$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24764eef-7370-3e69-8db9-9a7d9b2c28f0.roa File: 24764eef-7370-3e69-8db9-9a7d9b2c28f0.roa (raw, json) Hash identifier: Wkadb25bToFAHPXxWGGyLfEU2KFrKOWCvAPj+0L79nQ= Subject key identifier: 26:48:75:DE:65:5E:FE:3D:FC:42:55:DD:DC:78:22:AD:6F:C0:3C:20 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7B14542E5F4595F6C3080 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24764eef-7370-3e69-8db9-9a7d9b2c28f0.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b1:45:42:e5:f4:59:5f:6c:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=49068bc3-9ab6-49a7-bb9a-16e3e21791c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b6:60:3c:f8:5f:b0:4b:b4:c5:00:14:d5:62: 80:ee:21:ab:9b:56:1d:ba:4b:c3:92:cc:09:a8:16: 3c:15:04:5e:39:01:0a:d6:0f:d1:55:02:dc:58:7f: fd:8d:7d:21:94:cc:83:80:ff:c2:fc:a6:b0:57:9a: 61:69:10:18:3c:77:39:d6:db:0b:5d:97:4f:89:23: f5:81:fd:41:e6:ad:4c:99:98:e5:6a:4d:b9:d7:d4: cd:20:13:2a:60:c6:74:43:d3:aa:6e:a7:94:41:2e: c9:16:af:3c:1e:40:04:cf:1a:77:d2:39:a9:66:68: de:be:5c:ef:48:f4:96:9e:4e:0c:a5:d8:63:d9:47: 70:d6:0b:ee:c6:60:85:3d:22:60:0d:02:f1:cc:8f: f2:55:bf:f3:fb:e9:6e:f3:9a:ca:ae:96:b3:0a:68: 53:4c:d8:3c:81:aa:50:43:f3:df:2e:75:67:3f:92: 61:b6:8a:b2:0c:7a:e6:ab:45:f2:03:c4:1b:8a:cc: 90:5f:88:2d:f2:4a:23:ee:70:bf:11:6b:e3:ae:db: 47:f4:82:61:05:b8:ab:53:61:70:92:77:8d:64:33: 80:ad:fa:24:ba:a8:be:25:93:97:98:70:4e:ca:3c: 5a:f7:d9:7d:37:c2:7e:c1:86:9f:a0:47:e4:f6:77: cf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:48:75:DE:65:5E:FE:3D:FC:42:55:DD:DC:78:22:AD:6F:C0:3C:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24764eef-7370-3e69-8db9-9a7d9b2c28f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:f1:60:62:f0:97:82:0b:e4:51:2f:6a:a9:d5:05:76:c5:ab: 52:30:93:6b:60:0f:ce:5b:eb:6f:a8:bc:13:9b:cd:29:32:9f: 3f:19:03:68:70:3e:55:cc:f6:40:65:aa:9f:bc:14:86:e9:71: dd:d4:de:0f:c5:5e:e7:3b:b1:c2:1e:73:fb:86:ad:ed:16:bd: 05:a2:7e:7f:bc:05:df:12:0f:44:8d:b4:02:5f:86:81:44:be: d1:f2:77:76:40:00:3a:f7:cf:21:e7:2d:83:37:44:b6:8c:43: da:b7:0c:03:27:4e:64:43:18:8d:2b:10:f9:6d:e4:b0:85:1f: c2:13:6b:f2:ae:0d:67:97:b9:28:ea:8c:c4:bf:4a:c9:7a:23: 73:f6:0a:a9:96:f9:8d:be:15:52:45:de:1d:36:70:d6:8a:8a: 96:08:ca:9c:9a:f3:80:50:df:cf:f2:89:53:a4:13:e7:17:a1: d9:90:4d:64:62:be:c1:d3:49:af:aa:b9:93:64:fd:e3:cd:f0: 0a:d3:20:60:a8:1c:24:10:ca:c1:9d:89:5e:52:9c:ae:c7:47: 16:b7:a7:31:f5:d0:01:90:90:b9:b8:44:57:85:fb:15:8d:63: d5:2f:0b:32:54:46:37:d7:f0:82:c6:ad:37:5a:b7:3b:db:44: f8:82:8f:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97FFQuX0WV9sMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDkwNjhiYzMtOWFiNi00OWE3LWJiOWEtMTZlM2UyMTc5MWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibZgPPhfsEu0xQAU1WKA7iGrm1YdukvDkswJ qBY8FQReOQEK1g/RVQLcWH/9jX0hlMyDgP/C/KawV5phaRAYPHc51tsLXZdPiSP1 gf1B5q1MmZjlak2519TNIBMqYMZ0Q9OqbqeUQS7JFq88HkAEzxp30jmpZmjevlzv SPSWnk4Mpdhj2Udw1gvuxmCFPSJgDQLxzI/yVb/z++lu85rKrpazCmhTTNg8gapQ Q/PfLnVnP5JhtoqyDHrmq0XyA8QbisyQX4gt8koj7nC/EWvjrttH9IJhBbirU2Fw kneNZDOArfokuqi+JZOXmHBOyjxa99l9N8J+wYafoEfk9nfPrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZIdd5lXv49/EJV3dx4Iq1vwDwgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMjQ3NjRlZWYtNzM3MC0z ZTY5LThkYjktOWE3ZDliMmMyOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDxYGLwl4IL5FEvaqnVBXbFq1Iwk2tgD85b62+ovBObzSkynz8ZA2hw PlXM9kBlqp+8FIbpcd3U3g/FXuc7scIec/uGre0WvQWifn+8Bd8SD0SNtAJfhoFE vtHyd3ZAADr3zyHnLYM3RLaMQ9q3DAMnTmRDGI0rEPlt5LCFH8ITa/KuDWeXuSjq jMS/Ssl6I3P2CqmW+Y2+FVJF3h02cNaKipYIypya84BQ38/yiVOkE+cXodmQTWRi vsHTSa+quZNk/ePN8ArTIGCoHCQQysGdiV5SnK7HRxa3pzH10AGQkLm4RFeF+xWN Y9UvCzJURjfX8ILGrTdatzvbRPiCj/s= -----END CERTIFICATE-----Generated at Sun Oct 4 09:05:28 2026 by rpki-client