$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1351aab4-c24b-3671-9b9f-9fe1e5982c34.roa File: 1351aab4-c24b-3671-9b9f-9fe1e5982c34.roa (raw, json) Hash identifier: 23dk17EoSsdjD5KKUJckz6Ncy538JMl6bkIHIeKQsTY= Subject key identifier: 56:29:27:04:1E:24:B9:A5:9C:A6:5D:0F:FD:8D:D8:23:4F:9D:2C:18 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D5149041F81B195D75A0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1351aab4-c24b-3671-9b9f-9fe1e5982c34.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d5:14:90:41:f8:1b:19:5d:75:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=86b417c7-adc7-4ba9-b888-c6bff62e8cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:e3:a4:1f:29:26:43:cc:78:fc:f8:6e:5d: 79:0c:1b:bd:46:6c:1c:3e:4d:77:7b:77:97:1f:06: 47:23:98:9c:d2:78:0c:cd:51:cf:76:05:ce:8f:7e: a7:d3:3c:61:8e:35:16:13:f8:f4:81:84:a2:a9:e5: d4:ca:a4:d7:fe:c2:29:0e:fe:d7:54:7e:65:1f:78: a5:a7:3b:b9:80:ec:b6:f0:60:eb:ca:01:e1:3a:56: 26:e6:f3:5a:8e:60:a8:43:81:31:04:3e:bc:1c:bf: 2f:53:e0:d4:3e:44:97:c1:09:68:5e:3a:83:3d:57: d4:98:8b:1a:4d:f0:78:09:ba:09:6f:42:48:f3:05: e4:78:02:e9:ec:7e:3a:19:5a:fa:3d:c2:bc:15:26: 8a:33:48:7f:7c:fb:79:8e:67:4c:3a:0e:9a:5e:87: a7:05:48:a5:51:fd:0b:3c:c4:9e:04:56:c3:72:f9: f2:bb:5f:ea:4c:e5:9c:14:de:7a:45:c6:c9:5e:77: 78:5e:c8:72:ed:19:2c:8b:b5:ae:84:2c:2f:f9:71: 3f:f4:d5:17:fc:e6:d5:ee:69:99:2f:e2:d9:ae:8f: 0c:93:47:d9:d1:a2:13:61:b4:8a:ad:df:ff:17:b3: bc:fd:e9:4a:02:3c:21:6d:67:0e:0f:cd:d0:3e:97: 0e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:29:27:04:1E:24:B9:A5:9C:A6:5D:0F:FD:8D:D8:23:4F:9D:2C:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1351aab4-c24b-3671-9b9f-9fe1e5982c34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f1:b0:6c:d5:65:cc:fc:70:fa:06:70:a2:9a:fe:1d:2c:ef: d3:18:52:67:b8:de:b7:c5:b5:0c:6b:fb:41:51:f9:10:72:48: 37:91:34:c1:59:cf:70:96:1f:6a:95:dd:94:2d:b2:79:cd:91: 9a:ab:07:6f:19:84:78:28:bb:ac:da:a0:db:88:b8:0a:42:7d: 61:8a:fa:d8:59:24:38:79:0b:60:0a:e2:bb:4e:88:9c:48:65: d2:6a:75:c3:68:27:a3:61:be:e1:38:b5:10:cc:f9:2f:05:09: d6:74:e5:b7:40:8c:43:40:10:f8:78:a0:0d:58:4a:c0:c5:8f: 71:65:e8:a7:30:cd:8d:9b:42:b8:20:6a:52:61:1d:e4:b0:cc: eb:84:ad:49:54:8d:a5:06:81:f6:11:12:80:15:3a:6f:31:1a: bf:09:39:74:53:3a:ba:11:a4:ca:0a:ea:9e:cc:cc:61:a1:60: 39:a4:69:9f:d4:87:fe:cf:ae:d5:13:6c:d0:b4:d0:41:3a:13: f5:22:57:57:cf:4a:f7:ca:50:0e:dc:da:9d:bd:0a:2a:ec:72: 74:fe:1b:87:ff:2f:1f:14:54:ec:eb:f7:62:29:f1:17:a1:e8: 80:47:af:f7:fd:9f:8f:c7:a2:f0:4b:6e:c0:d9:5c:ba:b1:a5: e1:74:33:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNUUkEH4GxlddaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ODZiNDE3YzctYWRjNy00YmE5LWI4ODgtYzZiZmY2MmU4Y2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLzjpB8pJkPMePz4bl15DBu9RmwcPk13e3eX HwZHI5ic0ngMzVHPdgXOj36n0zxhjjUWE/j0gYSiqeXUyqTX/sIpDv7XVH5lH3il pzu5gOy28GDrygHhOlYm5vNajmCoQ4ExBD68HL8vU+DUPkSXwQloXjqDPVfUmIsa TfB4CboJb0JI8wXkeALp7H46GVr6PcK8FSaKM0h/fPt5jmdMOg6aXoenBUilUf0L PMSeBFbDcvnyu1/qTOWcFN56RcbJXnd4Xshy7Rksi7WuhCwv+XE/9NUX/ObV7mmZ L+LZro8Mk0fZ0aITYbSKrd//F7O8/elKAjwhbWcOD83QPpcOWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYpJwQeJLmlnKZdD/2N2CNPnSwYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMTM1MWFhYjQtYzI0Yi0z NjcxLTliOWYtOWZlMWU1OTgyYzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/xsGzVZcz8cPoGcKKa/h0s79MYUme43rfFtQxr+0FR+RBySDeRNMFZ z3CWH2qV3ZQtsnnNkZqrB28ZhHgou6zaoNuIuApCfWGK+thZJDh5C2AK4rtOiJxI ZdJqdcNoJ6NhvuE4tRDM+S8FCdZ05bdAjENAEPh4oA1YSsDFj3Fl6KcwzY2bQrgg alJhHeSwzOuErUlUjaUGgfYREoAVOm8xGr8JOXRTOroRpMoK6p7MzGGhYDmkaZ/U h/7PrtUTbNC00EE6E/UiV1fPSvfKUA7c2p29CirscnT+G4f/Lx8UVOzr92Ip8Reh 6IBHr/f9n4/HovBLbsDZXLqxpeF0M9k= -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:10 2026 by rpki-client