$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3ab4b47f-51cf-3592-a11b-2bb35d2129af.roa File: 3ab4b47f-51cf-3592-a11b-2bb35d2129af.roa (raw, json) Hash identifier: klhIQLsbh/ss151DHKiNqW7jKY50qjFRgxXEbs/YMU4= Subject key identifier: 23:33:46:67:C3:89:3E:C3:1B:BE:25:78:33:2F:39:98:58:48:18:AB Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DA7EB95BC158969CCD40 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3ab4b47f-51cf-3592-a11b-2bb35d2129af.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:da:7e:b9:5b:c1:58:96:9c:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=fe3f231b-eb0b-43b1-b68c-2671d02feb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0c:2e:12:ec:f9:8e:7b:bb:0f:04:c1:98:df: 16:5b:b8:eb:96:c5:e8:36:b9:58:ce:1f:7b:8e:5c: f8:40:60:3f:bf:98:89:41:29:45:f2:49:3a:15:63: ff:e6:b1:7c:f2:74:ec:1c:8e:69:36:ae:79:cd:7b: b8:ac:f2:c8:2d:c3:78:b6:81:04:39:ba:ae:4e:ee: cb:3d:9c:3f:22:45:de:a8:cc:36:e6:0c:90:c2:9e: 84:e9:d9:68:2c:cc:24:5c:1c:e8:c9:1e:04:10:90: 21:bf:3a:78:1c:c2:ae:e4:41:f4:d4:2c:4f:bf:da: e0:5a:02:de:67:1c:fb:84:e5:51:4b:ee:45:de:31: 6b:ae:e8:87:18:fc:3b:39:fb:d7:ac:7e:74:40:48: 89:0a:9c:ff:48:15:5b:79:58:12:a6:00:87:6d:ba: b0:f2:30:95:e5:53:0f:c2:62:49:c1:7a:a0:78:9d: 29:4d:16:22:3c:be:bd:a4:5c:89:54:6c:3a:be:91: 76:18:96:c4:33:fa:f7:91:28:fa:3f:08:bd:0b:a7: 75:6f:a3:b4:62:27:09:f5:e3:ba:0e:b8:83:73:7d: c0:b1:37:63:a0:a6:a2:e8:a9:c2:b9:ec:56:61:9f: 07:81:de:63:de:a7:ae:de:19:73:17:cf:2b:8c:c7: a9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:33:46:67:C3:89:3E:C3:1B:BE:25:78:33:2F:39:98:58:48:18:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3ab4b47f-51cf-3592-a11b-2bb35d2129af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:79:d9:12:ac:6c:3d:61:73:91:d5:8e:01:81:da:bf:40:95: fb:41:f6:3e:53:7a:5e:44:f0:1a:c1:ac:79:ef:be:53:40:0f: 62:cc:cf:30:4a:85:e3:9b:5a:23:1f:af:77:dc:55:ba:e1:be: 4f:00:ad:9f:a8:bc:7a:49:34:7b:d6:0a:4b:79:62:84:8c:07: d4:ba:1c:e1:b7:b1:ad:72:04:e3:e5:69:9f:c9:54:75:43:98: 63:6d:2f:16:46:fe:6a:2f:df:1b:a7:51:1d:37:90:8d:89:06: 12:a8:88:d4:d2:05:29:95:2e:80:3e:10:52:bf:61:9c:89:ca: c4:e4:24:4e:49:81:69:72:c0:af:32:55:5e:a3:8c:63:7e:c9: 54:20:29:3a:11:57:c8:26:17:05:e5:50:8a:e4:67:65:10:bb: 6f:a2:8b:da:3f:7e:5b:51:90:6a:ea:83:7c:cf:e8:b0:c9:fb: 0e:5b:dc:61:27:7a:0e:b7:8d:a7:6d:1b:c4:c1:a5:b2:ad:d7: 47:e7:6f:ad:26:77:e6:dc:da:68:fe:e4:2b:4f:da:81:1d:a4: b3:ca:f8:e1:5d:5e:78:f1:7d:e7:7c:fc:30:e6:2e:53:d5:d2: 76:5e:e9:77:e3:13:0e:cd:e8:c9:65:64:52:72:c5:73:34:fb: d3:9d:d2:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNp+uVvBWJaczUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZmUzZjIzMWItZWIwYi00M2IxLWI2OGMtMjY3MWQwMmZlYjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAwuEuz5jnu7DwTBmN8WW7jrlsXoNrlYzh97 jlz4QGA/v5iJQSlF8kk6FWP/5rF88nTsHI5pNq55zXu4rPLILcN4toEEObquTu7L PZw/IkXeqMw25gyQwp6E6dloLMwkXBzoyR4EEJAhvzp4HMKu5EH01CxPv9rgWgLe Zxz7hOVRS+5F3jFrruiHGPw7OfvXrH50QEiJCpz/SBVbeVgSpgCHbbqw8jCV5VMP wmJJwXqgeJ0pTRYiPL69pFyJVGw6vpF2GJbEM/r3kSj6Pwi9C6d1b6O0YicJ9eO6 DriDc33AsTdjoKai6KnCuexWYZ8Hgd5j3qeu3hlzF88rjMepPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMzRmfDiT7DG74leDMvOZhYSBirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvM2FiNGI0N2YtNTFjZi0z NTkyLWExMWItMmJiMzVkMjEyOWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJl52RKsbD1hc5HVjgGB2r9AlftB9j5Tel5E8BrBrHnvvlNAD2LMzzBK heObWiMfr3fcVbrhvk8ArZ+ovHpJNHvWCkt5YoSMB9S6HOG3sa1yBOPlaZ/JVHVD mGNtLxZG/mov3xunUR03kI2JBhKoiNTSBSmVLoA+EFK/YZyJysTkJE5JgWlywK8y VV6jjGN+yVQgKToRV8gmFwXlUIrkZ2UQu2+ii9o/fltRkGrqg3zP6LDJ+w5b3GEn eg63jadtG8TBpbKt10fnb60md+bc2mj+5CtP2oEdpLPK+OFdXnjxfed8/DDmLlPV 0nZe6XfjEw7N6MllZFJyxXM0+9Od0hw= -----END CERTIFICATE-----Generated at Tue Jul 21 01:40:01 2026 by rpki-client