$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/cbb5abe5-a287-3408-8d6f-dec332884a33.roa File: cbb5abe5-a287-3408-8d6f-dec332884a33.roa (raw, json) Hash identifier: UCy1N4ZQA8Ipd986c9KUE180Qo1vmMX/KpzYJR/YCdk= Subject key identifier: 5D:53:F3:E3:58:8B:BF:96:D9:C8:14:25:33:6C:A6:D1:63:3C:2D:96 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B139574A78AAD5DF5200 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/cbb5abe5-a287-3408-8d6f-dec332884a33.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b1:39:57:4a:78:aa:d5:df:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=849ddf0c-f760-43de-a7a1-89c27e56a389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:74:b6:2d:33:ec:ee:58:6e:4c:d9:8e:b0: 82:55:2c:1d:b7:26:cf:0a:69:28:a1:c5:17:71:44: 0f:dc:50:8a:ed:4f:fd:22:7c:47:e9:91:3e:d4:29: fc:ba:0c:58:45:46:65:14:90:d0:da:db:94:8a:26: ca:59:29:c4:4c:5b:6b:79:4d:69:de:fb:0f:c2:f2: 49:36:75:d6:f0:ef:c1:d5:4c:a6:01:9e:54:13:25: 5b:85:b9:d5:38:59:64:4c:ea:07:ea:1f:da:05:8b: f1:a9:b9:b0:80:86:39:be:fa:d7:cd:c0:5f:8a:e8: bc:e4:0c:1e:f2:fd:dc:49:d4:5b:90:3a:dd:f7:5a: b3:cd:58:a7:1c:fd:f0:6b:1e:3c:e2:34:56:73:48: 65:78:91:b2:0f:9c:e4:02:af:86:a4:85:1b:e2:c9: 7a:f9:77:eb:1e:d4:34:9e:cf:af:df:b6:66:ab:8b: d3:60:86:dd:3c:2a:7e:82:ca:25:3b:b1:24:de:0e: 56:50:52:bc:e6:e1:5b:b1:8a:d6:07:28:e2:63:4e: 4e:07:5e:07:6d:f3:26:49:bd:f2:a4:49:8b:9c:78: 41:8b:7b:6f:11:ca:76:f6:a1:5f:7e:57:bd:3f:15: 4f:c7:64:c3:66:14:b9:44:90:6d:5e:52:ba:d6:b5: 7d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:53:F3:E3:58:8B:BF:96:D9:C8:14:25:33:6C:A6:D1:63:3C:2D:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/cbb5abe5-a287-3408-8d6f-dec332884a33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:ee:08:d4:d7:60:b6:2a:00:d6:bf:2f:1b:75:c7:4b:da:5f: 16:ce:8f:f0:ef:b5:54:d7:01:13:0e:4f:c5:8b:a3:d2:dc:78: b1:52:9f:ae:0c:3c:20:5a:ec:db:5b:d3:57:a2:79:08:50:f6: a0:56:ff:97:7f:ac:14:df:7f:14:67:3c:50:ce:ef:b2:80:03: 77:cf:9f:81:1d:26:c9:0b:db:cd:db:cf:f2:23:3f:4c:99:9f: e3:04:77:0e:d5:05:a9:73:36:01:c0:1b:94:0f:27:98:db:c3: 25:e6:47:de:35:a5:02:dd:e9:75:e4:2e:3a:ad:03:75:4c:a1: 99:7f:44:1f:1e:68:ac:e8:05:85:d5:46:47:61:42:e7:71:bf: 55:e5:f8:5a:64:d6:e0:f3:ef:74:f6:5a:9a:98:39:95:ae:c0: 86:f0:e0:2b:09:47:74:41:a9:68:b8:3c:18:35:24:c9:99:5d: ed:a0:a7:5a:83:06:99:3f:47:14:a1:66:03:ed:5a:4d:a0:d0: c6:bf:91:ec:53:bb:3c:67:c3:72:4f:46:c2:8b:bf:b8:36:82: 40:b4:ed:05:de:9e:b8:11:8c:f1:b3:24:dd:e8:4f:6e:16:6a: bc:5a:88:31:a3:b9:e9:ed:6b:d4:ee:f1:28:c7:7a:26:fd:23: bf:0f:65:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97E5V0p4qtXfUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODQ5ZGRmMGMtZjc2MC00M2RlLWE3YTEtODljMjdlNTZhMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXB0ti0z7O5YbkzZjrCCVSwdtybPCmkoocUX cUQP3FCK7U/9InxH6ZE+1Cn8ugxYRUZlFJDQ2tuUiibKWSnETFtreU1p3vsPwvJJ NnXW8O/B1UymAZ5UEyVbhbnVOFlkTOoH6h/aBYvxqbmwgIY5vvrXzcBfiui85Awe 8v3cSdRbkDrd91qzzVinHP3wax484jRWc0hleJGyD5zkAq+GpIUb4sl6+XfrHtQ0 ns+v37Zmq4vTYIbdPCp+gsolO7Ek3g5WUFK85uFbsYrWByjiY05OB14HbfMmSb3y pEmLnHhBi3tvEcp29qFffle9PxVPx2TDZhS5RJBtXlK61rV98QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1T8+NYi7+W2cgUJTNsptFjPC2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvY2JiNWFiZTUtYTI4Ny0z NDA4LThkNmYtZGVjMzMyODg0YTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvuCNTXYLYqANa/Lxt1x0vaXxbOj/DvtVTXARMOT8WLo9LceLFSn64M PCBa7Ntb01eieQhQ9qBW/5d/rBTffxRnPFDO77KAA3fPn4EdJskL283bz/IjP0yZ n+MEdw7VBalzNgHAG5QPJ5jbwyXmR941pQLd6XXkLjqtA3VMoZl/RB8eaKzoBYXV RkdhQudxv1Xl+Fpk1uDz73T2WpqYOZWuwIbw4CsJR3RBqWi4PBg1JMmZXe2gp1qD Bpk/RxShZgPtWk2g0Ma/kexTuzxnw3JPRsKLv7g2gkC07QXenrgRjPGzJN3oT24W arxaiDGjuenta9Tu8SjHeib9I78PZaM= -----END CERTIFICATE-----Generated at Mon Sep 28 14:58:10 2026 by rpki-client