$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/167b126e-59fd-37ab-9b05-869540ca4067.roa File: 167b126e-59fd-37ab-9b05-869540ca4067.roa (raw, json) Hash identifier: UuXFQ0jHe6vf0ZdMbhVVFN4Tv0LzTXTSF4mIfLgTJU4= Subject key identifier: DF:A0:96:93:E0:A7:80:51:0E:C4:DE:F7:86:D7:9A:A8:87:2C:F1:4A Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D8694E63E2B01F4A9A40 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/167b126e-59fd-37ab-9b05-869540ca4067.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d8:69:4e:63:e2:b0:1f:4a:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=429d5a54-b83e-4862-a346-fad8b5c021c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:e7:1d:ca:1b:3f:63:f2:29:6b:23:d4:aa: 27:a6:47:74:ec:23:c8:d0:40:19:b4:c5:d4:59:d1: dc:66:d6:e4:d7:c9:7a:7a:e8:1a:97:ea:18:13:d6: 75:98:a6:f2:df:95:9b:d1:84:c2:f6:21:c1:c2:ad: 06:26:6b:fc:19:47:db:a4:9a:38:5e:8f:39:6a:6b: 66:ff:34:8b:f4:63:5f:18:c5:04:ab:ab:8d:48:62: 95:8c:df:d3:39:3c:d7:40:97:83:f7:3d:80:c7:46: b2:48:67:11:4d:59:af:b4:78:26:61:fb:78:e5:99: 00:96:fd:18:4c:37:03:c4:dc:d0:14:88:2e:17:74: 7c:65:50:5c:26:7a:e8:84:93:35:85:4a:80:79:0a: 94:3b:11:11:ad:da:d3:6e:88:1f:2a:75:b4:92:38: fb:e6:83:8a:80:d2:73:d2:e4:01:ed:24:74:c8:02: 8b:77:7c:d1:c0:fb:aa:c5:39:ca:26:ab:b7:04:23: 3a:5a:df:e8:9d:81:4b:52:1a:c5:ad:fa:c9:c4:5b: ae:6a:b9:a2:3c:69:bd:0e:f4:49:c4:7b:da:a8:4c: 06:06:c7:e6:08:ea:fb:ad:81:ed:37:a6:de:b8:dc: fc:dc:c4:fe:ab:90:99:02:2c:a5:fb:4a:34:2d:2a: 83:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A0:96:93:E0:A7:80:51:0E:C4:DE:F7:86:D7:9A:A8:87:2C:F1:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/167b126e-59fd-37ab-9b05-869540ca4067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f7:18:19:97:8f:6d:d3:a0:0d:6f:81:0a:99:5e:e9:bb:0a: de:94:80:0b:ff:12:56:6f:ff:d8:e6:b6:0e:25:b7:74:b3:ca: ec:62:81:75:63:7d:91:5d:4f:33:4c:65:d8:8c:6d:ea:f4:58: c9:50:5f:3b:f6:c1:3e:45:8d:4d:c8:5e:2f:49:98:bc:43:1b: 98:3d:14:1e:fa:30:b2:e3:17:0e:f6:6f:b2:7c:05:c1:ae:dd: f1:de:40:0d:56:d9:41:a9:56:14:3b:bb:aa:ea:99:38:d1:32: 0d:ea:d1:f0:44:3e:e2:3c:34:9e:d0:0e:d3:af:1d:b5:6f:7d: 18:a1:d6:ac:b9:e1:1e:91:de:11:53:eb:12:f9:95:49:ce:6f: 30:d9:53:74:4e:da:16:50:09:d8:1c:f7:84:eb:94:e1:e2:09: 93:3e:8f:3f:a7:bd:a6:18:4d:fb:85:72:1b:27:e3:14:40:7c: 3c:aa:40:61:78:24:4a:34:9a:c3:3c:99:81:d9:d7:17:08:23: 6a:2d:62:e6:fb:ee:ea:0f:ad:d9:f5:d2:0e:ae:aa:f5:ab:61: c9:4e:83:59:14:a6:55:19:0c:19:79:fc:e4:aa:ee:30:4d:c0: d8:8a:e2:2d:12:22:87:11:7f:f2:6b:32:f2:60:f2:db:33:fa: 11:66:71:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNhpTmPisB9KmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NDI5ZDVhNTQtYjgzZS00ODYyLWEzNDYtZmFkOGI1YzAyMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsbnHcobP2PyKWsj1Konpkd07CPI0EAZtMXU WdHcZtbk18l6eugal+oYE9Z1mKby35Wb0YTC9iHBwq0GJmv8GUfbpJo4Xo85amtm /zSL9GNfGMUEq6uNSGKVjN/TOTzXQJeD9z2Ax0aySGcRTVmvtHgmYft45ZkAlv0Y TDcDxNzQFIguF3R8ZVBcJnrohJM1hUqAeQqUOxERrdrTbogfKnW0kjj75oOKgNJz 0uQB7SR0yAKLd3zRwPuqxTnKJqu3BCM6Wt/onYFLUhrFrfrJxFuuarmiPGm9DvRJ xHvaqEwGBsfmCOr7rYHtN6beuNz83MT+q5CZAiyl+0o0LSqDRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+glpPgp4BRDsTe94bXmqiHLPFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMTY3YjEyNmUtNTlmZC0z N2FiLTliMDUtODY5NTQwY2E0MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH3GBmXj23ToA1vgQqZXum7Ct6UgAv/ElZv/9jmtg4lt3SzyuxigXVj fZFdTzNMZdiMber0WMlQXzv2wT5FjU3IXi9JmLxDG5g9FB76MLLjFw72b7J8BcGu 3fHeQA1W2UGpVhQ7u6rqmTjRMg3q0fBEPuI8NJ7QDtOvHbVvfRih1qy54R6R3hFT 6xL5lUnObzDZU3RO2hZQCdgc94TrlOHiCZM+jz+nvaYYTfuFchsn4xRAfDyqQGF4 JEo0msM8mYHZ1xcII2otYub77uoPrdn10g6uqvWrYclOg1kUplUZDBl5/OSq7jBN wNiK4i0SIocRf/JrMvJg8tsz+hFmcWo= -----END CERTIFICATE-----Generated at Tue Jul 21 01:41:17 2026 by rpki-client