$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e6d42ce8-b111-30a1-90be-ed51efa22d6a.roa File: e6d42ce8-b111-30a1-90be-ed51efa22d6a.roa (raw, json) Hash identifier: P+2FK53hoNHPT3Zc8dDny9Jopa6qHyWWWsirVz19JA8= Subject key identifier: AF:8C:FA:9A:DC:95:D0:66:0A:EE:84:BB:83:BF:B9:38:D8:9D:94:3C Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7CD03DD23F831BFB87200 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e6d42ce8-b111-30a1-90be-ed51efa22d6a.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cd:03:dd:23:f8:31:bf:b8:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=cac2e993-f7bf-46c9-b99b-56e73fcb3ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:40:db:46:5e:b8:c0:5d:7a:f7:d4:26:1f: 90:99:83:e8:6c:4c:e0:93:be:f3:41:4a:62:33:0f: 8b:8d:c8:7c:c1:bf:e5:af:d5:b2:ec:30:17:54:32: b3:eb:39:6e:f1:08:46:0e:ba:e7:7e:8e:60:82:a6: ad:c1:e1:20:e6:d0:dc:9d:60:2f:66:68:e9:31:1c: 9d:82:50:b9:3e:73:cd:d3:e6:1a:79:86:b2:ab:e4: 5f:dd:ac:1e:2c:6b:79:ba:8e:ea:cf:d2:b5:ec:f9: a3:00:2e:4f:40:3b:ca:1f:3b:27:2d:fa:56:3a:8b: 21:d7:ca:5e:7a:5c:43:e4:0e:bf:f7:d6:2c:10:7b: dc:42:69:64:f8:c3:e3:28:d4:86:42:86:a4:36:24: 32:0c:42:57:3d:ad:d5:7d:cf:bd:88:79:a3:6e:93: 70:e3:8d:77:db:c4:81:9b:e2:96:a0:21:21:64:11: eb:b8:a2:01:4f:e2:0c:78:a7:1c:c2:b0:62:80:23: 30:57:07:c6:46:16:41:1e:8b:86:4b:f2:60:48:eb: 2c:ae:4b:bc:cf:8f:02:b7:77:f0:57:79:b7:cc:7e: 6d:c6:45:a5:33:45:c1:1c:7b:f2:6d:93:79:13:51: 87:48:0f:bf:21:e0:2a:31:52:57:2b:aa:23:d2:1f: 00:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8C:FA:9A:DC:95:D0:66:0A:EE:84:BB:83:BF:B9:38:D8:9D:94:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e6d42ce8-b111-30a1-90be-ed51efa22d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:74:f4:65:94:b7:91:2c:d2:30:96:7e:cf:ff:c0:6b:68:54: c3:70:ce:6b:dd:e7:f4:41:25:0a:e4:20:2a:95:63:1b:78:0d: d0:a9:02:b1:e3:d1:a4:04:7e:ec:bd:2f:75:88:33:4b:e5:7d: fa:6e:f9:b9:ff:c8:a6:25:b7:e4:3e:6d:40:63:5a:84:4a:aa: e2:40:11:b8:d4:42:07:d8:9b:af:5d:9a:c5:f5:4a:ba:d9:60: 36:33:3e:a0:70:df:51:e6:98:80:53:0b:bf:23:9f:cc:ee:dc: e2:13:4e:79:d8:b9:b7:7e:7d:a0:8c:0c:e7:a5:52:43:75:6f: f3:b5:e2:31:64:f7:a8:26:7a:43:86:85:77:16:47:5a:00:a4: c5:9b:ab:75:3b:8b:75:9d:ba:8c:e2:10:48:37:8f:24:e1:ce: 8e:bc:2c:92:c4:19:84:f7:7e:ea:6c:6f:37:71:3e:54:b3:e4: 20:5b:84:fe:eb:91:e5:8e:d9:a0:68:ad:07:71:ff:67:97:a1: 47:ed:09:bf:7e:9a:06:29:32:93:df:4d:67:30:fd:76:41:44: 82:aa:45:9b:df:f7:b8:70:0f:00:0a:78:cd:fe:38:78:f4:4b: bc:04:cb:10:ad:8e:31:c1:a2:83:51:4e:87:d3:99:ad:18:4c: 3d:b6:39:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g980D3SP4Mb+4cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk Y2FjMmU5OTMtZjdiZi00NmM5LWI5OWItNTZlNzNmY2IzZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nhA20ZeuMBdevfUJh+QmYPobEzgk77zQUpi Mw+Ljch8wb/lr9Wy7DAXVDKz6zlu8QhGDrrnfo5ggqatweEg5tDcnWAvZmjpMRyd glC5PnPN0+YaeYayq+Rf3aweLGt5uo7qz9K17PmjAC5PQDvKHzsnLfpWOosh18pe elxD5A6/99YsEHvcQmlk+MPjKNSGQoakNiQyDEJXPa3Vfc+9iHmjbpNw441328SB m+KWoCEhZBHruKIBT+IMeKccwrBigCMwVwfGRhZBHouGS/JgSOssrku8z48Ct3fw V3m3zH5txkWlM0XBHHvybZN5E1GHSA+/IeAqMVJXK6oj0h8ACwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+M+prcldBmCu6Eu4O/uTjYnZQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZTZkNDJjZTgtYjExMS0z MGExLTkwYmUtZWQ1MWVmYTIyZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAER09GWUt5Es0jCWfs//wGtoVMNwzmvd5/RBJQrkICqVYxt4DdCpArHj 0aQEfuy9L3WIM0vlffpu+bn/yKYlt+Q+bUBjWoRKquJAEbjUQgfYm69dmsX1SrrZ YDYzPqBw31HmmIBTC78jn8zu3OITTnnYubd+faCMDOelUkN1b/O14jFk96gmekOG hXcWR1oApMWbq3U7i3WduoziEEg3jyThzo68LJLEGYT3fupsbzdxPlSz5CBbhP7r keWO2aBorQdx/2eXoUftCb9+mgYpMpPfTWcw/XZBRIKqRZvf97hwDwAKeM3+OHj0 S7wEyxCtjjHBooNRTofTma0YTD22Od8= -----END CERTIFICATE-----Generated at Sat Sep 26 09:32:21 2026 by rpki-client