$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/92f1f690-e40d-3a98-905a-901c5e50c2f8.roa File: 92f1f690-e40d-3a98-905a-901c5e50c2f8.roa (raw, json) Hash identifier: 5x1sCBkANvxYlCu7V5pqFYZ8DVmX2x5V+xPK8AOGFBg= Subject key identifier: 20:D0:36:CD:C4:EF:4F:CC:6F:76:55:C3:4B:15:F2:02:31:7E:1B:5E Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D486BA2DA73E7CDC6F00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/92f1f690-e40d-3a98-905a-901c5e50c2f8.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d4:86:ba:2d:a7:3e:7c:dc:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=68f9f1b5-2592-478f-a227-60611037b094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4e:a9:da:0b:3c:05:0f:90:f8:75:83:8b:ae: df:87:8b:32:bf:cc:df:b1:dc:1a:b0:f1:9e:ab:7a: 84:48:fe:2b:a4:ea:fa:e6:ed:4a:70:02:a5:05:b2: a4:b3:ff:56:57:86:3b:d0:1d:a4:b0:95:fe:41:86: aa:ca:7b:e1:4b:cf:a0:77:bc:75:87:31:9f:cd:08: dd:39:03:f7:3a:0f:23:12:1e:17:62:bb:36:c5:65: 0d:ea:f1:23:9e:42:68:9e:2a:f2:c1:64:eb:77:c8: 92:05:99:c0:94:09:46:be:61:d3:5c:a7:b9:71:a2: 07:d7:f9:a4:51:ee:e3:af:55:b8:13:af:2d:e2:57: 60:3c:19:eb:5c:b4:90:6b:e3:6d:e0:4b:dd:61:6a: c0:0c:0d:da:39:39:2b:1e:5f:60:67:e5:41:9a:b1: aa:53:49:69:cb:3d:19:36:ed:cd:cc:78:44:30:6e: 1d:6f:ab:e2:13:dc:bd:57:11:49:01:0d:58:d1:c3: 30:a4:68:84:67:ea:67:e3:73:83:4f:5a:5a:87:97: d5:6f:99:d4:92:d2:f5:d5:cd:3d:2a:a6:a0:bb:b1: 48:74:64:9f:c6:f9:d5:2a:f6:79:28:f1:23:d6:6b: 6e:af:f8:ed:ff:a8:fa:fc:31:da:90:1c:d4:53:e5: 04:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D0:36:CD:C4:EF:4F:CC:6F:76:55:C3:4B:15:F2:02:31:7E:1B:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/92f1f690-e40d-3a98-905a-901c5e50c2f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:19:3c:0c:8c:e6:d2:2f:3d:32:eb:be:df:e7:7b:d7:89:d4: 89:c5:2c:e3:8c:dd:00:0e:67:19:9f:db:24:d9:9f:82:47:fb: ef:6e:70:de:4a:d1:59:eb:7c:5c:e9:90:f3:af:3b:db:a2:c6: ad:b6:44:79:92:c3:b7:d3:f1:82:d5:40:cf:51:47:ee:03:07: 52:ec:24:f4:1c:dd:c9:76:67:24:6f:e8:87:19:86:d5:bd:85: 28:47:04:ea:94:12:6a:2f:63:a5:c7:d3:da:83:c0:98:e4:08: ad:7d:ff:bc:b3:a6:7a:db:13:2f:fc:5f:58:f8:ee:d4:3c:b3: 94:fe:b1:89:81:de:28:ba:be:b5:da:34:c2:35:92:4c:2a:a6: 1e:6e:34:95:01:7e:25:31:59:05:d3:9d:14:de:31:96:bf:d0: 48:81:f8:2e:0b:39:75:c4:e6:0a:51:ca:54:6a:48:5d:7f:ec: ce:8d:5b:a7:c6:a7:0a:df:c3:aa:b5:77:89:46:d8:29:df:10: 67:74:14:5e:b7:10:5e:97:07:b2:00:db:0a:31:fc:8e:c6:28: 81:4d:60:ae:58:07:1c:dd:5d:0c:17:ef:e2:14:d6:34:88:f7: 06:b4:63:71:5b:0c:1f:e6:50:19:0d:33:3f:c5:c0:b7:86:73: f3:da:6c:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99SGui2nPnzcbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NjhmOWYxYjUtMjU5Mi00NzhmLWEyMjctNjA2MTEwMzdiMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU6p2gs8BQ+Q+HWDi67fh4syv8zfsdwasPGe q3qESP4rpOr65u1KcAKlBbKks/9WV4Y70B2ksJX+QYaqynvhS8+gd7x1hzGfzQjd OQP3Og8jEh4XYrs2xWUN6vEjnkJonirywWTrd8iSBZnAlAlGvmHTXKe5caIH1/mk Ue7jr1W4E68t4ldgPBnrXLSQa+Nt4EvdYWrADA3aOTkrHl9gZ+VBmrGqU0lpyz0Z Nu3NzHhEMG4db6viE9y9VxFJAQ1Y0cMwpGiEZ+pn43ODT1pah5fVb5nUktL11c09 Kqagu7FIdGSfxvnVKvZ5KPEj1mtur/jt/6j6/DHakBzUU+UE1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDQNs3E70/Mb3ZVw0sV8gIxfhteMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOTJmMWY2OTAtZTQwZC0z YTk4LTkwNWEtOTAxYzVlNTBjMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAZPAyM5tIvPTLrvt/ne9eJ1InFLOOM3QAOZxmf2yTZn4JH++9ucN5K 0VnrfFzpkPOvO9uixq22RHmSw7fT8YLVQM9RR+4DB1LsJPQc3cl2ZyRv6IcZhtW9 hShHBOqUEmovY6XH09qDwJjkCK19/7yzpnrbEy/8X1j47tQ8s5T+sYmB3ii6vrXa NMI1kkwqph5uNJUBfiUxWQXTnRTeMZa/0EiB+C4LOXXE5gpRylRqSF1/7M6NW6fG pwrfw6q1d4lG2CnfEGd0FF63EF6XB7IA2wox/I7GKIFNYK5YBxzdXQwX7+IU1jSI 9wa0Y3FbDB/mUBkNMz/FwLeGc/PabIY= -----END CERTIFICATE-----Generated at Sun Sep 20 16:02:41 2026 by rpki-client