitN+RRL/HaXg104P4TM4jYNiII2VvU9pLklvlBFTJ3333qaANF 58uqZIPHC0sn8uePq6Bvj/Ed+ztOhPhopy9sbKD2Jy7HtPtjXuywgqRi9igSZ3Dt fSBSKclSfZj4iuYQZK7hPJuHnQ3B/Xrq4wRjwoapqYYZD+RUTztYZNuQZG8Kg9it aqgmU1hFmpjwjDZt3rdt9WozZ6yPi8yV1O1xB2ZLx3rv23DxtS1lzq9T2Ho/7W7s kvCAiGqUyzqVnFKe1VcH+8o+wbEgxs78560eo9qNBcAx3guhTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4qmWvQ9rY9nXTIKNCgfgxsIA2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTIyZDI5YjQtMTdkMi0z NTg4LTkwYzEtOGE3MTdlMTAzMDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVN/1TKRK+i9yBz9+jzgbx3O4XGJx7pJ11RcnuR+sK/XPjmIU0jrfyi LXE4zEyZJfnTSSnA39+GoV+OXp4XGl2x5YKo7z6i+hct+ChHzahEldv4NpHHFCJ9 8JwZCIeIFw61mPr9fucAGOiEtYj3cukagscWBOGnBJIvGa7s1t1/JgNDdH33oDw5 iNge4ils+Y0jL5RnDG75Yi0Fwms0031asJkByoUf4UoCdNeVEfXjjxKs79T0Sdk0 lNDolW9Ogf8rLfSZ2W9zlxWc41o3H/k3omWCDvS9s7C/ycjHhyKWPCs+zEsv1eJS 09pAmHhJi+cCR58KCs8WaW1nZT5pknQ= -----END CERTIFICATE-----Generated at Mon Sep 28 19:54:49 2026 by rpki-client