$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30f18138-c1ab-36d7-991d-784dd997e256.roa File: 30f18138-c1ab-36d7-991d-784dd997e256.roa (raw, json) Hash identifier: 5JAEbNI6JEDH/z/Q2YnC+cJV6Fh8sj5Kb+8vLYAFedc= Subject key identifier: D0:AF:6D:65:EA:5C:7F:FF:CE:BC:E9:C6:A7:37:CD:38:05:D8:86:BC Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D530C91A8CC45BAFF700 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30f18138-c1ab-36d7-991d-784dd997e256.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d5:30:c9:1a:8c:c4:5b:af:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=a0145d9d-fe97-4dd7-8053-83eccab27da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1f:cd:d3:29:97:e2:77:3a:6e:23:c9:4c:ee: 5a:d0:72:7c:f9:ad:59:e9:a2:98:82:57:0c:5e:69: 90:f5:1a:c0:e9:4b:19:5c:26:d2:d4:43:25:d4:af: e9:e2:65:a5:19:3e:58:a3:6a:d3:a5:eb:a7:26:2f: a8:28:cf:c9:34:4a:be:94:d5:b0:db:6c:5c:f5:02: ef:4a:9a:f5:e0:3d:02:4a:d2:c0:13:d3:2c:40:bc: fa:b7:51:7c:03:f0:4f:cb:75:a7:65:50:06:d0:b0: 0e:6f:93:56:65:22:5c:e2:4b:e7:52:51:a1:0c:4a: 62:89:61:3c:6b:f3:05:44:86:5f:e4:6f:13:5f:33: c9:48:5b:16:a3:cf:19:5a:76:da:4d:79:4a:86:c2: bb:8e:8e:2c:55:88:53:ec:ab:73:4d:9c:2c:ec:dc: 0f:7d:a0:df:7a:b9:80:bb:17:6e:9f:84:50:86:4c: 4e:9e:5c:50:f2:f7:d7:f4:fb:19:bf:4e:f5:06:1b: 95:92:a4:8e:07:93:6b:d3:ef:34:73:77:dd:1b:69: 88:70:fa:fd:93:c6:cf:3f:29:2b:58:50:d3:c5:6f: cc:fa:3f:0f:64:45:ee:5f:ea:2c:d5:93:c0:0b:8e: d9:7c:a4:d4:67:2a:81:7f:d2:16:bc:16:a5:b3:06: b3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AF:6D:65:EA:5C:7F:FF:CE:BC:E9:C6:A7:37:CD:38:05:D8:86:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30f18138-c1ab-36d7-991d-784dd997e256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:93:47:4d:fd:24:54:7b:c9:ab:7e:a2:b2:6d:5e:13:f6:06: d7:9a:d0:85:94:09:99:51:04:b4:76:ab:32:c2:70:74:75:ea: c5:b9:da:ad:73:80:cb:42:48:9a:74:78:b7:70:7a:cc:1e:af: d2:89:cf:61:04:d6:ed:63:1e:3e:b1:33:4a:52:0c:e8:5d:16: 5e:e4:ae:d9:99:6a:2b:1b:5d:33:65:ad:31:ad:4c:c0:d1:26: 27:32:1b:6d:19:7a:30:87:75:b1:c2:29:1b:ee:42:9d:ff:a5: 21:cf:41:ff:8b:8d:57:ac:ed:a7:00:d6:e4:d6:25:6b:92:22: a0:0b:25:d3:72:79:0c:26:4f:af:47:cb:77:91:ab:d6:22:bc: dc:e5:70:f0:e7:36:7d:54:71:c9:1b:09:9b:74:64:36:55:e9: 52:f4:51:ca:ed:75:3d:a3:21:c4:4f:9d:0c:6e:79:7b:fe:38: 19:78:c7:3d:8c:61:43:74:26:bb:0e:85:29:f8:41:09:e8:73: 65:5b:45:08:16:c3:87:52:cc:c9:33:c0:03:28:ad:2f:ca:1c: f9:ff:0d:2f:00:5c:af:b8:2c:b0:24:c1:12:20:7c:58:63:97: 92:35:fd:62:f6:0c:3a:e1:b2:dd:e9:a8:b3:60:42:40:a1:44: 35:d2:da:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNUwyRqMxFuv9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YTAxNDVkOWQtZmU5Ny00ZGQ3LTgwNTMtODNlY2NhYjI3ZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx/N0ymX4nc6biPJTO5a0HJ8+a1Z6aKYglcM XmmQ9RrA6UsZXCbS1EMl1K/p4mWlGT5Yo2rTpeunJi+oKM/JNEq+lNWw22xc9QLv Spr14D0CStLAE9MsQLz6t1F8A/BPy3WnZVAG0LAOb5NWZSJc4kvnUlGhDEpiiWE8 a/MFRIZf5G8TXzPJSFsWo88ZWnbaTXlKhsK7jo4sVYhT7KtzTZws7NwPfaDfermA uxdun4RQhkxOnlxQ8vfX9PsZv071BhuVkqSOB5Nr0+80c3fdG2mIcPr9k8bPPykr WFDTxW/M+j8PZEXuX+os1ZPAC47ZfKTUZyqBf9IWvBalswazoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCvbWXqXH//zrzpxqc3zTgF2Ia8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMzBmMTgxMzgtYzFhYi0z NmQ3LTk5MWQtNzg0ZGQ5OTdlMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKTR039JFR7yat+orJtXhP2Btea0IWUCZlRBLR2qzLCcHR16sW52q1z gMtCSJp0eLdweswer9KJz2EE1u1jHj6xM0pSDOhdFl7krtmZaisbXTNlrTGtTMDR JicyG20ZejCHdbHCKRvuQp3/pSHPQf+LjVes7acA1uTWJWuSIqALJdNyeQwmT69H y3eRq9YivNzlcPDnNn1UcckbCZt0ZDZV6VL0UcrtdT2jIcRPnQxueXv+OBl4xz2M YUN0JrsOhSn4QQnoc2VbRQgWw4dSzMkzwAMorS/KHPn/DS8AXK+4LLAkwRIgfFhj l5I1/WL2DDrhst3pqLNgQkChRDXS2ps= -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:42 2026 by rpki-client