$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30f18138-c1ab-36d7-991d-784dd997e256.roa File: 30f18138-c1ab-36d7-991d-784dd997e256.roa (raw, json) Hash identifier: h/UXH3kVW+bMIpYYHMSyW4AVinWRVvUHNGlG/edsLlU= Subject key identifier: 63:9E:53:F0:68:A3:8A:71:A5:57:C4:BC:A7:C3:15:E9:C2:FB:4A:85 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D1A70C561E3B4A3A60A0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30f18138-c1ab-36d7-991d-784dd997e256.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d1:a7:0c:56:1e:3b:4a:3a:60:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=007e69b8-972a-4d5f-a2d2-faffa42208a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b8:09:62:16:00:72:53:34:c5:6b:fb:82:2d: 08:11:6c:b6:55:d7:04:d8:68:34:d5:9d:f4:50:b4: d8:70:a6:dd:31:7b:f0:e8:c2:67:1e:f1:07:ae:b1: 06:04:9b:d9:bb:05:36:78:9f:5c:39:a3:14:2c:b4: 26:a0:13:05:f6:ee:06:a6:19:59:3f:ec:ab:ad:56: 92:5b:41:3d:52:6d:a0:58:e0:f3:6d:76:3f:f7:52: ef:d7:4a:e4:b6:84:81:5d:73:05:69:9f:61:e5:ed: 36:1d:be:f7:21:24:e7:2d:29:2f:94:e1:35:f9:4a: 0b:0e:39:6c:01:20:4a:86:ae:9b:4d:e5:a0:0f:4e: 02:2a:04:7c:7e:d2:57:b7:15:1d:59:13:f2:cc:7c: cb:8f:b2:cc:35:cf:a1:28:17:ab:22:e0:d1:90:b4: 59:0e:40:13:6c:75:1f:1d:f6:a7:8e:1e:42:b9:52: 2f:b1:40:85:fc:65:8a:10:07:db:1d:e3:3f:18:a3: d2:8a:8f:32:7a:48:c6:dd:d7:de:6e:a2:49:e8:49: 2c:94:76:80:d1:61:87:b7:87:3f:5e:ed:2e:8b:b6: b1:3f:fa:37:67:a6:18:cc:41:b7:02:a6:db:29:e2: 54:08:d9:a6:4f:37:24:39:c6:db:e6:dd:1c:fa:26: 9f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9E:53:F0:68:A3:8A:71:A5:57:C4:BC:A7:C3:15:E9:C2:FB:4A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30f18138-c1ab-36d7-991d-784dd997e256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:1b:eb:d0:eb:ce:de:55:25:63:06:9a:7e:5b:75:f8:8f:3f: 66:b7:a3:34:5a:ee:08:61:59:20:13:7b:91:67:31:17:a5:45: 19:0d:43:1e:0e:19:22:c3:c2:8c:69:4c:d5:6c:b1:23:2e:d0: 0b:eb:47:63:62:a6:c2:3c:c6:23:6b:b4:8b:38:96:5d:fc:2f: 12:48:40:11:3b:0d:1a:3c:3c:28:f7:ea:81:04:18:db:1a:97: 9c:f4:fc:70:50:f3:54:d7:86:82:48:15:44:ea:00:82:89:0d: f0:70:48:c4:d6:de:c7:61:90:49:07:e8:e9:a2:6d:92:33:0e: 2b:98:ca:30:03:2e:e1:46:a4:9b:02:72:c3:85:57:11:c4:57: 62:96:fe:60:1e:fb:0c:64:a9:ab:e5:44:99:c2:5e:ca:06:e6: 7a:fa:52:39:20:f8:d5:50:f9:10:27:dc:7a:d7:80:c3:6e:19: 88:67:70:c7:5b:54:ae:03:15:f8:39:ae:1a:c7:40:76:ec:34: f4:70:f0:e1:6a:0b:d8:4a:2a:f6:a4:2a:94:66:b1:9f:22:a0: 73:4f:f1:cf:a4:5d:76:62:33:64:3c:ef:f7:81:06:02:a4:81: 4a:da:35:5f:fd:da:6d:a7:07:cd:27:9d:97:75:9b:32:95:89: e6:63:16:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99GnDFYeO0o6YKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MDA3ZTY5YjgtOTcyYS00ZDVmLWEyZDItZmFmZmE0MjIwOGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbgJYhYAclM0xWv7gi0IEWy2VdcE2Gg01Z30 ULTYcKbdMXvw6MJnHvEHrrEGBJvZuwU2eJ9cOaMULLQmoBMF9u4GphlZP+yrrVaS W0E9Um2gWODzbXY/91Lv10rktoSBXXMFaZ9h5e02Hb73ISTnLSkvlOE1+UoLDjls ASBKhq6bTeWgD04CKgR8ftJXtxUdWRPyzHzLj7LMNc+hKBerIuDRkLRZDkATbHUf Hfanjh5CuVIvsUCF/GWKEAfbHeM/GKPSio8yekjG3dfebqJJ6EkslHaA0WGHt4c/ Xu0ui7axP/o3Z6YYzEG3AqbbKeJUCNmmTzckOcbb5t0c+iafwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOeU/Boo4pxpVfEvKfDFenC+0qFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMzBmMTgxMzgtYzFhYi0z NmQ3LTk5MWQtNzg0ZGQ5OTdlMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEb69Drzt5VJWMGmn5bdfiPP2a3ozRa7ghhWSATe5FnMRelRRkNQx4O GSLDwoxpTNVssSMu0AvrR2NipsI8xiNrtIs4ll38LxJIQBE7DRo8PCj36oEEGNsa l5z0/HBQ81TXhoJIFUTqAIKJDfBwSMTW3sdhkEkH6OmibZIzDiuYyjADLuFGpJsC csOFVxHEV2KW/mAe+wxkqavlRJnCXsoG5nr6Ujkg+NVQ+RAn3HrXgMNuGYhncMdb VK4DFfg5rhrHQHbsNPRw8OFqC9hKKvakKpRmsZ8ioHNP8c+kXXZiM2Q87/eBBgKk gUraNV/92m2nB80nnZd1mzKVieZjFk0= -----END CERTIFICATE-----Generated at Sun Oct 4 22:49:35 2026 by rpki-client