$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ee337bec-1416-3f18-a9d5-4e91fec244c1.roa File: ee337bec-1416-3f18-a9d5-4e91fec244c1.roa (raw, json) Hash identifier: PVSwI+kwDKxFHXtWvwcrkGB+34QIQttcr5n0yvC9VGk= Subject key identifier: 1F:AF:1A:FD:77:7B:DA:10:FA:08:CF:F3:AD:69:0D:5D:65:C8:9A:C7 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584F20F7D2033C0A80B6FAF23280 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ee337bec-1416-3f18-a9d5-4e91fec244c1.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20001 IP address blocks: 64.16.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d2:03:3c:0a:80:b6:fa:f2:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=0ffd14c4-eeb5-4f6a-bedd-67ca94c54fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:87:c7:a1:0a:58:76:ff:44:4f:04:72:77: 15:13:5c:b0:11:5a:95:7a:d7:41:96:05:8e:f4:c1: 5c:16:d6:4b:f6:1b:1d:50:43:06:56:57:cd:01:8c: ca:f3:8e:09:8c:df:f4:60:e2:97:e4:99:69:78:be: cb:9f:23:85:3f:47:e4:28:e1:c8:84:fb:6c:66:c2: 3b:46:6f:9c:a7:6c:76:de:f5:56:22:39:d0:28:1a: e5:03:ec:35:97:55:b7:8f:7a:a4:96:06:e3:30:d2: 90:d5:dd:da:52:ab:38:31:01:4e:eb:72:7c:ca:4e: 5a:8e:17:fa:93:60:b1:c2:20:07:21:e1:c1:51:4e: 89:d0:58:3c:5f:09:95:eb:9f:c0:09:86:cb:38:38: 14:75:64:a7:6b:7e:73:25:6f:f1:d7:c8:4e:4d:eb: 31:f0:39:8f:3a:a8:46:ec:01:99:c2:9b:cb:dc:19: 32:66:14:8b:72:8b:dc:46:5b:2b:de:94:ab:14:b0: 44:62:3e:80:30:ec:83:6a:ad:37:9c:dc:1e:f8:cd: 60:79:02:55:e0:91:44:1c:15:1f:57:bc:0e:8c:9b: 35:4c:ac:c4:87:9a:ec:c2:4b:8d:f8:00:9f:46:d5: d1:3d:6a:0a:6d:c2:b0:25:6d:60:a5:b0:88:30:22: 31:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AF:1A:FD:77:7B:DA:10:FA:08:CF:F3:AD:69:0D:5D:65:C8:9A:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ee337bec-1416-3f18-a9d5-4e91fec244c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:b9:d9:14:99:1e:c8:0f:98:ba:17:33:c0:ff:84:1d:21:01: 70:90:d0:36:66:ee:d9:41:c4:c9:88:00:7a:7b:13:ec:65:b3: e6:b9:d3:7e:24:56:62:6a:7d:84:a4:7a:b0:92:cb:27:33:01: 22:13:60:9a:75:9b:85:02:8b:bc:e3:ad:62:44:c7:77:60:32: 23:26:f7:64:0b:b4:14:2a:7e:4c:ae:97:b0:b8:51:fb:d0:26: b0:65:d6:af:20:83:e9:6a:bd:55:a3:ec:23:c3:fb:12:b7:ef: 38:61:a5:48:bf:e7:39:7c:7d:0d:f3:b7:84:51:bf:cf:9f:28: c0:c2:c7:c4:e6:bb:1c:b3:57:ab:4a:e3:cf:39:50:4e:0d:88: 40:3a:db:1e:a0:2f:1c:c9:74:53:54:7e:07:43:08:ee:c6:0e: ec:4e:ee:c1:e4:fe:be:ed:2d:1d:ba:2a:9e:7c:0f:14:2e:be: bb:83:a0:07:5f:6c:f1:27:47:17:ce:f4:dc:ca:35:d3:e4:35: 6c:85:f7:5f:2a:da:eb:62:6c:62:e6:f1:f8:3f:4f:f9:b9:3f: 01:75:bb:45:fa:35:13:05:03:c6:1a:d0:4b:6f:3a:f6:c4:62: dd:13:42:51:41:5b:2b:a5:64:d7:bd:6c:70:98:01:2a:69:69: 44:fc:ae:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99IDPAqAtvryMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MGZmZDE0YzQtZWViNS00ZjZhLWJlZGQtNjdjYTk0YzU0ZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdaHx6EKWHb/RE8EcncVE1ywEVqVetdBlgWO 9MFcFtZL9hsdUEMGVlfNAYzK844JjN/0YOKX5JlpeL7LnyOFP0fkKOHIhPtsZsI7 Rm+cp2x23vVWIjnQKBrlA+w1l1W3j3qklgbjMNKQ1d3aUqs4MQFO63J8yk5ajhf6 k2CxwiAHIeHBUU6J0Fg8XwmV65/ACYbLODgUdWSna35zJW/x18hOTesx8DmPOqhG 7AGZwpvL3BkyZhSLcovcRlsr3pSrFLBEYj6AMOyDaq03nNwe+M1geQJV4JFEHBUf V7wOjJs1TKzEh5rswkuN+ACfRtXRPWoKbcKwJW1gpbCIMCIxxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+vGv13e9oQ+gjP861pDV1lyJrHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWUzMzdiZWMtMTQxNi0z ZjE4LWE5ZDUtNGU5MWZlYzI0NGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJy52RSZHsgPmLoXM8D/hB0hAXCQ0DZm7tlBxMmIAHp7E+xls+a5034k VmJqfYSkerCSyyczASITYJp1m4UCi7zjrWJEx3dgMiMm92QLtBQqfkyul7C4UfvQ JrBl1q8gg+lqvVWj7CPD+xK37zhhpUi/5zl8fQ3zt4RRv8+fKMDCx8TmuxyzV6tK 4885UE4NiEA62x6gLxzJdFNUfgdDCO7GDuxO7sHk/r7tLR26Kp58DxQuvruDoAdf bPEnRxfO9NzKNdPkNWyF918q2utibGLm8fg/T/m5PwF1u0X6NRMFA8Ya0EtvOvbE Yt0TQlFBWyulZNe9bHCYASppaUT8rlc= -----END CERTIFICATE-----Generated at Tue Sep 22 06:39:44 2026 by rpki-client