$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/47acfa3d-57c5-374d-a709-a28399c8e639.roa File: 47acfa3d-57c5-374d-a709-a28399c8e639.roa (raw, json) Hash identifier: 4qRmNXqx+aTF338VvqLom/9RZ5E0GrLlPNN0ny6ypjc= Subject key identifier: B2:49:06:91:0E:54:46:91:A3:C6:AF:67:14:99:69:F3:45:F6:2E:B4 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D5E20958AB9713CC0880 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/47acfa3d-57c5-374d-a709-a28399c8e639.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d5:e2:09:58:ab:97:13:cc:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=773534f4-1871-44a8-88f4-29e86dd856ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7b:70:42:82:5e:6f:4d:b6:7f:1a:2b:08:77: 63:96:38:60:58:53:f9:32:75:41:8d:6d:b1:c1:4d: 74:61:2e:03:d5:ad:f0:75:2a:b8:22:22:8d:41:18: f6:a3:3a:43:f8:80:f1:f2:f2:2f:09:15:dc:a7:ee: 98:50:1f:8b:eb:6a:e8:0d:24:47:e9:fc:80:bf:a3: f5:10:c3:23:9a:34:45:f4:8f:22:2e:cf:a2:98:2d: 90:58:91:c6:ee:b6:20:f2:c0:0a:59:45:b9:f3:f3: 6a:69:05:7e:a8:a2:1f:98:2d:a4:e5:4c:3f:85:e4: 5b:b7:ea:bb:c6:03:18:e3:8c:80:b4:ac:2a:a2:7d: 82:ca:6b:3d:a5:6b:75:59:2a:a3:f9:bc:3d:6a:17: 83:c8:22:23:6a:53:0b:49:8f:64:9e:1c:a3:a4:25: c7:d3:05:8c:42:a1:6f:ca:63:f3:1d:f9:6b:af:8d: 20:fa:aa:86:88:7d:12:0f:65:73:32:1c:0a:50:07: 30:23:6d:19:ec:80:b3:55:b8:92:07:71:d1:bb:69: 50:ec:24:df:26:6e:4d:b5:46:9a:e1:eb:79:4e:6c: 0f:84:6d:81:01:db:d4:d1:e5:f1:cc:f2:7d:f5:c9: bd:ff:ee:bc:f7:f0:a8:41:c5:cd:d1:6a:5a:b6:c3: cb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:49:06:91:0E:54:46:91:A3:C6:AF:67:14:99:69:F3:45:F6:2E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/47acfa3d-57c5-374d-a709-a28399c8e639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1c:94:9f:bd:5e:25:8d:c3:3c:5e:7c:79:4a:7d:ac:c2:a9: ae:03:9c:fd:da:10:6d:b6:f9:d1:86:8c:19:f0:4d:b4:88:23: b6:5d:7f:0f:9c:f6:28:f9:6b:d3:84:50:30:d4:f0:e3:2a:a8: a2:d5:3d:b7:48:46:65:54:a1:29:a5:6e:bb:59:d4:d7:3e:e8: 46:ed:8b:11:5d:52:a9:49:06:53:c6:d9:21:71:eb:b5:08:1f: 0e:d8:c3:05:80:11:3c:af:19:ec:53:49:f7:b0:05:2f:e1:7f: 63:e5:21:7b:9a:15:9c:34:65:60:a8:13:15:0b:6e:1f:80:ad: 2a:44:88:d9:97:d4:58:2e:dd:72:ec:05:d3:40:a9:50:dd:10: 25:26:77:da:4b:09:39:9b:a6:fd:b7:ed:a7:89:e1:c4:15:97: 38:4e:95:1f:9d:8c:c9:5b:59:dd:b3:2a:6b:06:67:ec:3a:a9: 6f:26:64:64:f9:85:3e:c5:24:0a:a9:44:a2:01:fb:c7:02:9a: e4:ee:61:0c:53:5b:1c:93:b0:1b:36:b8:38:17:3b:7a:ee:90: 87:34:0b:0c:76:b2:67:f4:8f:bc:20:83:51:cf:80:07:4c:28: 3c:e1:0e:8c:53:17:ad:31:7f:cc:92:d0:ea:c1:c4:99:e3:d1: 59:68:7b:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNXiCVirlxPMCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NzczNTM0ZjQtMTg3MS00NGE4LTg4ZjQtMjllODZkZDg1NmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3twQoJeb022fxorCHdjljhgWFP5MnVBjW2x wU10YS4D1a3wdSq4IiKNQRj2ozpD+IDx8vIvCRXcp+6YUB+L62roDSRH6fyAv6P1 EMMjmjRF9I8iLs+imC2QWJHG7rYg8sAKWUW58/NqaQV+qKIfmC2k5Uw/heRbt+q7 xgMY44yAtKwqon2Cyms9pWt1WSqj+bw9aheDyCIjalMLSY9knhyjpCXH0wWMQqFv ymPzHflrr40g+qqGiH0SD2VzMhwKUAcwI20Z7ICzVbiSB3HRu2lQ7CTfJm5NtUaa 4et5TmwPhG2BAdvU0eXxzPJ99cm9/+689/CoQcXN0WpatsPLQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJJBpEOVEaRo8avZxSZafNF9i60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNDdhY2ZhM2QtNTdjNS0z NzRkLWE3MDktYTI4Mzk5YzhlNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4clJ+9XiWNwzxefHlKfazCqa4DnP3aEG22+dGGjBnwTbSII7Zdfw+c 9ij5a9OEUDDU8OMqqKLVPbdIRmVUoSmlbrtZ1Nc+6EbtixFdUqlJBlPG2SFx67UI Hw7YwwWAETyvGexTSfewBS/hf2PlIXuaFZw0ZWCoExULbh+ArSpEiNmX1Fgu3XLs BdNAqVDdECUmd9pLCTmbpv237aeJ4cQVlzhOlR+djMlbWd2zKmsGZ+w6qW8mZGT5 hT7FJAqpRKIB+8cCmuTuYQxTWxyTsBs2uDgXO3rukIc0Cwx2smf0j7wgg1HPgAdM KDzhDoxTF60xf8yS0OrBxJnj0Vloe90= -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:17 2026 by rpki-client