$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/abf4f35a-af0f-3ff9-abe6-a9a54ea2031d.roa File: abf4f35a-af0f-3ff9-abe6-a9a54ea2031d.roa (raw, json) Hash identifier: N8WZ6kJQu/eJVn3aB97yOsHvLFlpIUaXj2gA16hAbgg= Subject key identifier: BB:FE:AB:84:E1:33:76:34:AE:A3:45:C5:1C:49:34:10:79:C9:B0:09 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7A59E9979B4C08BA776E0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/abf4f35a-af0f-3ff9-abe6-a9a54ea2031d.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a5:9e:99:79:b4:c0:8b:a7:76:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=576685b4-34e5-4180-8082-d45e6ec4a7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b3:f9:a5:34:1b:31:b6:9d:05:fc:67:2c:83: 96:80:3c:94:31:21:65:b7:af:ff:38:ea:e9:e3:a7: a8:c2:23:4f:f3:56:eb:7e:7b:51:32:f7:35:01:34: a0:0c:44:93:7d:aa:38:22:c0:f4:0c:f8:69:52:fd: 2c:77:88:bf:df:d2:c9:87:c4:48:f3:69:17:e1:69: 9e:26:bd:6b:4f:23:2a:d3:ef:37:26:ea:41:53:41: 4a:41:5f:b7:90:bf:2f:7c:2a:0b:d4:89:22:0c:6e: eb:7c:47:cb:56:99:05:ce:68:1d:e4:48:84:cd:9e: 21:65:10:f3:d8:bc:13:e3:65:95:84:9a:0b:88:e4: 83:e9:f2:ff:e0:a0:df:b1:82:aa:af:31:41:27:52: f2:a8:8c:53:73:44:d9:d7:25:b9:2c:a8:43:e3:2b: 14:62:de:fa:f6:51:cd:b8:ec:55:68:63:73:cf:9e: 0b:5c:a7:95:0c:c8:66:a5:c9:7f:dc:45:8e:aa:f5: 80:32:84:5f:7c:8f:bc:b6:61:4c:e0:01:49:43:d3: 6f:86:73:e3:92:d7:9a:59:fc:e1:d2:ae:d4:45:aa: 4c:09:6f:f4:72:41:cd:13:25:5b:f3:71:28:a7:e3: 16:93:f7:8e:ff:4a:0b:47:1b:93:ed:da:b9:75:fe: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FE:AB:84:E1:33:76:34:AE:A3:45:C5:1C:49:34:10:79:C9:B0:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/abf4f35a-af0f-3ff9-abe6-a9a54ea2031d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:13:a6:6a:c5:df:b0:1f:8d:b9:39:51:1d:12:1c:1f:3b:77: 40:6e:76:97:43:73:42:bd:9b:dd:a1:ad:15:ff:07:35:43:4c: dd:ba:f7:c1:fc:00:d9:e1:01:7f:e7:76:c6:67:db:52:b7:5b: 98:e9:9b:7c:8b:d5:5b:07:8b:fb:8b:9f:95:ca:05:8d:70:3f: 4f:69:45:3e:c0:41:5e:32:86:36:59:33:c0:68:e9:3e:ac:66: 30:ee:ff:e4:e5:b5:31:5a:10:0a:2f:de:ed:5f:76:59:2f:2a: 3a:af:51:ce:2f:88:74:47:5a:34:b5:47:07:c0:84:d3:93:d8: d3:e0:c9:c6:e4:10:9d:4c:b0:81:74:10:bc:de:1b:7b:cf:7c: c6:e9:31:08:a0:be:38:a5:fa:9f:44:e4:28:91:b5:a9:87:72: 76:ec:f0:28:5f:8e:61:04:65:b0:e3:f1:15:67:8e:89:9f:a3: 27:17:71:95:20:b6:d6:6a:64:f3:0c:0f:be:e0:75:bf:74:6d: ce:99:92:bd:88:c9:49:84:10:45:41:ca:56:88:ff:df:fb:53: 41:33:c9:f4:53:69:11:b1:d3:13:30:d6:75:eb:22:b6:e1:a8: 67:9c:dc:0a:45:4a:73:06:bc:9c:ab:d6:c3:5e:36:5f:f2:87: 36:98:f3:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96WemXm0wIunduAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTc2Njg1YjQtMzRlNS00MTgwLTgwODItZDQ1ZTZlYzRhN2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirP5pTQbMbadBfxnLIOWgDyUMSFlt6//OOrp 46eowiNP81brfntRMvc1ATSgDESTfao4IsD0DPhpUv0sd4i/39LJh8RI82kX4Wme Jr1rTyMq0+83JupBU0FKQV+3kL8vfCoL1IkiDG7rfEfLVpkFzmgd5EiEzZ4hZRDz 2LwT42WVhJoLiOSD6fL/4KDfsYKqrzFBJ1LyqIxTc0TZ1yW5LKhD4ysUYt769lHN uOxVaGNzz54LXKeVDMhmpcl/3EWOqvWAMoRffI+8tmFM4AFJQ9NvhnPjkteaWfzh 0q7URapMCW/0ckHNEyVb83Eop+MWk/eO/0oLRxuT7dq5df6bTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLv+q4ThM3Y0rqNFxRxJNBB5ybAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYWJmNGYzNWEtYWYwZi0z ZmY5LWFiZTYtYTlhNTRlYTIwMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcTpmrF37Afjbk5UR0SHB87d0BudpdDc0K9m92hrRX/BzVDTN2698H8 ANnhAX/ndsZn21K3W5jpm3yL1VsHi/uLn5XKBY1wP09pRT7AQV4yhjZZM8Bo6T6s ZjDu/+TltTFaEAov3u1fdlkvKjqvUc4viHRHWjS1RwfAhNOT2NPgycbkEJ1MsIF0 ELzeG3vPfMbpMQigvjil+p9E5CiRtamHcnbs8ChfjmEEZbDj8RVnjomfoycXcZUg ttZqZPMMD77gdb90bc6Zkr2IyUmEEEVBylaI/9/7U0EzyfRTaRGx0xMw1nXrIrbh qGec3ApFSnMGvJyr1sNeNl/yhzaY82A= -----END CERTIFICATE-----Generated at Sun Sep 27 06:33:36 2026 by rpki-client