$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a63331ea-2a3e-3d8b-bee2-af4238ec937c.roa File: a63331ea-2a3e-3d8b-bee2-af4238ec937c.roa (raw, json) Hash identifier: 6RB9tOSJAfWyJ0jydPkC3SOdPVebQ81ceE7yx7++7NE= Subject key identifier: BE:46:AB:AF:C2:8C:A6:56:30:9D:13:C3:2D:05:92:43:57:C7:F8:49 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7CC59A539F20BB8FF2280 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a63331ea-2a3e-3d8b-bee2-af4238ec937c.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cc:59:a5:39:f2:0b:b8:ff:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=fb7501a2-3202-4465-bd83-daf98aa6209e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cd:0d:64:d8:cf:c0:e8:a1:e8:1a:7a:88:1b: 08:b4:60:28:dd:d7:de:a2:c2:14:91:76:07:ed:d9: 17:82:1e:19:42:18:3e:e6:90:c2:ff:74:f8:9b:3d: 17:b1:57:d6:8f:06:16:ed:32:db:f6:22:5f:5f:24: 0b:aa:a0:ad:4d:f7:8a:7f:b8:fa:90:54:af:7a:ed: 7a:08:b1:ce:2f:ae:eb:e9:dc:73:de:73:66:58:78: 65:6a:da:8c:2f:07:72:5e:26:45:10:00:b7:c2:5d: 4c:f5:c6:d3:31:1e:3e:1c:88:5c:3c:3b:8c:4e:72: 13:d1:02:fb:9c:9d:1b:d2:11:46:74:eb:65:0a:64: 64:a5:6c:c0:c7:76:5d:3b:20:28:fc:86:50:ee:92: 9e:5c:d1:fa:ba:a2:28:81:48:49:d3:84:38:6d:6b: e0:23:34:34:53:17:6f:a7:b7:cf:e8:f0:bc:d9:a4: 6a:fa:31:58:0d:ac:d3:3e:28:1e:c2:c0:39:da:04: 4f:9b:ec:5c:58:e8:ee:23:65:a9:54:75:32:df:bb: 9f:93:a1:07:69:b8:ad:e8:a3:fa:4c:83:e7:58:d7: c4:ca:f3:53:af:16:1b:b1:4a:53:c1:7f:1d:6d:ee: 67:e9:ec:bf:64:32:e9:23:e6:54:4b:db:96:50:82: 32:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:46:AB:AF:C2:8C:A6:56:30:9D:13:C3:2D:05:92:43:57:C7:F8:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a63331ea-2a3e-3d8b-bee2-af4238ec937c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:83:1c:fb:2d:aa:d0:67:04:d6:20:2b:af:53:a9:d3:c1:24: 1a:93:1b:5e:96:18:34:1a:7e:80:d2:61:fb:3f:51:c1:83:0b: ca:69:46:c9:04:dd:77:9f:07:d7:d3:69:23:0f:7b:ea:08:8b: 40:5b:79:3a:0e:af:93:22:68:a0:cd:c6:c8:b2:0d:33:44:78: bc:6c:d4:0e:41:d4:3d:aa:6a:1c:89:ad:be:ce:b7:1d:bf:73: c2:85:65:c8:01:1c:a1:b8:7a:a5:a1:aa:29:fc:fc:1e:e9:f6: 5e:39:64:80:7c:4c:52:cf:c9:e3:b1:d1:25:7f:31:0e:b8:a0: 4c:24:41:5f:96:69:31:2b:dd:2f:75:a7:6e:df:4a:50:a0:a8: 97:21:b9:ee:c2:b3:56:c3:41:e4:3f:2b:da:33:a3:1b:ab:f0: 6b:b4:29:8e:dd:81:58:f3:0c:50:26:07:54:12:2e:c8:94:5d: 47:64:2e:93:73:58:6d:16:e8:9d:78:dd:3c:2c:f9:9c:e7:2b: 9b:d7:27:f0:5f:5b:08:06:3f:26:2c:f0:68:75:45:48:94:c4: e1:1a:fe:50:b3:41:30:7b:92:a0:7e:c6:be:74:c8:27:a6:65: 7f:49:2f:62:67:cf:6f:03:8c:7f:17:7c:7d:ba:55:15:93:b5: 6c:8b:09:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98xZpTnyC7j/IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZmI3NTAxYTItMzIwMi00NDY1LWJkODMtZGFmOThhYTYyMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M0NZNjPwOih6Bp6iBsItGAo3dfeosIUkXYH 7dkXgh4ZQhg+5pDC/3T4mz0XsVfWjwYW7TLb9iJfXyQLqqCtTfeKf7j6kFSveu16 CLHOL67r6dxz3nNmWHhlatqMLwdyXiZFEAC3wl1M9cbTMR4+HIhcPDuMTnIT0QL7 nJ0b0hFGdOtlCmRkpWzAx3ZdOyAo/IZQ7pKeXNH6uqIogUhJ04Q4bWvgIzQ0Uxdv p7fP6PC82aRq+jFYDazTPigewsA52gRPm+xcWOjuI2WpVHUy37ufk6EHabit6KP6 TIPnWNfEyvNTrxYbsUpTwX8dbe5n6ey/ZDLpI+ZUS9uWUIIy8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5Gq6/CjKZWMJ0Twy0FkkNXx/hJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTYzMzMxZWEtMmEzZS0z ZDhiLWJlZTItYWY0MjM4ZWM5MzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGDHPstqtBnBNYgK69TqdPBJBqTG16WGDQafoDSYfs/UcGDC8ppRskE 3XefB9fTaSMPe+oIi0BbeToOr5MiaKDNxsiyDTNEeLxs1A5B1D2qahyJrb7Otx2/ c8KFZcgBHKG4eqWhqin8/B7p9l45ZIB8TFLPyeOx0SV/MQ64oEwkQV+WaTEr3S91 p27fSlCgqJchue7Cs1bDQeQ/K9ozoxur8Gu0KY7dgVjzDFAmB1QSLsiUXUdkLpNz WG0W6J143Tws+ZznK5vXJ/BfWwgGPyYs8Gh1RUiUxOEa/lCzQTB7kqB+xr50yCem ZX9JL2Jnz28DjH8XfH26VRWTtWyLCeQ= -----END CERTIFICATE-----Generated at Mon Sep 21 21:26:53 2026 by rpki-client