$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/42dd7f78-f74a-3426-ae4b-db716c576597.roa File: 42dd7f78-f74a-3426-ae4b-db716c576597.roa (raw, json) Hash identifier: XqlogPo26BsdsDZ9sxlWCfX9NSYBlQd+nwT5obvRLyM= Subject key identifier: E5:35:75:36:AB:6A:4C:2C:2C:FB:7C:1A:2D:F2:12:F1:00:C3:B7:1B Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DB027A8463FE80389300 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/42dd7f78-f74a-3426-ae4b-db716c576597.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:db:02:7a:84:63:fe:80:38:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=8ca2b726-18f4-4bca-821f-a6f4892c8d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:03:b4:5a:0b:e0:7f:91:77:a1:9c:1b:bf: 3f:40:b1:b3:68:93:51:e4:22:54:7a:d6:66:ed:c3: 00:6d:72:68:10:a3:b9:21:17:02:96:46:f9:f1:08: 3a:38:4f:c3:be:dd:8b:34:8c:33:35:87:b2:1a:98: d4:98:20:41:b7:6c:d4:51:69:a2:2f:5c:cf:66:8b: f5:c2:bc:b7:c7:c3:34:a5:75:db:ba:72:f8:ad:dc: e8:ec:d2:55:9a:45:90:d7:c9:2b:66:e8:44:f8:c8: 41:46:c2:20:69:14:a5:10:20:f5:44:ea:31:4e:ef: 25:50:57:d6:50:a3:92:85:4d:81:46:09:97:91:d2: 9f:39:eb:1c:2d:c6:01:3d:8d:1f:7c:b5:f3:cb:af: ef:36:7e:dc:25:56:17:4a:4c:4f:a2:24:d7:e4:41: fe:7e:ba:a0:22:f3:49:ad:30:91:ff:d4:50:d9:a4: e1:af:3c:2e:10:02:83:ef:0f:77:37:5f:a7:6d:0c: ab:5b:e2:b9:87:67:35:7b:74:97:3b:a3:0d:51:8e: 24:87:f1:0e:61:73:73:24:91:3e:97:d4:e7:5b:66: 05:50:f9:70:69:24:43:7b:71:c8:78:b3:5f:26:19: f2:b4:db:b1:58:e9:bd:3f:4a:5d:6c:08:54:3a:97: af:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:35:75:36:AB:6A:4C:2C:2C:FB:7C:1A:2D:F2:12:F1:00:C3:B7:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/42dd7f78-f74a-3426-ae4b-db716c576597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f8:e0:42:e4:57:49:fb:14:38:a6:67:a2:c6:43:9d:66:a7: 5b:1e:fc:a4:2e:c0:a1:7b:af:38:42:39:89:12:c8:ae:f1:58: 20:ca:b6:bb:0a:a8:b2:93:08:fd:de:ff:1e:8b:4e:44:80:80: 4a:0c:e0:31:3b:6d:44:52:e3:b7:14:2d:f5:d3:c7:72:dc:e7: 3e:b9:93:72:a9:a5:e5:ca:9f:37:19:3e:3d:95:7c:e2:e0:1f: 0c:83:ad:64:91:3d:aa:7b:47:32:a8:8b:42:75:05:09:27:2e: 0f:c4:bb:18:08:2c:6a:24:21:87:05:6b:c0:c6:47:65:50:46: a4:e7:7a:0c:cd:a9:79:80:29:8c:01:4f:05:0a:64:98:1b:2e: 13:9f:a2:27:87:9c:23:63:0c:66:82:86:2a:5f:6b:8d:88:48: 44:8c:18:38:59:9a:1c:8a:16:f7:6d:a1:a6:83:c5:54:a5:19: 28:3c:28:00:55:e7:dc:ce:4f:1c:ce:84:cd:68:37:be:63:99: 34:2d:e7:13:26:6b:bd:fe:1e:af:6b:ea:6e:58:ae:ce:9e:e1: 9a:e7:1b:9a:5e:ad:69:a1:00:f3:91:56:99:0a:12:fb:7b:49: c3:31:60:a7:0e:94:9f:ce:37:39:3a:bf:59:4f:cf:ec:1b:b5: f6:39:d9:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNsCeoRj/oA4kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk OGNhMmI3MjYtMThmNC00YmNhLTgyMWYtYTZmNDg5MmM4ZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqoDtFoL4H+Rd6GcG78/QLGzaJNR5CJUetZm 7cMAbXJoEKO5IRcClkb58Qg6OE/Dvt2LNIwzNYeyGpjUmCBBt2zUUWmiL1zPZov1 wry3x8M0pXXbunL4rdzo7NJVmkWQ18krZuhE+MhBRsIgaRSlECD1ROoxTu8lUFfW UKOShU2BRgmXkdKfOescLcYBPY0ffLXzy6/vNn7cJVYXSkxPoiTX5EH+frqgIvNJ rTCR/9RQ2aThrzwuEAKD7w93N1+nbQyrW+K5h2c1e3SXO6MNUY4kh/EOYXNzJJE+ l9TnW2YFUPlwaSRDe3HIeLNfJhnytNuxWOm9P0pdbAhUOpev+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOU1dTarakwsLPt8Gi3yEvEAw7cbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNDJkZDdmNzgtZjc0YS0z NDI2LWFlNGItZGI3MTZjNTc2NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb44ELkV0n7FDimZ6LGQ51mp1se/KQuwKF7rzhCOYkSyK7xWCDKtrsK qLKTCP3e/x6LTkSAgEoM4DE7bURS47cULfXTx3Lc5z65k3KppeXKnzcZPj2VfOLg HwyDrWSRPap7RzKoi0J1BQknLg/EuxgILGokIYcFa8DGR2VQRqTnegzNqXmAKYwB TwUKZJgbLhOfoieHnCNjDGaChipfa42ISESMGDhZmhyKFvdtoaaDxVSlGSg8KABV 59zOTxzOhM1oN75jmTQt5xMma73+Hq9r6m5Yrs6e4ZrnG5perWmhAPORVpkKEvt7 ScMxYKcOlJ/ONzk6v1lPz+wbtfY52e8= -----END CERTIFICATE-----Generated at Tue Jul 21 01:41:11 2026 by rpki-client