$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3bb787dd-562b-3af8-a5bc-421a6dbc9643.roa File: 3bb787dd-562b-3af8-a5bc-421a6dbc9643.roa (raw, json) Hash identifier: +bq8V9Q8FuUaGjxrC7NRGWNgemysLR0kyJLrNakf7pQ= Subject key identifier: 01:E0:78:19:05:92:B4:57:A8:02:1F:C2:02:04:81:5F:27:DA:EB:F9 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D8E11C2C3396360EEC80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3bb787dd-562b-3af8-a5bc-421a6dbc9643.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d8:e1:1c:2c:33:96:36:0e:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=bb05d9aa-46a4-4187-abff-dccc696c3b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f2:d5:b8:4e:20:e9:bc:37:4f:3b:3f:af:fa: 2c:7e:eb:5b:c3:bc:2f:7d:36:06:12:30:77:a1:38: 73:e6:e5:83:be:bd:8f:40:b7:34:78:8b:33:39:91: 3c:ad:16:ca:73:f6:e6:33:f2:48:d5:c8:a4:0a:82: 8b:c1:24:42:7a:b8:59:eb:af:52:87:b0:30:c6:f4: 12:3c:e0:ef:a9:44:48:8e:5f:ca:0d:5d:d8:c8:6b: f3:ca:7b:b9:20:4e:ef:4d:fd:95:88:aa:1a:6b:8b: 89:41:95:a2:b9:eb:a2:7d:d6:3f:1a:28:0b:4c:b2: e8:78:27:12:4b:95:17:48:c5:de:4d:f5:3e:22:1b: 28:2f:b2:68:b2:d3:e3:66:47:17:1b:5e:f0:e9:0b: b1:ae:90:4e:50:f7:d9:a5:22:7f:57:5c:2c:f2:57: f5:29:e5:d3:26:22:d7:b1:dc:13:aa:d7:f9:18:0d: d4:30:08:2d:52:a6:fe:9f:de:86:1c:d1:3a:2b:3f: 52:a6:1e:6f:37:d5:84:1b:5c:33:0a:49:a9:cb:e6: 8d:a8:5c:f0:8d:5d:91:66:44:d2:9e:7b:9c:0b:bd: 60:01:45:e4:be:f0:0f:1b:53:d0:23:85:9b:9e:4e: c4:35:51:07:b2:e0:50:be:36:d0:3c:78:3b:af:5c: 3d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E0:78:19:05:92:B4:57:A8:02:1F:C2:02:04:81:5F:27:DA:EB:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3bb787dd-562b-3af8-a5bc-421a6dbc9643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fe:e4:f9:e7:96:34:cd:54:b2:99:5c:ea:86:94:98:e6:6a: 26:78:28:2d:3f:89:e6:cc:b5:a9:52:50:d9:5b:f7:40:6e:4e: f9:15:a7:1e:c5:8f:07:9d:96:38:c0:69:e2:ff:a7:5b:79:e0: 6f:51:d8:57:fe:d5:cf:7f:a1:a9:4b:9a:bb:0a:46:08:cd:18: 60:40:8e:34:74:88:41:51:57:e9:5b:f2:cb:5a:71:bd:01:c0: 93:d8:03:34:89:0a:a1:d5:a2:5d:c9:33:1e:6e:65:68:46:8b: a0:88:22:c0:48:c6:ff:5f:38:d1:c7:ad:1d:03:55:1a:68:6a: 0c:59:93:71:ce:f3:21:e8:6a:a5:d8:79:54:36:e9:68:e8:79: 89:28:b8:37:74:c4:c4:ca:8b:42:39:28:a4:15:5a:a5:9a:9b: b2:f6:b7:a5:98:a0:1b:45:da:fa:13:09:17:af:ba:17:96:b5: ca:c9:56:f8:68:32:91:4c:25:44:6b:66:4a:59:e6:9d:24:f8: df:af:85:32:24:b5:e9:7b:4c:bb:dd:8e:34:8a:10:72:5a:49: 5e:68:5c:11:16:12:3c:f6:98:cd:2e:aa:3d:2b:75:7f:5b:06: 9e:5e:8c:85:ed:9d:00:c2:41:d0:50:6f:ad:f6:4a:a8:7c:b5: 5e:31:0d:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNjhHCwzljYO7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YmIwNWQ5YWEtNDZhNC00MTg3LWFiZmYtZGNjYzY5NmMzYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvLVuE4g6bw3Tzs/r/osfutbw7wvfTYGEjB3 oThz5uWDvr2PQLc0eIszOZE8rRbKc/bmM/JI1cikCoKLwSRCerhZ669Sh7AwxvQS PODvqURIjl/KDV3YyGvzynu5IE7vTf2ViKoaa4uJQZWiueuifdY/GigLTLLoeCcS S5UXSMXeTfU+IhsoL7JostPjZkcXG17w6QuxrpBOUPfZpSJ/V1ws8lf1KeXTJiLX sdwTqtf5GA3UMAgtUqb+n96GHNE6Kz9Sph5vN9WEG1wzCkmpy+aNqFzwjV2RZkTS nnucC71gAUXkvvAPG1PQI4Wbnk7ENVEHsuBQvjbQPHg7r1w9ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHgeBkFkrRXqAIfwgIEgV8n2uv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvM2JiNzg3ZGQtNTYyYi0z YWY4LWE1YmMtNDIxYTZkYmM5NjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3+5PnnljTNVLKZXOqGlJjmaiZ4KC0/iebMtalSUNlb90BuTvkVpx7F jwedljjAaeL/p1t54G9R2Ff+1c9/oalLmrsKRgjNGGBAjjR0iEFRV+lb8stacb0B wJPYAzSJCqHVol3JMx5uZWhGi6CIIsBIxv9fONHHrR0DVRpoagxZk3HO8yHoaqXY eVQ26WjoeYkouDd0xMTKi0I5KKQVWqWam7L2t6WYoBtF2voTCRevuheWtcrJVvho MpFMJURrZkpZ5p0k+N+vhTIktel7TLvdjjSKEHJaSV5oXBEWEjz2mM0uqj0rdX9b Bp5ejIXtnQDCQdBQb632Sqh8tV4xDSw= -----END CERTIFICATE-----Generated at Tue Jul 21 01:40:50 2026 by rpki-client