$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/024fa3b2-2825-3cfc-b328-0c4c1b412f52.roa File: 024fa3b2-2825-3cfc-b328-0c4c1b412f52.roa (raw, json) Hash identifier: c5Yy17wtsKg5sZ9vm7P0rNxMna7arDk7aaJB+RdL7Bs= Subject key identifier: D1:C3:4B:49:0E:2B:A4:BD:37:BA:75:32:73:2E:9E:3B:AA:19:3F:A1 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D753BD7C275CBB2DCB40 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/024fa3b2-2825-3cfc-b328-0c4c1b412f52.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d7:53:bd:7c:27:5c:bb:2d:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=fccd310d-4311-428e-a65b-6b3882bd65be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:ad:9c:65:62:12:55:06:24:1e:80:7f:df: c4:d5:4e:73:c8:ab:f4:06:5f:ef:09:6f:80:ba:6f: af:1b:51:c0:c0:6c:42:e4:78:db:ad:66:b6:ed:13: ce:39:06:41:0c:83:c5:65:70:55:29:68:0e:d1:4a: d8:75:4f:2e:07:97:ab:4c:35:53:47:90:60:85:c8: a6:bb:9a:c2:06:9f:4e:8f:f2:03:b0:f6:02:01:fb: b4:33:35:8d:f6:b9:57:5f:76:16:74:de:5e:1f:98: 20:c7:c4:2f:15:7c:6e:35:3b:40:55:4d:a1:7d:89: 94:44:93:18:79:48:5c:9e:1e:43:81:44:11:1c:99: 91:06:84:36:f8:87:85:34:b7:f8:dd:e8:8b:94:dc: c4:f7:f6:f2:85:db:75:72:e2:e4:be:40:19:5e:ff: 29:46:16:0d:96:e9:dd:9e:d4:f1:03:b7:f9:cb:0c: 05:31:d4:92:cc:0c:ce:9f:0b:f8:c6:15:5f:e6:93: e3:c8:ef:b2:c5:83:a7:61:7a:a3:f9:5a:18:62:87: 47:25:4d:ac:24:e7:1c:4e:85:77:69:01:ae:bc:f8: 08:0c:11:cd:0a:e8:65:7d:63:4a:96:ed:de:aa:b0: e0:23:51:ea:0d:94:a9:7e:08:d7:90:5b:d7:55:53: 66:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C3:4B:49:0E:2B:A4:BD:37:BA:75:32:73:2E:9E:3B:AA:19:3F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/024fa3b2-2825-3cfc-b328-0c4c1b412f52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:11:1f:7f:6a:5f:da:5a:be:6b:2d:22:db:3c:d1:06:5c:92: 40:9b:78:9f:e1:9d:be:7a:0c:93:f8:1a:f9:56:b3:6a:a2:48: 48:68:90:85:c2:09:41:f4:cd:7d:29:63:44:b4:74:a4:91:bf: dd:06:c5:67:a8:02:74:c6:fa:7b:e5:9b:6b:b5:d8:0d:17:fd: 14:2e:40:12:a2:a8:74:4c:95:fd:7a:2e:01:36:c6:6c:04:6b: 68:73:b7:7c:fa:1d:77:02:a3:ba:15:af:fd:53:47:3c:24:1f: bc:b1:a6:20:89:11:d9:a4:52:a8:74:b5:0b:32:e2:75:0e:16: 6b:11:07:98:9a:8b:0f:1d:46:5b:a3:38:a2:41:ae:df:3c:fa: ea:d4:f8:7d:9b:a7:e5:e6:c8:e3:f7:57:35:73:f7:49:0d:37: ae:c1:41:a6:f8:56:55:77:0e:59:af:e0:49:e0:37:55:2c:6b: 69:c8:64:a7:53:a7:49:fb:0b:01:b9:1b:fd:32:d5:a3:a0:4f: 00:12:e3:21:d0:58:59:f9:0f:7d:cb:7f:54:a3:26:9c:68:8c: 40:fc:4f:e6:bf:85:cb:dc:1b:78:aa:d1:fe:93:29:f6:7f:b8: 49:65:86:3e:10:4d:5d:cf:37:e5:bb:75:ec:65:17:99:74:3f: 67:03:23:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNdTvXwnXLsty0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZmNjZDMxMGQtNDMxMS00MjhlLWE2NWItNmIzODgyYmQ2NWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl42tnGViElUGJB6Af9/E1U5zyKv0Bl/vCW+A um+vG1HAwGxC5HjbrWa27RPOOQZBDIPFZXBVKWgO0UrYdU8uB5erTDVTR5Bghcim u5rCBp9Oj/IDsPYCAfu0MzWN9rlXX3YWdN5eH5ggx8QvFXxuNTtAVU2hfYmURJMY eUhcnh5DgUQRHJmRBoQ2+IeFNLf43eiLlNzE9/byhdt1cuLkvkAZXv8pRhYNlund ntTxA7f5ywwFMdSSzAzOnwv4xhVf5pPjyO+yxYOnYXqj+VoYYodHJU2sJOccToV3 aQGuvPgIDBHNCuhlfWNKlu3eqrDgI1HqDZSpfgjXkFvXVVNmyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHDS0kOK6S9N7p1MnMunjuqGT+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMDI0ZmEzYjItMjgyNS0z Y2ZjLWIzMjgtMGM0YzFiNDEyZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFERH39qX9pavmstIts80QZckkCbeJ/hnb56DJP4GvlWs2qiSEhokIXC CUH0zX0pY0S0dKSRv90GxWeoAnTG+nvlm2u12A0X/RQuQBKiqHRMlf16LgE2xmwE a2hzt3z6HXcCo7oVr/1TRzwkH7yxpiCJEdmkUqh0tQsy4nUOFmsRB5iaiw8dRluj OKJBrt88+urU+H2bp+XmyOP3VzVz90kNN67BQab4VlV3Dlmv4EngN1Usa2nIZKdT p0n7CwG5G/0y1aOgTwAS4yHQWFn5D33Lf1SjJpxojED8T+a/hcvcG3iq0f6TKfZ/ uEllhj4QTV3PN+W7dexlF5l0P2cDI8c= -----END CERTIFICATE-----Generated at Tue Jul 21 13:23:56 2026 by rpki-client