$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/efdcf1ad-61ec-3c33-817a-5c271a7e7441.roa File: efdcf1ad-61ec-3c33-817a-5c271a7e7441.roa (raw, json) Hash identifier: Psf5FpBl7dCXK5UUKc9taYxqwnasqhrUyjU7cc+2NIA= Subject key identifier: 2B:8E:C8:90:6E:46:0F:B4:35:50:29:36:CE:A2:25:13:97:D1:EA:33 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D574AEC50F186E2B9080 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/efdcf1ad-61ec-3c33-817a-5c271a7e7441.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d5:74:ae:c5:0f:18:6e:2b:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=800e808f-fa21-4f20-87a2-6329e3173323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:58:46:15:13:de:8c:af:8c:d8:d6:ef:5e:35: 03:d3:06:34:9e:76:a0:ac:b2:ef:9c:07:dd:36:44: c9:f5:59:2a:32:e5:17:c4:79:98:79:11:7b:42:a1: 30:28:7d:d0:10:7e:43:af:50:81:42:4b:ad:5f:5a: e5:1b:5e:8f:ea:5a:97:d3:a4:47:d7:17:91:27:96: fd:d3:7a:82:83:cb:e0:e9:a1:d4:69:70:28:e3:d9: 8b:06:4e:ca:ca:34:e2:51:30:ec:34:77:df:84:53: 51:cc:60:0d:34:fa:c9:81:3f:d7:62:98:46:fe:14: 09:db:24:4b:06:f4:cd:e3:08:36:0f:04:fd:da:04: 23:0d:02:4d:00:62:53:b7:04:1e:49:36:2a:72:d7: 89:94:a9:eb:c7:90:3b:d0:09:7c:98:8a:0a:50:17: 92:29:86:59:f7:33:09:8c:f1:e8:e4:b2:ae:cb:eb: be:14:2e:ec:bb:f5:14:53:9a:fa:c3:44:56:63:ff: e8:99:3c:02:f7:fe:b9:cd:c4:23:9f:c0:25:b5:0a: 18:4d:60:60:72:61:c6:6d:65:91:1d:e1:fe:ba:d8: 9c:61:4b:5a:0d:4c:df:47:11:28:e9:29:8b:23:32: d6:7d:09:96:7b:66:cf:73:18:bc:81:15:3d:f3:fe: 11:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8E:C8:90:6E:46:0F:B4:35:50:29:36:CE:A2:25:13:97:D1:EA:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/efdcf1ad-61ec-3c33-817a-5c271a7e7441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:55:70:25:6e:81:9b:38:60:98:0f:bd:1a:04:e2:7d:0c:6a: 23:18:45:3d:a9:8a:6a:f2:9a:ba:d5:fe:32:f9:4a:6e:f6:73: 8e:6f:c4:ea:8d:9e:99:2a:ed:17:20:b4:77:f5:e3:66:fc:1a: a2:55:bb:2f:e4:cd:71:55:cc:a8:03:92:05:bc:8e:52:fa:e5: 53:fb:04:70:9b:75:e8:c8:81:8f:74:56:91:a3:68:de:4a:39: d0:68:10:8e:e2:3a:3e:58:ed:77:fd:92:4e:f5:98:30:9b:12: 33:7f:b1:48:de:55:bd:30:b5:64:9d:32:18:19:db:2a:5a:6e: e4:5b:6c:8a:c1:36:6c:d1:43:c1:a3:ef:b4:27:00:72:6e:5e: cc:c0:44:b6:38:1a:7f:9a:65:24:c8:46:d1:78:52:fb:f2:c0: 71:bd:52:30:b8:7e:c1:b2:f2:c5:4b:04:95:41:e2:bd:8c:57: 06:76:7a:c3:2b:18:ab:35:c1:e8:cc:db:7b:46:52:03:84:88: 84:e8:c8:98:2f:29:2a:cc:9d:64:2a:03:2c:27:c2:0b:f4:fd: eb:db:11:cf:2f:2a:a4:ff:5d:18:9e:50:ed:19:34:fe:e7:78: c4:a7:d9:45:57:f4:e8:27:91:d8:0a:6f:14:5f:0e:0d:d6:25: 83:6e:fc:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99V0rsUPGG4rkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODAwZTgwOGYtZmEyMS00ZjIwLTg3YTItNjMyOWUzMTczMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lhGFRPejK+M2NbvXjUD0wY0nnagrLLvnAfd NkTJ9VkqMuUXxHmYeRF7QqEwKH3QEH5Dr1CBQkutX1rlG16P6lqX06RH1xeRJ5b9 03qCg8vg6aHUaXAo49mLBk7KyjTiUTDsNHffhFNRzGANNPrJgT/XYphG/hQJ2yRL BvTN4wg2DwT92gQjDQJNAGJTtwQeSTYqcteJlKnrx5A70Al8mIoKUBeSKYZZ9zMJ jPHo5LKuy+u+FC7su/UUU5r6w0RWY//omTwC9/65zcQjn8AltQoYTWBgcmHGbWWR HeH+uticYUtaDUzfRxEo6SmLIzLWfQmWe2bPcxi8gRU98/4RGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuOyJBuRg+0NVApNs6iJROX0eozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWZkY2YxYWQtNjFlYy0z YzMzLTgxN2EtNWMyNzFhN2U3NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9VcCVugZs4YJgPvRoE4n0MaiMYRT2pimrymrrV/jL5Sm72c45vxOqN npkq7RcgtHf142b8GqJVuy/kzXFVzKgDkgW8jlL65VP7BHCbdejIgY90VpGjaN5K OdBoEI7iOj5Y7Xf9kk71mDCbEjN/sUjeVb0wtWSdMhgZ2ypabuRbbIrBNmzRQ8Gj 77QnAHJuXszARLY4Gn+aZSTIRtF4UvvywHG9UjC4fsGy8sVLBJVB4r2MVwZ2esMr GKs1wejM23tGUgOEiIToyJgvKSrMnWQqAywnwgv0/evbEc8vKqT/XRieUO0ZNP7n eMSn2UVX9OgnkdgKbxRfDg3WJYNu/A0= -----END CERTIFICATE-----Generated at Mon Sep 28 00:59:17 2026 by rpki-client