$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30243d7d-6f1e-3a74-ba72-52a192170827.roa File: 30243d7d-6f1e-3a74-ba72-52a192170827.roa (raw, json) Hash identifier: 2EjqAQlsjEhA/rcTbjaGNsDtaU1qdsYmdkQlxgAZIx8= Subject key identifier: 94:3E:9E:1D:BC:A5:34:6D:43:F7:D8:12:AA:68:89:FE:56:A5:57:94 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D5C3A8D9D3E2B829F700 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30243d7d-6f1e-3a74-ba72-52a192170827.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d5:c3:a8:d9:d3:e2:b8:29:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=a27efb17-4dd2-48fa-8006-8ec657c20434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2d:e9:6c:f6:ce:e5:60:17:21:77:6e:ff:46: d0:8f:3d:c5:d5:bc:75:c2:49:a7:b6:d6:85:fa:39: 5f:be:7c:3c:70:2c:a3:43:4b:fc:35:c9:78:2a:b1: 9d:5f:e5:80:fd:34:be:1c:9a:b1:f8:0f:da:54:57: 05:6b:68:9b:34:55:7b:fa:0f:c8:f2:60:49:65:3b: c0:27:1f:a8:2d:19:67:79:10:9b:2d:44:fb:0f:a4: e4:67:6c:0c:62:12:f7:b1:9b:91:1f:6a:b0:95:7d: df:1f:c1:95:4d:61:3e:9f:1a:0b:9b:23:18:62:d5: 01:2f:9f:8b:84:bc:d0:60:10:05:08:96:b1:3d:55: bf:67:87:a5:0d:ee:fd:94:4e:21:7f:c5:4b:8c:f5: 4c:55:f0:a3:b9:20:86:c4:7e:ec:f9:28:d8:af:1c: 23:64:72:38:35:0d:b5:0d:c1:5c:d9:fd:88:10:e2: ac:49:1d:10:a5:54:80:bb:2b:10:29:47:32:e4:bf: 1e:9d:26:66:23:ec:52:17:49:a2:93:01:23:3d:44: 21:5b:bd:91:42:4c:8e:0d:3f:50:28:ba:fd:b3:7b: 5e:24:31:1f:81:22:2d:d6:6e:33:f9:f0:34:a7:29: f8:0e:5d:82:43:a5:39:54:48:68:1d:fd:ba:37:ad: ed:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3E:9E:1D:BC:A5:34:6D:43:F7:D8:12:AA:68:89:FE:56:A5:57:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30243d7d-6f1e-3a74-ba72-52a192170827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ad:cc:46:97:b0:64:46:cd:b9:3e:0f:13:00:ad:95:98:3a: d5:8f:6c:66:d4:87:7d:01:98:1d:46:44:07:b1:89:d4:16:76: 95:04:e3:0e:57:ce:1b:86:88:64:b1:d5:71:69:c6:fc:d1:a7: c4:1d:70:4b:32:6a:f5:e3:85:7c:fd:21:d5:53:1d:86:5b:0c: d0:97:58:b3:fc:6c:fe:a8:20:b2:f9:ef:3c:b4:81:db:89:51: 65:ab:b2:a4:20:b2:8e:eb:43:dd:cb:fb:04:c1:8b:d9:75:10: cd:20:a9:dc:88:59:e1:dc:95:52:64:45:75:a3:06:8e:02:b4: 4a:05:f2:1c:60:bc:f6:41:bd:27:7b:12:b9:6e:f1:4a:25:6f: b5:c6:ca:91:db:40:8c:ca:80:56:be:21:28:42:55:fa:6d:27: 48:68:62:68:8c:1d:75:91:81:7d:9e:d4:46:eb:a1:67:cd:22: b2:26:2f:e0:b5:31:86:84:49:22:f2:56:92:b9:4e:56:27:1a: a5:49:85:39:99:6f:85:c6:be:10:c4:4a:1b:4e:6e:47:fe:63: b0:33:93:b2:56:1f:55:1f:e9:24:b2:b7:24:20:50:b8:7e:ad: 39:a3:00:c5:e8:b4:e2:69:11:fb:48:bc:f9:2b:d9:f2:a6:d3: be:11:ce:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNXDqNnT4rgp9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YTI3ZWZiMTctNGRkMi00OGZhLTgwMDYtOGVjNjU3YzIwNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji3pbPbO5WAXIXdu/0bQjz3F1bx1wkmnttaF +jlfvnw8cCyjQ0v8Ncl4KrGdX+WA/TS+HJqx+A/aVFcFa2ibNFV7+g/I8mBJZTvA Jx+oLRlneRCbLUT7D6TkZ2wMYhL3sZuRH2qwlX3fH8GVTWE+nxoLmyMYYtUBL5+L hLzQYBAFCJaxPVW/Z4elDe79lE4hf8VLjPVMVfCjuSCGxH7s+SjYrxwjZHI4NQ21 DcFc2f2IEOKsSR0QpVSAuysQKUcy5L8enSZmI+xSF0mikwEjPUQhW72RQkyODT9Q KLr9s3teJDEfgSIt1m4z+fA0pyn4Dl2CQ6U5VEhoHf26N63tpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQ+nh28pTRtQ/fYEqpoif5WpVeUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMzAyNDNkN2QtNmYxZS0z YTc0LWJhNzItNTJhMTkyMTcwODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqtzEaXsGRGzbk+DxMArZWYOtWPbGbUh30BmB1GRAexidQWdpUE4w5X zhuGiGSx1XFpxvzRp8QdcEsyavXjhXz9IdVTHYZbDNCXWLP8bP6oILL57zy0gduJ UWWrsqQgso7rQ93L+wTBi9l1EM0gqdyIWeHclVJkRXWjBo4CtEoF8hxgvPZBvSd7 Erlu8Uolb7XGypHbQIzKgFa+IShCVfptJ0hoYmiMHXWRgX2e1EbroWfNIrImL+C1 MYaESSLyVpK5TlYnGqVJhTmZb4XGvhDEShtObkf+Y7Azk7JWH1Uf6SSytyQgULh+ rTmjAMXotOJpEftIvPkr2fKm074Rzk4= -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:17 2026 by rpki-client