$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/42dd7f78-f74a-3426-ae4b-db716c576597.roa File: 42dd7f78-f74a-3426-ae4b-db716c576597.roa (raw, json) Hash identifier: lhl5Cw74wSDKRnGo3AYjGtT4MqcwQDzC9uwrH4EiTxQ= Subject key identifier: 65:B5:DB:BC:BE:89:8B:96:02:C7:ED:EC:4F:8E:D8:87:08:16:BA:44 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D112898F3E60CBDF2200 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/42dd7f78-f74a-3426-ae4b-db716c576597.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 397630 IP address blocks: 64.16.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d1:12:89:8f:3e:60:cb:df:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=d27d3c0c-f803-40c5-90db-b419cb8e9a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:98:f0:5e:b3:69:89:6c:21:ce:f1:15:cc:48: 21:fa:35:cf:04:66:dc:38:e6:1c:8a:53:8e:aa:d8: c7:4b:69:8e:3d:31:d6:0e:22:6f:92:4f:d3:4a:a7: d6:43:bd:c3:6a:a9:a2:f8:45:8f:15:c1:00:c6:b5: 61:c4:3e:84:2f:45:ab:05:13:e0:55:c6:94:4e:6e: 59:3b:99:bb:bd:a3:42:16:5b:49:3b:97:ff:1c:b6: 69:f1:16:3b:fe:91:8c:70:10:69:03:64:0c:8e:2c: ad:d4:5f:46:a8:8f:e4:ee:6c:ba:46:36:11:db:ae: 7c:b4:3e:99:5b:d6:26:8e:ae:b8:f8:00:45:50:8f: 1d:94:a0:32:22:a4:65:f6:d3:ff:d5:0c:f7:c0:e9: d5:87:c2:da:28:94:3f:58:4a:94:b5:b2:30:23:4b: b1:31:fb:2b:09:8e:51:0b:d8:8d:8c:e8:e5:01:11: 84:4f:66:04:25:1e:b3:5c:44:36:c5:52:78:6a:13: 26:39:3e:b6:a6:23:69:ab:9a:83:b9:b0:5b:78:ff: 14:86:09:b3:01:96:1e:1d:86:17:2b:b9:fc:d5:47: eb:ae:ce:c6:26:61:90:56:ee:16:64:a8:4f:4d:14: 46:2f:b2:04:e7:c3:4e:6c:3b:55:70:21:f2:65:cb: 81:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B5:DB:BC:BE:89:8B:96:02:C7:ED:EC:4F:8E:D8:87:08:16:BA:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/42dd7f78-f74a-3426-ae4b-db716c576597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:64:75:c2:53:e0:44:85:29:da:96:d2:f3:94:59:de:d3:00: d7:b3:c2:1b:8e:f9:04:9c:57:1c:43:0f:7d:0d:4f:01:58:c2: 1a:ff:3e:de:bc:95:94:45:63:39:74:f2:ed:9d:45:8c:12:8a: b7:66:e8:c4:26:86:88:5c:a1:69:bd:fc:2f:7d:7f:2d:25:44: f9:c0:12:49:21:1a:8c:fd:16:51:4e:3d:be:da:c0:f0:c8:56: 54:02:d6:48:93:79:ba:83:8f:32:f7:fb:18:97:69:9d:a9:ad: 34:8a:96:01:7f:42:93:dc:03:a5:11:30:df:57:25:f5:13:52: b5:73:c4:8b:5f:87:01:d3:f4:00:1a:df:7e:da:e3:37:9c:27: c1:98:2e:e4:c2:56:33:c5:41:65:c7:4f:3d:c6:83:df:7b:d2: 68:7d:0b:8f:b9:9a:15:74:d2:95:47:a1:4e:ad:0b:d7:dc:1a: ac:ff:5b:f7:82:ba:50:71:9b:52:bf:6b:68:72:38:11:84:36: f0:45:9a:b0:bd:f3:73:b1:64:6a:3c:0e:51:a1:95:9a:68:0b: c6:28:a6:2a:9d:49:f2:db:eb:5f:2e:46:42:8e:a2:b1:7e:38: b2:38:7d:2c:8b:b3:25:11:81:53:7d:0d:0c:9a:43:cd:f5:a0: 85:71:92:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99ESiY8+YMvfIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZDI3ZDNjMGMtZjgwMy00MGM1LTkwZGItYjQxOWNiOGU5YTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJjwXrNpiWwhzvEVzEgh+jXPBGbcOOYcilOO qtjHS2mOPTHWDiJvkk/TSqfWQ73Daqmi+EWPFcEAxrVhxD6EL0WrBRPgVcaUTm5Z O5m7vaNCFltJO5f/HLZp8RY7/pGMcBBpA2QMjiyt1F9GqI/k7my6RjYR2658tD6Z W9Ymjq64+ABFUI8dlKAyIqRl9tP/1Qz3wOnVh8LaKJQ/WEqUtbIwI0uxMfsrCY5R C9iNjOjlARGET2YEJR6zXEQ2xVJ4ahMmOT62piNpq5qDubBbeP8UhgmzAZYeHYYX K7n81Ufrrs7GJmGQVu4WZKhPTRRGL7IE58NObDtVcCHyZcuBPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGW127y+iYuWAsft7E+O2IcIFrpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNDJkZDdmNzgtZjc0YS0z NDI2LWFlNGItZGI3MTZjNTc2NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFkdcJT4ESFKdqW0vOUWd7TANezwhuO+QScVxxDD30NTwFYwhr/Pt68 lZRFYzl08u2dRYwSirdm6MQmhohcoWm9/C99fy0lRPnAEkkhGoz9FlFOPb7awPDI VlQC1kiTebqDjzL3+xiXaZ2prTSKlgF/QpPcA6URMN9XJfUTUrVzxItfhwHT9AAa 337a4zecJ8GYLuTCVjPFQWXHTz3Gg9970mh9C4+5mhV00pVHoU6tC9fcGqz/W/eC ulBxm1K/a2hyOBGENvBFmrC983OxZGo8DlGhlZpoC8YopiqdSfLb618uRkKOorF+ OLI4fSyLsyURgVN9DQyaQ831oIVxkv0= -----END CERTIFICATE-----Generated at Sun Oct 11 08:15:36 2026 by rpki-client