$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1f7ab9f5-5af1-3231-bdd7-dac4b5f427e1.roa File: 1f7ab9f5-5af1-3231-bdd7-dac4b5f427e1.roa (raw, json) Hash identifier: dGeUDnYGEMnvB/MKuKRiiSu+Z8LVFawMN8MnWWPkNAs= Subject key identifier: E2:8A:C6:71:38:52:35:6E:64:BE:84:99:FA:2F:6E:9B:E2:B5:A2:48 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D738A9F9DA6B7A57C000 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1f7ab9f5-5af1-3231-bdd7-dac4b5f427e1.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d7:38:a9:f9:da:6b:7a:57:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=4eb6ee50-1924-4f4f-bdcc-3c48b7e51539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:ba:ae:e3:43:e8:ae:20:52:25:9a:4d:c0: 5f:91:ac:49:be:b9:9f:7c:09:db:f0:d2:7b:85:0e: 11:59:2b:28:5c:d2:ae:01:0e:1a:a2:b7:37:11:08: ad:2b:3d:2b:18:f7:52:12:c6:09:d3:04:ca:de:f7: b5:cf:93:d1:c2:d9:4d:7e:36:86:b4:5b:b8:be:2b: 16:46:37:a7:86:6b:0b:b5:1b:a9:c9:a6:8c:d9:2f: b7:b2:fc:b4:85:89:dd:44:2d:cf:2e:c2:03:63:ea: 9c:80:ee:43:46:52:8d:8e:ed:33:bf:0a:45:7f:71: f6:b0:a3:1d:c2:a7:5b:a2:7c:6c:31:86:5b:7f:a3: b7:91:e2:d9:b7:3a:bd:b4:df:ae:6e:ad:02:d2:14: 2a:c6:19:b5:01:e9:50:2a:7c:b0:e5:30:25:c5:24: 9f:a4:8a:a6:04:d6:fb:44:d0:d5:b4:d8:62:5d:d9: fc:31:12:21:65:da:6f:8e:8c:b8:87:77:de:e9:05: 9b:1b:95:2d:88:86:a9:19:30:39:de:e9:b3:89:9b: 10:72:9d:63:85:57:bb:01:d6:f2:0b:43:c8:09:bd: a0:94:a6:78:58:06:5a:ec:cd:da:b2:c6:d8:00:1a: 5d:58:e8:ff:bd:90:d6:d7:0f:09:2a:f7:92:a1:04: 9c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8A:C6:71:38:52:35:6E:64:BE:84:99:FA:2F:6E:9B:E2:B5:A2:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1f7ab9f5-5af1-3231-bdd7-dac4b5f427e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ca:27:b9:cf:81:31:56:b7:e7:7c:56:1a:bd:1a:0e:2f:29: c5:40:41:fc:b6:18:e7:07:2b:f8:28:34:24:c8:fa:09:da:3b: 75:64:d8:13:ab:53:09:81:e9:fb:44:af:07:c7:9c:c8:78:1c: 40:66:ff:05:0b:5c:a6:04:51:00:dc:f7:ae:19:b5:39:e1:51: 79:bc:5c:9d:0f:db:d0:2c:d3:5f:2c:df:11:2d:49:9b:f3:24: 51:3c:26:be:7a:9c:8c:3b:81:6d:e5:e3:46:d6:d5:57:06:38: 63:c3:13:d5:f5:cf:c5:e6:70:51:63:da:d9:02:3a:7c:3e:71: 75:4c:6c:43:7b:72:2e:88:5e:65:c6:10:89:47:dc:b7:ba:17: 3a:31:13:a7:8f:fc:52:ab:8f:b1:76:d6:b8:b6:80:71:83:52: e1:bd:ba:7e:3b:99:da:9b:27:14:10:c8:5a:b5:f7:be:e3:85: 87:2c:ac:95:e2:3f:5e:1a:0b:3e:c5:0f:89:ca:c5:e1:b4:fa: ee:59:9e:e8:e5:e0:eb:7c:09:9d:0a:4e:69:53:68:92:b7:73: 25:42:fb:06:96:5f:64:f0:03:9c:bc:f7:51:a6:2d:5e:b0:f4: 75:b1:55:13:5c:41:65:4b:39:2f:f7:4f:5b:57:e6:9c:91:b2: 6e:5c:60:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNc4qfnaa3pXwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NGViNmVlNTAtMTkyNC00ZjRmLWJkY2MtM2M0OGI3ZTUxNTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSO6ruND6K4gUiWaTcBfkaxJvrmffAnb8NJ7 hQ4RWSsoXNKuAQ4aorc3EQitKz0rGPdSEsYJ0wTK3ve1z5PRwtlNfjaGtFu4visW RjenhmsLtRupyaaM2S+3svy0hYndRC3PLsIDY+qcgO5DRlKNju0zvwpFf3H2sKMd wqdbonxsMYZbf6O3keLZtzq9tN+ubq0C0hQqxhm1AelQKnyw5TAlxSSfpIqmBNb7 RNDVtNhiXdn8MRIhZdpvjoy4h3fe6QWbG5UtiIapGTA53umziZsQcp1jhVe7Adby C0PICb2glKZ4WAZa7M3assbYABpdWOj/vZDW1w8JKveSoQScTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKKxnE4UjVuZL6EmfovbpvitaJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMWY3YWI5ZjUtNWFmMS0z MjMxLWJkZDctZGFjNGI1ZjQyN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInKJ7nPgTFWt+d8Vhq9Gg4vKcVAQfy2GOcHK/goNCTI+gnaO3Vk2BOr UwmB6ftErwfHnMh4HEBm/wULXKYEUQDc964ZtTnhUXm8XJ0P29As018s3xEtSZvz JFE8Jr56nIw7gW3l40bW1VcGOGPDE9X1z8XmcFFj2tkCOnw+cXVMbEN7ci6IXmXG EIlH3Le6FzoxE6eP/FKrj7F21ri2gHGDUuG9un47mdqbJxQQyFq1977jhYcsrJXi P14aCz7FD4nKxeG0+u5Znujl4Ot8CZ0KTmlTaJK3cyVC+waWX2TwA5y891GmLV6w 9HWxVRNcQWVLOS/3T1tX5pyRsm5cYIw= -----END CERTIFICATE-----Generated at Tue Jul 21 13:23:15 2026 by rpki-client