$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/38a55202-a5d1-3492-959c-af7d4c6ad01e.roa File: 38a55202-a5d1-3492-959c-af7d4c6ad01e.roa (raw, json) Hash identifier: FcNSEqAV4mKDkp6EqHiPy7vqlWhQv93g75EE1j+XuJc= Subject key identifier: 71:68:B8:A7:46:CB:D1:30:23:A6:9B:11:1B:12:A6:07:C9:F7:E6:59 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DA994F61A73494F59000 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/38a55202-a5d1-3492-959c-af7d4c6ad01e.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:da:99:4f:61:a7:34:94:f5:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=07b775d5-94f9-4534-b8da-5e48b5f9ed31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2d:71:16:7d:ae:c4:e1:60:13:e6:e3:4a:b3: 83:c0:f2:96:86:fe:e6:5e:e4:a3:fc:9b:2e:77:11: 5e:27:60:d5:57:03:a8:51:1d:fd:e7:56:4d:fb:f2: 27:56:97:1d:5f:a2:1b:81:f9:54:25:fd:2f:3f:f8: 73:0a:b3:0f:16:cb:09:fd:89:53:e3:c9:97:06:d5: 4b:6e:62:cb:b5:33:af:21:cf:df:fb:eb:34:35:66: 4b:56:a5:75:e0:2b:06:f6:f6:82:b3:11:57:f3:4c: c2:4c:40:1a:ef:d1:3e:6d:4f:77:9f:72:27:08:54: 15:66:8c:13:aa:5d:0c:7f:f0:4d:6f:1d:3f:b7:62: 18:3c:b2:2b:69:31:f1:b8:a2:04:47:49:9c:bf:99: be:74:80:ce:ac:1e:0d:0b:f6:68:61:b9:d8:7d:e7: 6f:80:c1:41:d0:b5:bf:f1:5e:08:0b:07:b3:e7:13: 7a:74:5b:27:a1:21:ef:bd:9e:7c:03:fb:d8:74:3c: d0:55:8d:db:cf:67:93:5f:f8:e4:60:fe:f2:ae:15: b9:d1:c3:83:0d:e0:d5:27:1b:e1:33:81:64:ad:7d: bb:77:ff:4f:c7:7b:0c:4f:7c:44:2a:98:d1:a1:d2: e9:d4:c6:d3:b5:d3:dd:41:d4:4d:2a:70:82:67:fc: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:68:B8:A7:46:CB:D1:30:23:A6:9B:11:1B:12:A6:07:C9:F7:E6:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/38a55202-a5d1-3492-959c-af7d4c6ad01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:dd:f2:75:42:69:af:00:11:04:4c:d8:2b:db:6c:36:7b:1c: 3b:df:7e:84:50:d0:b6:bd:44:c2:30:ff:36:20:f0:e8:54:38: 6f:6e:32:5b:f4:3f:d1:fa:0b:6c:2e:90:54:4c:14:59:ae:86: cb:ef:25:03:3f:29:e0:b3:8f:09:12:2c:dc:a4:4b:ad:3f:f1: 41:2d:91:46:24:24:6e:6d:83:81:11:de:de:ea:bc:13:f7:68: 93:fb:41:2b:d5:e7:e3:ba:56:a2:c4:4b:e5:3a:09:c4:a5:b1: c1:90:3f:ca:18:ff:07:e9:1a:a5:36:65:f7:7e:85:12:b3:3b: d1:a1:97:10:53:d9:74:bb:20:ea:7a:45:17:fa:84:eb:2d:b7: 56:03:86:ac:09:73:6b:d2:32:34:df:85:c1:90:14:a3:aa:1c: 34:39:39:2f:fa:6d:1e:8d:0c:ac:5a:25:e8:62:33:42:6b:15: 70:87:5c:aa:79:03:e5:9d:90:b9:72:98:4b:2f:c3:ba:17:99: 49:fc:e0:17:17:75:4b:94:8c:fe:c4:bd:5a:d2:07:79:0c:63: 7b:d4:08:1f:e0:5a:98:de:6c:30:26:62:44:c6:47:23:98:ac: 8e:31:cc:a3:21:f0:f2:71:01:83:2b:8e:39:61:45:7f:2d:d2: 17:c7:1c:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNqZT2GnNJT1kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MDdiNzc1ZDUtOTRmOS00NTM0LWI4ZGEtNWU0OGI1ZjllZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS1xFn2uxOFgE+bjSrODwPKWhv7mXuSj/Jsu dxFeJ2DVVwOoUR3951ZN+/InVpcdX6IbgflUJf0vP/hzCrMPFssJ/YlT48mXBtVL bmLLtTOvIc/f++s0NWZLVqV14CsG9vaCsxFX80zCTEAa79E+bU93n3InCFQVZowT ql0Mf/BNbx0/t2IYPLIraTHxuKIER0mcv5m+dIDOrB4NC/ZoYbnYfedvgMFB0LW/ 8V4ICwez5xN6dFsnoSHvvZ58A/vYdDzQVY3bz2eTX/jkYP7yrhW50cODDeDVJxvh M4FkrX27d/9Px3sMT3xEKpjRodLp1MbTtdPdQdRNKnCCZ/zY/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFouKdGy9EwI6abERsSpgfJ9+ZZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMzhhNTUyMDItYTVkMS0z NDkyLTk1OWMtYWY3ZDRjNmFkMDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLd8nVCaa8AEQRM2CvbbDZ7HDvffoRQ0La9RMIw/zYg8OhUOG9uMlv0 P9H6C2wukFRMFFmuhsvvJQM/KeCzjwkSLNykS60/8UEtkUYkJG5tg4ER3t7qvBP3 aJP7QSvV5+O6VqLES+U6CcSlscGQP8oY/wfpGqU2Zfd+hRKzO9GhlxBT2XS7IOp6 RRf6hOstt1YDhqwJc2vSMjTfhcGQFKOqHDQ5OS/6bR6NDKxaJehiM0JrFXCHXKp5 A+WdkLlymEsvw7oXmUn84BcXdUuUjP7EvVrSB3kMY3vUCB/gWpjebDAmYkTGRyOY rI4xzKMh8PJxAYMrjjlhRX8t0hfHHDs= -----END CERTIFICATE-----Generated at Tue Jul 21 01:41:15 2026 by rpki-client