$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1e30ad90-6de1-3e20-b795-8fbb8f15dc86.roa File: 1e30ad90-6de1-3e20-b795-8fbb8f15dc86.roa (raw, json) Hash identifier: lrqXk2r/C2ekZoG6BKQzUyETxjLE7QB08Ramprm3BRY= Subject key identifier: 09:72:5E:EC:8E:82:EF:0A:2B:EE:70:1C:B6:BA:8C:21:33:FF:43:B6 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D54E9261BB47D026D0C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1e30ad90-6de1-3e20-b795-8fbb8f15dc86.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d5:4e:92:61:bb:47:d0:26:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=9ff52d02-d5bf-4f97-8417-61c46d39c421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:40:00:d3:dc:af:fa:43:b3:8e:38:99:10:0d: 8d:fb:b4:c1:e5:67:da:1e:43:f5:c3:4c:62:e1:7a: ab:67:6c:85:4c:4a:b4:ae:b1:38:dd:57:f6:dd:1d: be:a1:ab:6b:cb:f0:59:a1:89:ae:05:25:e3:52:cf: 5d:b5:68:c0:af:e9:22:8f:ce:d8:ad:da:fe:7c:21: 31:e0:19:93:fe:c6:83:da:49:cc:38:5d:ff:53:1e: 44:e5:d2:b9:67:d4:c6:13:37:97:57:29:92:f8:a0: 11:69:c3:52:71:2f:56:c6:7e:50:7f:8f:8e:d5:3b: b6:af:fa:4a:e7:35:6d:77:32:fc:32:7e:49:a2:cb: 15:1d:6f:1e:da:28:d7:22:7c:d2:4b:b9:13:03:59: b9:77:1c:d7:7f:ca:b8:bb:10:04:5e:70:24:e8:b9: 12:22:c2:80:a5:83:4f:8a:78:60:fb:7c:70:23:de: f3:68:10:cb:c0:13:51:47:f6:a8:53:c2:9e:a9:36: eb:b0:30:ad:5f:f9:6f:18:c3:d7:8c:4c:6b:5b:81: b1:f9:4c:3f:b7:90:3d:d2:ba:b0:99:06:8c:81:29: 51:a0:28:d2:d5:fa:41:f9:ae:64:84:1c:4e:d4:14: 15:73:70:dc:50:1f:7d:54:6e:f4:c6:f6:7d:51:91: f3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:72:5E:EC:8E:82:EF:0A:2B:EE:70:1C:B6:BA:8C:21:33:FF:43:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1e30ad90-6de1-3e20-b795-8fbb8f15dc86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4b:45:24:ce:20:8d:6a:46:8d:08:4f:5e:c9:d9:2f:36:71: eb:93:ed:01:14:26:ea:64:a4:00:19:30:33:2e:32:4c:a9:b7: e8:94:2a:eb:d9:cc:eb:7a:48:eb:1c:79:55:2d:cb:a2:22:f6: 24:d6:86:e8:03:3f:69:5e:81:89:39:cb:18:a2:cc:7e:e6:93: c1:05:54:31:c8:d3:33:b7:ca:02:8b:be:87:ba:b1:3e:2f:5c: f9:3c:c6:09:34:7a:54:57:49:c1:a9:c7:3a:b1:22:8c:b5:10: 06:9d:74:ed:a7:0b:a3:03:38:a4:ba:91:e8:11:2d:50:9d:29: 07:c5:e6:4d:04:15:f6:58:26:64:f0:9b:bc:85:e8:de:ca:aa: e3:af:1a:78:42:04:de:d2:7f:a6:e2:ea:e1:0f:8b:59:62:00: 2a:6f:c3:07:28:ea:2b:0e:d2:1a:96:c8:e2:e2:aa:d2:9c:ef: af:65:be:93:ea:2d:65:d6:65:c5:76:8d:a4:77:b5:88:e2:4e: 50:fd:18:2e:c0:da:61:b5:81:7d:4d:4f:8d:47:49:3d:aa:b6: d0:3f:fd:d9:55:51:89:a3:db:90:13:5b:8d:46:64:44:43:7e: 83:0b:06:5c:c7:23:36:0b:a8:90:57:a0:71:61:15:9b:b3:00: 3c:42:48:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNVOkmG7R9Am0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk OWZmNTJkMDItZDViZi00Zjk3LTg0MTctNjFjNDZkMzljNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0AA09yv+kOzjjiZEA2N+7TB5WfaHkP1w0xi 4XqrZ2yFTEq0rrE43Vf23R2+oatry/BZoYmuBSXjUs9dtWjAr+kij87Yrdr+fCEx 4BmT/saD2knMOF3/Ux5E5dK5Z9TGEzeXVymS+KARacNScS9Wxn5Qf4+O1Tu2r/pK 5zVtdzL8Mn5JossVHW8e2ijXInzSS7kTA1m5dxzXf8q4uxAEXnAk6LkSIsKApYNP inhg+3xwI97zaBDLwBNRR/aoU8KeqTbrsDCtX/lvGMPXjExrW4Gx+Uw/t5A90rqw mQaMgSlRoCjS1fpB+a5khBxO1BQVc3DcUB99VG70xvZ9UZHzYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlyXuyOgu8KK+5wHLa6jCEz/0O2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMWUzMGFkOTAtNmRlMS0z ZTIwLWI3OTUtOGZiYjhmMTVkYzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1LRSTOII1qRo0IT17J2S82ceuT7QEUJupkpAAZMDMuMkypt+iUKuvZ zOt6SOsceVUty6Ii9iTWhugDP2legYk5yxiizH7mk8EFVDHI0zO3ygKLvoe6sT4v XPk8xgk0elRXScGpxzqxIoy1EAaddO2nC6MDOKS6kegRLVCdKQfF5k0EFfZYJmTw m7yF6N7KquOvGnhCBN7Sf6bi6uEPi1liACpvwwco6isO0hqWyOLiqtKc769lvpPq LWXWZcV2jaR3tYjiTlD9GC7A2mG1gX1NT41HST2qttA//dlVUYmj25ATW41GZERD foMLBlzHIzYLqJBXoHFhFZuzADxCSBQ= -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:11 2026 by rpki-client