$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1652fed3-32ae-39b3-ba12-292f985309b0.roa File: 1652fed3-32ae-39b3-ba12-292f985309b0.roa (raw, json) Hash identifier: eceDtdMj1nMUPKgw3btgHsF3spxxSNeF8J21qvtrNc8= Subject key identifier: 5F:11:53:62:1E:D2:BA:75:0F:C2:7C:40:26:26:B4:C8:5B:09:22:23 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D5961F06F2130BA7B580 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1652fed3-32ae-39b3-ba12-292f985309b0.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d5:96:1f:06:f2:13:0b:a7:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=6d83ddf7-3b2c-4640-8471-d607c69b3117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cc:b5:d2:41:4c:5b:c2:be:3c:71:fd:5a:bf: 5f:2a:9c:9e:89:3d:a5:bd:59:9d:b9:67:e3:5f:19: 95:d4:a9:c7:9f:67:e6:1e:d5:f6:c8:97:e4:61:f5: 1f:be:f8:1e:97:cf:b6:b8:13:29:78:e4:c7:08:9e: a0:49:9d:05:ec:fc:29:16:ca:83:04:17:be:15:2f: 88:83:15:db:8a:ec:6d:90:b4:f1:45:83:bf:3d:78: 87:71:5c:63:d0:ef:70:16:40:27:3d:d3:83:2f:7e: f5:a9:e5:1a:51:cb:81:c3:33:87:97:a6:20:35:b5: 31:77:92:32:1b:c1:7c:08:41:af:d2:3e:96:d2:4a: 18:e1:8f:38:28:07:de:47:5c:59:94:9a:1c:75:1f: 52:9e:5f:ce:c2:8c:0c:b1:4f:4d:a6:f6:27:c0:f7: 21:81:ca:5e:4f:3c:1d:1b:8c:b8:f4:f4:1d:af:2b: 6d:39:27:fe:02:19:13:ab:ce:34:e3:d2:b8:1c:e6: bc:b4:03:2c:88:71:5e:36:be:3f:68:e6:f6:74:90: a1:ff:ea:86:9d:bf:eb:9f:fd:83:ac:74:0b:9d:37: 4b:a0:74:8a:82:7d:ac:d5:3a:a4:54:f4:91:e8:13: 62:70:bf:51:84:f5:a9:69:ab:16:46:cd:68:00:9b: 4b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:11:53:62:1E:D2:BA:75:0F:C2:7C:40:26:26:B4:C8:5B:09:22:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1652fed3-32ae-39b3-ba12-292f985309b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:38:fc:41:ac:5b:26:70:cd:26:13:29:05:3f:22:d8:0f:61: 95:04:74:be:08:6e:63:41:66:3d:64:f0:c8:e0:d8:fe:bd:0d: 75:15:bf:91:5a:b1:57:a7:ed:c4:76:94:fa:c5:e7:4c:78:82: fd:4b:ca:c8:bb:ac:e8:b0:fd:08:3c:d4:ab:2e:f2:68:b2:ac: d0:bf:e6:25:fc:be:59:f0:bd:6c:23:c8:29:47:c8:92:97:03: 3a:25:4a:9d:8d:d3:38:09:65:bf:cd:c3:a6:31:b2:47:f4:31: 2a:d1:8f:32:d8:53:2c:8e:aa:d6:bf:f3:96:5b:1a:88:11:42: fc:b5:03:22:25:03:a5:89:c7:c4:50:f6:b7:ea:c0:a2:0c:ab: ed:36:de:51:07:36:cc:57:a8:03:59:d8:21:f7:00:cb:dc:53: db:18:b3:c1:90:45:25:11:30:5c:c0:19:86:47:c7:fe:ae:17: 12:50:a8:4c:15:3a:47:87:6d:d1:c3:b7:77:2d:34:a1:c7:4d: b3:a2:91:da:ae:db:5f:62:a6:d7:ce:aa:79:b4:ef:36:55:01: 6c:f0:f6:8d:bd:45:1b:7a:ba:ad:24:f5:0d:b2:0f:07:df:8c: 2a:a9:6a:7d:09:a8:09:45:b9:d3:b9:d5:74:6a:0c:3a:05:7e: f5:99:be:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNWWHwbyEwuntYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NmQ4M2RkZjctM2IyYy00NjQwLTg0NzEtZDYwN2M2OWIzMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8y10kFMW8K+PHH9Wr9fKpyeiT2lvVmduWfj XxmV1KnHn2fmHtX2yJfkYfUfvvgel8+2uBMpeOTHCJ6gSZ0F7PwpFsqDBBe+FS+I gxXbiuxtkLTxRYO/PXiHcVxj0O9wFkAnPdODL371qeUaUcuBwzOHl6YgNbUxd5Iy G8F8CEGv0j6W0koY4Y84KAfeR1xZlJocdR9Snl/OwowMsU9NpvYnwPchgcpeTzwd G4y49PQdryttOSf+AhkTq84049K4HOa8tAMsiHFeNr4/aOb2dJCh/+qGnb/rn/2D rHQLnTdLoHSKgn2s1TqkVPSR6BNicL9RhPWpaasWRs1oAJtLYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8RU2Ie0rp1D8J8QCYmtMhbCSIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMTY1MmZlZDMtMzJhZS0z OWIzLWJhMTItMjkyZjk4NTMwOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQ4/EGsWyZwzSYTKQU/ItgPYZUEdL4IbmNBZj1k8Mjg2P69DXUVv5Fa sVen7cR2lPrF50x4gv1Lysi7rOiw/Qg81Ksu8miyrNC/5iX8vlnwvWwjyClHyJKX AzolSp2N0zgJZb/Nw6Yxskf0MSrRjzLYUyyOqta/85ZbGogRQvy1AyIlA6WJx8RQ 9rfqwKIMq+023lEHNsxXqANZ2CH3AMvcU9sYs8GQRSURMFzAGYZHx/6uFxJQqEwV OkeHbdHDt3ctNKHHTbOikdqu219iptfOqnm07zZVAWzw9o29RRt6uq0k9Q2yDwff jCqpan0JqAlFudO51XRqDDoFfvWZvo8= -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:17 2026 by rpki-client