$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1c9c670d-5980-362f-a2d3-ff14ca26595a.roa File: 1c9c670d-5980-362f-a2d3-ff14ca26595a.roa (raw, json) Hash identifier: WUzx2ZQmXjZh+D5dsRoPnorbY3Y9CwP7IThwmQ8CQjE= Subject key identifier: 4D:49:80:BC:8C:D1:36:4F:FB:82:BE:AB:50:62:E8:5F:34:72:28:56 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DB51140AEFEAC607D800 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1c9c670d-5980-362f-a2d3-ff14ca26595a.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:db:51:14:0a:ef:ea:c6:07:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=6b2660f6-6cf2-46df-9d64-b76d7d3a4c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:af:2d:54:59:5c:0f:21:98:f8:e1:5d:18:ea: 64:dc:53:79:f1:97:ca:00:23:6b:32:5f:b1:39:1d: 17:92:16:d2:17:dc:43:db:59:82:59:16:f9:c5:47: ef:ae:aa:eb:ec:84:fb:58:ce:ea:78:60:e7:c4:83: 6a:34:31:5d:04:7b:d1:1c:55:26:4d:5b:ae:c1:a9: df:56:4b:d7:a4:0f:28:a2:35:75:55:91:81:06:c1: bc:cd:ef:97:c9:32:8d:bf:16:d7:42:ef:60:4f:da: 71:51:b5:9f:cb:b0:08:a7:5e:c0:77:0f:b2:ba:77: 75:b4:de:c1:95:55:68:b6:f4:e8:d7:6c:98:a5:c6: 7c:3e:80:03:2b:20:68:7f:28:94:97:95:0f:cc:d0: fc:d6:1d:6b:bb:35:40:79:dd:dd:4d:26:cd:13:dd: 06:b0:43:6b:e4:9c:a8:62:50:6b:5e:39:f6:b4:40: 2b:32:e9:e7:c3:65:27:31:af:3a:24:a9:00:20:e2: 54:05:8e:04:83:aa:e7:db:48:fb:c4:79:cc:29:8b: fe:d7:f5:ee:01:57:b8:0f:8a:10:ff:a5:d6:c5:02: 01:3b:c9:f7:96:fa:92:28:65:d3:d8:df:fb:d6:18: 75:d7:d7:76:8f:84:61:49:0e:65:c0:c6:dc:25:fc: 93:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:49:80:BC:8C:D1:36:4F:FB:82:BE:AB:50:62:E8:5F:34:72:28:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1c9c670d-5980-362f-a2d3-ff14ca26595a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e8:94:23:f2:9c:79:8c:b7:55:d7:d3:91:58:6b:70:b2:f8: 00:7a:37:20:ba:27:41:21:b5:96:8b:8d:f0:d4:c9:fb:66:87: 07:a3:4a:81:f1:9d:42:29:c4:50:7d:72:73:da:7d:ee:52:89: ec:39:7f:06:46:6c:9f:c8:43:2d:c7:3d:57:20:26:f8:63:81: da:6b:4d:0f:12:71:da:98:06:20:42:57:61:46:c9:cb:22:10: bc:1b:72:11:58:91:7e:dc:2c:f7:8a:61:9d:84:35:4f:8f:75: ee:5e:20:a8:b0:b8:15:1b:d8:b8:5d:cf:71:08:a9:ed:ea:3a: db:d4:5c:58:2c:cb:98:e7:dc:42:00:fb:10:53:63:2c:1d:f7: 80:7b:62:90:f6:f2:63:b8:4d:80:82:90:8a:10:05:52:c2:bd: 7a:7d:2f:2e:f0:ae:db:9b:d9:b9:84:c7:24:54:d6:0a:9c:42: 87:4f:b2:b2:df:10:5e:f1:b0:54:4c:9d:5f:b2:17:8c:ab:8f: a4:8e:17:0a:8a:13:01:9d:c6:a3:f3:cb:c5:d4:5f:d9:b8:ac: 94:ba:51:bc:88:ae:5e:9f:7e:62:bb:d1:18:a1:67:95:69:ec: 68:41:60:ee:ce:f2:ae:0a:7c:85:4d:8c:a9:3c:c3:96:59:c5: 3c:62:ad:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNtRFArv6sYH2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NmIyNjYwZjYtNmNmMi00NmRmLTlkNjQtYjc2ZDdkM2E0YzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa8tVFlcDyGY+OFdGOpk3FN58ZfKACNrMl+x OR0XkhbSF9xD21mCWRb5xUfvrqrr7IT7WM7qeGDnxINqNDFdBHvRHFUmTVuuwanf VkvXpA8oojV1VZGBBsG8ze+XyTKNvxbXQu9gT9pxUbWfy7AIp17Adw+yund1tN7B lVVotvTo12yYpcZ8PoADKyBofyiUl5UPzND81h1ruzVAed3dTSbNE90GsENr5Jyo YlBrXjn2tEArMunnw2UnMa86JKkAIOJUBY4Eg6rn20j7xHnMKYv+1/XuAVe4D4oQ /6XWxQIBO8n3lvqSKGXT2N/71hh119d2j4RhSQ5lwMbcJfyT2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1JgLyM0TZP+4K+q1Bi6F80cihWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMWM5YzY3MGQtNTk4MC0z NjJmLWEyZDMtZmYxNGNhMjY1OTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzolCPynHmMt1XX05FYa3Cy+AB6NyC6J0EhtZaLjfDUyftmhwejSoHx nUIpxFB9cnPafe5Siew5fwZGbJ/IQy3HPVcgJvhjgdprTQ8ScdqYBiBCV2FGycsi ELwbchFYkX7cLPeKYZ2ENU+Pde5eIKiwuBUb2Lhdz3EIqe3qOtvUXFgsy5jn3EIA +xBTYywd94B7YpD28mO4TYCCkIoQBVLCvXp9Ly7wrtub2bmExyRU1gqcQodPsrLf EF7xsFRMnV+yF4yrj6SOFwqKEwGdxqPzy8XUX9m4rJS6UbyIrl6ffmK70RihZ5Vp 7GhBYO7O8q4KfIVNjKk8w5ZZxTxirTM= -----END CERTIFICATE-----Generated at Tue Jul 21 01:40:06 2026 by rpki-client