$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/48062383-12d0-3b10-ac0f-d117231d28c6.roa File: 48062383-12d0-3b10-ac0f-d117231d28c6.roa (raw, json) Hash identifier: o1tRkYir9IuSlH4UeUMetFbJIoVex6XRc/50sRvLlBA= Subject key identifier: C8:06:79:10:7F:4A:DC:09:D0:9D:CA:1B:96:13:2B:72:A6:B9:D5:3B Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D60CDB75315044907740 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/48062383-12d0-3b10-ac0f-d117231d28c6.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d6:0c:db:75:31:50:44:90:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=3f922e41-decf-42fd-8690-7a6299e57beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0b:aa:33:4f:01:51:f7:fe:73:b7:96:15:94: 42:7d:5e:3c:a5:d2:eb:b4:5f:a1:fb:2e:9d:67:5f: be:a6:a1:13:5c:bb:49:a9:72:da:02:1d:15:f2:7e: 13:66:b1:58:25:22:64:21:c2:9b:e5:d9:04:9e:dc: bd:de:b1:f0:55:48:60:b9:f5:cc:c7:c1:55:4d:00: eb:eb:c8:a4:7d:f3:6b:ce:3e:36:06:5e:a1:b8:1c: a0:3f:be:de:95:74:79:bb:1f:69:42:72:75:b5:c6: 6f:06:56:17:8f:00:8f:5f:04:0b:d6:b7:0a:82:47: 9f:f8:7e:8a:d6:d8:83:7f:df:2c:af:87:7e:9d:46: ef:b4:c7:58:a2:e6:fa:c2:ed:28:35:85:89:b6:66: 69:72:6c:f2:85:f6:25:1c:73:2e:e1:6d:2f:47:2d: 2b:9d:4a:6a:31:e2:81:45:bb:b3:93:18:46:a6:9a: 02:ea:25:70:bb:83:1a:da:02:81:71:60:44:51:12: a5:fa:e7:20:f3:20:5c:68:13:5a:68:03:3a:e9:8e: eb:3d:ec:0d:0c:a3:67:35:46:13:74:1d:fb:1f:ad: 05:0f:6e:40:ce:67:96:d0:e3:2e:35:3d:02:09:00: aa:f4:c9:e1:cc:97:0c:bc:f0:bf:0f:e4:d3:a5:3e: 46:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:06:79:10:7F:4A:DC:09:D0:9D:CA:1B:96:13:2B:72:A6:B9:D5:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/48062383-12d0-3b10-ac0f-d117231d28c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:be:93:45:d5:0b:ac:fa:70:ab:65:2d:1c:ee:4b:d1:20:6e: cd:e8:38:ef:81:43:63:41:b5:dc:53:9c:3e:b3:b7:cd:90:99: 32:5b:a8:14:46:14:1b:e9:7c:a1:81:19:dc:c6:ab:2f:ca:4d: 09:4b:f5:f1:10:ca:fa:84:ec:31:dc:68:fd:ba:15:6e:68:a5: be:b7:45:12:dc:15:81:de:7c:46:64:31:df:ce:df:0a:9a:a4: 1f:6b:23:45:bc:83:6b:21:01:e5:c6:55:d5:44:bb:f7:7b:e9: 4b:65:de:fd:a6:7a:c6:e0:c7:a6:b7:67:24:81:7a:ba:3a:02: e1:63:c6:87:e3:02:dc:f5:f4:c0:34:0f:af:1d:f0:99:9d:a1: ad:52:e0:0d:72:d3:cb:b2:78:7c:f9:b9:70:24:0a:df:2b:78: 91:15:b0:9d:72:e0:26:c7:16:dc:67:f9:01:47:34:11:b3:c0: 7b:ca:d9:34:1f:b7:8c:13:c3:19:00:b0:ed:c0:c5:c4:62:8f: 50:03:3d:dd:3b:db:b8:ed:fa:95:91:81:fd:b3:62:d5:9e:69: 4d:00:dd:b1:49:20:d2:c1:8d:49:20:4f:f5:2b:42:04:21:50: a5:ea:ca:bb:da:e7:92:fa:45:7a:37:7e:29:a0:fd:22:96:54: 4f:6e:c9:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNYM23UxUESQd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk M2Y5MjJlNDEtZGVjZi00MmZkLTg2OTAtN2E2Mjk5ZTU3YmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wuqM08BUff+c7eWFZRCfV48pdLrtF+h+y6d Z1++pqETXLtJqXLaAh0V8n4TZrFYJSJkIcKb5dkEnty93rHwVUhgufXMx8FVTQDr 68ikffNrzj42Bl6huBygP77elXR5ux9pQnJ1tcZvBlYXjwCPXwQL1rcKgkef+H6K 1tiDf98sr4d+nUbvtMdYoub6wu0oNYWJtmZpcmzyhfYlHHMu4W0vRy0rnUpqMeKB RbuzkxhGppoC6iVwu4Ma2gKBcWBEURKl+ucg8yBcaBNaaAM66Y7rPewNDKNnNUYT dB37H60FD25AzmeW0OMuNT0CCQCq9MnhzJcMvPC/D+TTpT5GPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgGeRB/StwJ0J3KG5YTK3KmudU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNDgwNjIzODMtMTJkMC0z YjEwLWFjMGYtZDExNzIzMWQyOGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEG+k0XVC6z6cKtlLRzuS9Egbs3oOO+BQ2NBtdxTnD6zt82QmTJbqBRG FBvpfKGBGdzGqy/KTQlL9fEQyvqE7DHcaP26FW5opb63RRLcFYHefEZkMd/O3wqa pB9rI0W8g2shAeXGVdVEu/d76Utl3v2mesbgx6a3ZySBero6AuFjxofjAtz19MA0 D68d8Jmdoa1S4A1y08uyeHz5uXAkCt8reJEVsJ1y4CbHFtxn+QFHNBGzwHvK2TQf t4wTwxkAsO3AxcRij1ADPd0727jt+pWRgf2zYtWeaU0A3bFJINLBjUkgT/UrQgQh UKXqyrva55L6RXo3fimg/SKWVE9uycI= -----END CERTIFICATE-----Generated at Tue Jul 21 13:24:44 2026 by rpki-client