$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/4e2f23a3-0f51-30b7-98ab-2797c4b4caa4.roa File: 4e2f23a3-0f51-30b7-98ab-2797c4b4caa4.roa (raw, json) Hash identifier: bc6iNtfSBnROhdseNtEdhyUQjy7hVzZCCEcqSr8M8wI= Subject key identifier: 32:B9:DA:D8:D9:F7:6F:D5:B5:F8:98:95:1E:37:FC:F6:E5:FF:A8:0B Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D9B96714E7A57A1710C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/4e2f23a3-0f51-30b7-98ab-2797c4b4caa4.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d9:b9:67:14:e7:a5:7a:17:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=d6952174-3efb-4200-ad32-b2931357a0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b7:37:d2:7c:90:5c:52:d1:2a:0f:89:61:37: 60:4b:8e:0e:d4:44:a2:2c:4c:2c:45:f8:0b:4c:ae: ff:97:67:e5:1f:53:70:ee:9f:40:bb:9f:66:5c:c4: 0b:29:bd:aa:f9:6d:fb:82:5d:07:9a:44:98:51:eb: 6d:54:86:9f:fd:cb:d1:f4:5c:91:cd:52:c4:47:ca: 54:60:68:c9:4f:76:73:ed:57:76:48:e1:8b:6b:5b: 04:14:d1:dd:ae:01:21:1a:85:ba:76:e3:cb:ae:a3: a8:7f:2e:4e:12:5a:9a:9e:a1:9a:82:ce:76:ee:99: d3:fb:ae:51:be:32:d4:29:a6:0d:bf:37:28:d3:11: 02:84:55:1c:d2:8b:db:58:47:7a:45:96:e2:50:d4: 57:87:85:bf:61:ee:be:92:62:70:87:ae:17:7f:47: 3a:91:db:aa:c1:5c:f2:58:f0:fd:c1:07:3d:83:bd: a4:66:67:ef:b4:f9:20:7a:b7:3f:3e:f0:96:fc:a5: 01:e0:18:fe:f5:10:79:ce:70:01:21:19:80:5f:62: 32:55:e7:b2:1e:0e:2f:0e:9c:c0:b5:67:53:03:ef: 27:8e:8b:b3:8d:ff:48:d7:8c:b3:d1:d1:7b:10:7f: 81:0a:b3:28:5a:cd:4c:5e:3f:f8:4e:ec:c5:e1:fd: ec:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B9:DA:D8:D9:F7:6F:D5:B5:F8:98:95:1E:37:FC:F6:E5:FF:A8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/4e2f23a3-0f51-30b7-98ab-2797c4b4caa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:24:e4:04:af:4f:55:10:9a:b9:2e:53:8b:a2:fb:92:56:31: 76:9d:73:92:75:89:73:6f:f7:4d:83:60:45:1e:50:c8:6f:c8: d0:49:0e:84:35:01:5a:0c:59:9a:ff:6b:f0:22:df:47:2f:71: 03:6e:f6:29:ef:10:2f:a3:ab:7a:1e:c4:d9:5a:f3:98:73:09: 3f:99:04:f7:f2:7e:aa:64:95:ba:84:de:80:b5:36:bb:75:a0: 5d:1f:9c:ca:18:df:20:77:d7:90:00:24:19:90:9c:32:3f:f9: fd:87:d5:a3:1b:a9:2d:60:c5:d6:fd:2a:79:92:cd:07:66:ba: e0:59:bc:08:1e:1c:04:24:04:a1:73:19:40:68:5a:f1:4f:63: e6:5a:7a:7d:e6:9b:1f:33:f7:cf:bc:f9:a4:b6:e0:ed:af:c6: 77:6b:ac:b1:29:a4:a6:45:9d:c8:a2:eb:47:92:02:e4:04:55: 37:26:e5:cb:7a:17:51:08:36:d5:66:60:49:70:f5:9a:be:3b: d1:29:f5:53:ca:b2:2d:27:3c:98:6d:64:c8:d4:61:73:e6:8f: 5a:8c:d8:db:63:e1:93:3e:60:2b:db:33:90:8d:7a:48:d6:dc: f5:ea:ca:ed:83:76:62:52:4a:87:5e:bc:f8:ae:2e:9e:13:ed: f5:ce:fb:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNm5ZxTnpXoXEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZDY5NTIxNzQtM2VmYi00MjAwLWFkMzItYjI5MzEzNTdhMGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbc30nyQXFLRKg+JYTdgS44O1ESiLEwsRfgL TK7/l2flH1Nw7p9Au59mXMQLKb2q+W37gl0HmkSYUettVIaf/cvR9FyRzVLER8pU YGjJT3Zz7Vd2SOGLa1sEFNHdrgEhGoW6duPLrqOofy5OElqanqGags527pnT+65R vjLUKaYNvzco0xEChFUc0ovbWEd6RZbiUNRXh4W/Ye6+kmJwh64Xf0c6kduqwVzy WPD9wQc9g72kZmfvtPkgerc/PvCW/KUB4Bj+9RB5znABIRmAX2IyVeeyHg4vDpzA tWdTA+8njouzjf9I14yz0dF7EH+BCrMoWs1MXj/4TuzF4f3swQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK52tjZ92/VtfiYlR43/Pbl/6gLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNGUyZjIzYTMtMGY1MS0z MGI3LTk4YWItMjc5N2M0YjRjYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEk5ASvT1UQmrkuU4ui+5JWMXadc5J1iXNv902DYEUeUMhvyNBJDoQ1 AVoMWZr/a/Ai30cvcQNu9invEC+jq3oexNla85hzCT+ZBPfyfqpklbqE3oC1Nrt1 oF0fnMoY3yB315AAJBmQnDI/+f2H1aMbqS1gxdb9KnmSzQdmuuBZvAgeHAQkBKFz GUBoWvFPY+Zaen3mmx8z98+8+aS24O2vxndrrLEppKZFncii60eSAuQEVTcm5ct6 F1EINtVmYElw9Zq+O9Ep9VPKsi0nPJhtZMjUYXPmj1qM2Ntj4ZM+YCvbM5CNekjW 3PXqyu2DdmJSSodevPiuLp4T7fXO++g= -----END CERTIFICATE-----Generated at Tue Jul 21 01:40:03 2026 by rpki-client