$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/023faff8-2743-302d-a9b7-559f261a706f.roa File: 023faff8-2743-302d-a9b7-559f261a706f.roa (raw, json) Hash identifier: hv84oBsL4mx5TJB3d47JwetU/JKgd1UtKCX2bodmXfw= Subject key identifier: F2:E5:01:B6:E6:39:8F:04:E1:40:48:43:E8:B0:7A:3E:88:42:99:5B Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DA8C491EDC2B49B1C380 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/023faff8-2743-302d-a9b7-559f261a706f.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:da:8c:49:1e:dc:2b:49:b1:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=1548d119-3333-493e-af21-f5d511444f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a2:ba:4b:50:21:fa:fa:29:58:03:43:bd:74: 4a:2a:af:e0:18:97:15:6f:df:e8:ae:b9:8e:9d:2a: 2e:42:4d:a0:43:20:1f:58:7e:f9:27:71:85:ea:b5: c1:ac:c7:c3:20:18:29:48:5d:16:09:47:c0:fa:b0: a0:15:30:d0:dc:16:74:89:fb:5e:9b:65:1b:ab:c3: 5b:be:c2:60:c0:cc:17:42:b1:b1:7c:8b:65:83:21: 10:ad:12:7a:cc:12:4e:bf:3d:68:1c:8c:1b:bc:d3: 71:2d:bb:c7:5c:2f:22:65:98:02:b3:9b:ca:c9:9b: 08:fd:2d:4c:06:26:49:24:ab:2e:ff:44:21:da:22: bb:6c:62:c8:48:29:1e:db:72:19:89:db:72:a0:f8: 6c:61:3d:be:a4:6b:7e:38:91:f2:1a:ae:b8:d0:75: ff:d1:cf:2f:23:ef:07:17:b0:55:b5:1a:91:ba:9a: ee:42:6c:33:da:f8:4e:23:f0:07:28:b1:55:a0:4f: 41:02:98:37:88:55:7f:7d:77:28:da:27:f6:47:cd: c9:09:cb:85:ff:b2:72:da:26:5d:59:0d:1c:e0:4e: 1f:cd:d2:6b:48:99:2b:6c:27:b2:b6:b7:49:88:ec: 70:40:44:dc:6a:15:cf:bb:bd:32:21:3b:b2:c3:3a: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E5:01:B6:E6:39:8F:04:E1:40:48:43:E8:B0:7A:3E:88:42:99:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/023faff8-2743-302d-a9b7-559f261a706f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:19:38:7d:54:6d:e7:b2:31:5b:0c:53:38:19:6f:37:94:d3: 34:b9:eb:22:9e:8a:f0:69:69:83:5b:54:05:34:26:c2:c0:b8: 7e:3c:b8:30:77:c9:90:de:4c:d2:53:10:78:5f:3c:fd:52:82: 62:48:c7:03:3e:df:f3:3b:0e:b7:03:84:9a:e6:20:24:2d:fc: c8:0d:19:39:20:c7:09:bb:7e:c2:18:14:1c:46:2f:17:2d:ef: 8c:5e:c8:12:19:6b:a2:0e:18:6e:fc:60:03:07:a8:69:8c:ae: 2f:6d:63:71:a0:5d:9c:43:b9:80:92:f5:db:6b:5c:ba:d4:29: cf:4d:4d:35:98:10:1f:ef:18:39:e1:d5:2a:75:21:05:68:71: d3:27:c0:92:eb:03:2f:35:f1:3d:29:9a:ed:00:09:b4:7b:d9: 20:8b:25:47:85:16:4a:23:48:a5:8a:f0:97:e4:41:0f:48:85: 3a:58:83:c7:a0:d5:92:d5:35:fe:bb:d2:a3:7f:dc:ee:29:dc: 31:91:3a:4c:f1:08:62:5a:1f:f5:5b:62:8f:93:d4:c0:c1:68: 0e:ea:c5:89:80:29:38:f1:c8:a6:e1:4f:cb:a5:bc:cf:88:04: 6c:b7:ab:55:20:29:13:1b:be:8b:7a:af:6c:84:1b:52:6f:58: 29:ea:91:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNqMSR7cK0mxw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MTU0OGQxMTktMzMzMy00OTNlLWFmMjEtZjVkNTExNDQ0ZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKK6S1Ah+vopWANDvXRKKq/gGJcVb9/orrmO nSouQk2gQyAfWH75J3GF6rXBrMfDIBgpSF0WCUfA+rCgFTDQ3BZ0iftem2Ubq8Nb vsJgwMwXQrGxfItlgyEQrRJ6zBJOvz1oHIwbvNNxLbvHXC8iZZgCs5vKyZsI/S1M BiZJJKsu/0Qh2iK7bGLISCke23IZidtyoPhsYT2+pGt+OJHyGq640HX/0c8vI+8H F7BVtRqRupruQmwz2vhOI/AHKLFVoE9BApg3iFV/fXco2if2R83JCcuF/7Jy2iZd WQ0c4E4fzdJrSJkrbCeytrdJiOxwQETcahXPu70yITuywzplaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLlAbbmOY8E4UBIQ+iwej6IQplbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMDIzZmFmZjgtMjc0My0z MDJkLWE5YjctNTU5ZjI2MWE3MDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIZOH1UbeeyMVsMUzgZbzeU0zS56yKeivBpaYNbVAU0JsLAuH48uDB3 yZDeTNJTEHhfPP1SgmJIxwM+3/M7DrcDhJrmICQt/MgNGTkgxwm7fsIYFBxGLxct 74xeyBIZa6IOGG78YAMHqGmMri9tY3GgXZxDuYCS9dtrXLrUKc9NTTWYEB/vGDnh 1Sp1IQVocdMnwJLrAy818T0pmu0ACbR72SCLJUeFFkojSKWK8JfkQQ9IhTpYg8eg 1ZLVNf670qN/3O4p3DGROkzxCGJaH/VbYo+T1MDBaA7qxYmAKTjxyKbhT8ulvM+I BGy3q1UgKRMbvot6r2yEG1JvWCnqkXM= -----END CERTIFICATE-----Generated at Tue Jul 21 01:41:16 2026 by rpki-client