$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2935d3a5-a158-3f2b-8f91-8ecb38fde544.roa File: 2935d3a5-a158-3f2b-8f91-8ecb38fde544.roa (raw, json) Hash identifier: BR1RmLJzM7YhLpQkJQ9r8KOVprrfRObD61BzYdc+T2U= Subject key identifier: E3:62:C8:70:50:E8:A0:F3:50:0A:E2:E4:7A:40:A0:09:1A:B2:68:39 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D21FD0F12D07E715C800 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2935d3a5-a158-3f2b-8f91-8ecb38fde544.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 64.16.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d2:1f:d0:f1:2d:07:e7:15:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=a36d3ea5-3b9a-4e47-88c7-1288aa474f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:11:27:ee:08:8d:6c:8c:b1:21:68:53:cd:97: e6:3d:96:87:67:94:cd:63:3f:c3:6c:2b:da:92:dd: e2:ff:a5:75:94:c0:54:c5:79:e2:83:96:c3:29:6d: 53:25:49:c7:0d:46:fe:c9:04:99:84:33:52:53:92: 6c:22:b0:87:d0:f1:2f:de:4a:e4:da:21:91:0b:3b: 70:01:64:51:64:5c:01:6b:b9:ca:63:6f:37:cd:46: b2:63:c9:a9:b7:87:ef:df:cc:06:b7:45:a7:68:ea: 2d:20:06:68:32:5d:39:63:18:4e:56:02:d5:32:20: 1b:79:3a:53:34:71:c8:1f:66:2e:f6:e5:be:cc:44: 2a:29:b8:3d:33:48:f0:35:ec:8b:56:0b:38:ad:4e: 7c:3b:97:b8:9a:91:80:6d:0a:f8:df:3f:51:df:e9: 81:76:f5:99:1a:87:34:ca:07:63:07:5e:9b:4a:60: f0:c7:32:c7:a1:07:54:82:fb:56:5c:d8:2d:e7:34: 40:c1:63:e8:86:5d:09:cd:a9:3d:c9:7f:85:e3:65: 1c:79:c2:5d:c2:ae:0c:c8:0d:9f:66:86:15:f8:06: 76:f3:cf:3f:42:61:cc:93:a7:0a:d2:c4:13:18:90: 82:59:95:0c:90:96:14:78:7b:7e:1e:56:27:1a:24: 71:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:62:C8:70:50:E8:A0:F3:50:0A:E2:E4:7A:40:A0:09:1A:B2:68:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2935d3a5-a158-3f2b-8f91-8ecb38fde544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ec:f9:74:81:83:13:b3:e1:dc:c4:7e:ec:ed:a5:94:d9:a1: 5b:50:89:68:7a:81:41:c8:01:24:83:e0:66:e9:ec:c6:57:e6: a0:12:31:5c:f5:4b:91:d0:52:80:69:33:91:63:2d:13:37:bd: e0:43:1e:1c:df:93:16:bf:01:5d:88:69:dd:c5:cb:6c:99:04: 11:26:2e:f9:a8:4f:48:eb:ff:78:0c:23:55:27:a2:21:f5:a0: 47:67:ee:71:56:0a:79:a2:d4:54:80:ed:5f:37:36:fd:5f:71: b0:7c:b3:fd:f9:9b:51:e2:4f:a2:8d:e5:e6:72:b6:fb:b4:b9: 50:c9:c1:33:39:ad:fd:74:f0:1a:bd:7c:0b:ee:5a:02:a6:86: 70:f8:81:3b:dc:cf:09:c8:30:88:01:20:d2:ac:74:47:c1:28: 97:1b:f7:cc:e5:2a:b4:4e:da:88:00:b4:44:47:a8:dc:97:b7: 10:64:80:c1:9e:2e:0d:ea:49:61:68:ad:50:b8:57:82:0b:6b: 3f:ed:f6:8f:2b:18:53:cb:91:4a:c8:8a:d9:c6:a8:30:d6:6b: 80:04:9e:21:af:fc:49:f5:60:95:0b:0c:17:9e:8a:91:e9:9a: b6:c6:67:d1:8c:ba:47:5b:d0:59:e9:4a:fc:6e:ce:f8:0a:cd: 66:88:54:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNIf0PEtB+cVyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YTM2ZDNlYTUtM2I5YS00ZTQ3LTg4YzctMTI4OGFhNDc0ZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjREn7giNbIyxIWhTzZfmPZaHZ5TNYz/DbCva kt3i/6V1lMBUxXnig5bDKW1TJUnHDUb+yQSZhDNSU5JsIrCH0PEv3krk2iGRCztw AWRRZFwBa7nKY283zUayY8mpt4fv38wGt0WnaOotIAZoMl05YxhOVgLVMiAbeTpT NHHIH2Yu9uW+zEQqKbg9M0jwNeyLVgs4rU58O5e4mpGAbQr43z9R3+mBdvWZGoc0 ygdjB16bSmDwxzLHoQdUgvtWXNgt5zRAwWPohl0Jzak9yX+F42UcecJdwq4MyA2f ZoYV+AZ2888/QmHMk6cK0sQTGJCCWZUMkJYUeHt+HlYnGiRxgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONiyHBQ6KDzUAri5HpAoAkasmg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMjkzNWQzYTUtYTE1OC0z ZjJiLThmOTEtOGVjYjM4ZmRlNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzs+XSBgxOz4dzEfuztpZTZoVtQiWh6gUHIASSD4Gbp7MZX5qASMVz1 S5HQUoBpM5FjLRM3veBDHhzfkxa/AV2Iad3Fy2yZBBEmLvmoT0jr/3gMI1UnoiH1 oEdn7nFWCnmi1FSA7V83Nv1fcbB8s/35m1HiT6KN5eZytvu0uVDJwTM5rf108Bq9 fAvuWgKmhnD4gTvczwnIMIgBINKsdEfBKJcb98zlKrRO2ogAtERHqNyXtxBkgMGe Lg3qSWForVC4V4ILaz/t9o8rGFPLkUrIitnGqDDWa4AEniGv/En1YJULDBeeipHp mrbGZ9GMukdb0FnpSvxuzvgKzWaIVB4= -----END CERTIFICATE-----Generated at Sat Jul 18 01:19:17 2026 by rpki-client