$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/52a01772-a844-32e5-86c3-5ebd2cde21d7.roa File: 52a01772-a844-32e5-86c3-5ebd2cde21d7.roa (raw, json) Hash identifier: irHapqSYxLojchqyaVmwXcjJz7C4FGYAihXCqp6An8Q= Subject key identifier: A6:BF:30:B1:37:30:D4:80:E4:67:FA:FC:31:EE:B9:12:46:76:5D:44 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D9C80B20F22197128C40 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/52a01772-a844-32e5-86c3-5ebd2cde21d7.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d9:c8:0b:20:f2:21:97:12:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=a8978e18-aa08-4e76-ab1f-b542334071af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4d:5c:ef:03:19:9e:56:b5:d1:16:c9:f4:d4: c7:11:67:88:4c:2d:b1:13:c7:c6:5a:69:17:9a:c8: f5:bf:f3:67:d3:b0:b6:7e:20:52:eb:c8:78:a5:12: c1:81:93:2d:39:ad:95:4f:6e:4a:57:83:86:d9:af: 50:27:b2:ec:ca:c7:fb:f4:38:ba:d5:4e:88:d8:7c: b5:50:62:41:41:c1:fd:44:a3:85:1c:61:26:99:d1: 8c:fa:d5:80:f5:dc:b1:90:72:78:be:34:f7:0a:0c: 3d:82:e9:e6:e6:cc:be:5b:c5:e5:ae:e7:eb:30:0f: a4:40:41:07:72:ae:f8:d7:27:0a:d1:de:6b:2e:44: fb:41:41:0c:91:fd:f2:86:83:43:36:91:26:2d:40: a1:b1:90:bc:a2:bf:24:3d:4e:a4:6c:a9:cb:35:25: 1f:ae:58:ff:6a:c6:8a:07:41:75:f9:a9:7b:a5:5b: a1:c8:fb:5b:01:0e:8f:ea:30:b3:c0:36:19:ff:90: bf:23:bd:61:62:78:30:27:7b:5f:e5:de:f0:e2:5e: 4a:f5:4d:e7:1f:40:4f:12:de:10:6a:a7:a0:44:e7: a8:ec:ce:4f:37:c7:32:09:d7:b9:f7:68:cc:a4:87: 83:e2:d4:14:b7:e4:84:13:ad:2d:fe:39:a6:36:4a: 4e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BF:30:B1:37:30:D4:80:E4:67:FA:FC:31:EE:B9:12:46:76:5D:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/52a01772-a844-32e5-86c3-5ebd2cde21d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:86:3d:e6:14:d5:ea:07:18:72:0a:00:d7:a6:c2:83:41:ea: ad:65:51:54:a4:3d:72:34:29:88:60:26:3d:1e:db:da:26:de: 2a:ce:87:6a:1a:76:a0:7e:12:90:49:d6:99:c4:84:ce:1c:1f: 0e:c5:b5:64:44:21:1d:c6:56:55:98:62:24:45:f7:51:5d:e5: 7f:1b:03:ce:85:66:64:4e:65:ae:c2:a2:12:43:43:95:39:d7: d5:d1:79:73:0d:fd:36:7b:4d:28:6e:3e:c0:65:c0:dd:12:0f: 52:2f:ab:42:b4:6d:d4:75:b0:0b:fd:a2:5e:41:49:3e:2f:6e: 32:bd:6e:af:38:0c:17:ba:91:88:28:7e:e3:44:ce:81:ca:5f: 84:c8:c6:48:f2:1b:6b:87:84:5e:98:ae:43:b6:8a:0b:9d:21: 2a:b2:21:87:ae:00:66:a7:20:04:f1:3e:07:22:ea:c1:51:96: c3:cb:f0:70:78:29:b7:20:ed:40:fd:d6:55:61:13:23:2f:a8: fc:69:00:3c:ad:ac:e9:73:67:55:73:c1:e4:cf:34:ed:e3:09: 5f:8e:5f:3b:72:de:79:5d:4a:4e:86:e1:a5:22:30:76:c6:7a: 6e:47:10:f5:24:39:74:b6:8f:ea:77:14:9e:57:c6:3d:fe:c0: e9:2b:01:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNnICyDyIZcSjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YTg5NzhlMTgtYWEwOC00ZTc2LWFiMWYtYjU0MjMzNDA3MWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk1c7wMZnla10RbJ9NTHEWeITC2xE8fGWmkX msj1v/Nn07C2fiBS68h4pRLBgZMtOa2VT25KV4OG2a9QJ7Lsysf79Di61U6I2Hy1 UGJBQcH9RKOFHGEmmdGM+tWA9dyxkHJ4vjT3Cgw9gunm5sy+W8XlrufrMA+kQEEH cq741ycK0d5rLkT7QUEMkf3yhoNDNpEmLUChsZC8or8kPU6kbKnLNSUfrlj/asaK B0F1+al7pVuhyPtbAQ6P6jCzwDYZ/5C/I71hYngwJ3tf5d7w4l5K9U3nH0BPEt4Q aqegROeo7M5PN8cyCde592jMpIeD4tQUt+SEE60t/jmmNkpOLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa/MLE3MNSA5Gf6/DHuuRJGdl1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNTJhMDE3NzItYTg0NC0z MmU1LTg2YzMtNWViZDJjZGUyMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+GPeYU1eoHGHIKANemwoNB6q1lUVSkPXI0KYhgJj0e29om3irOh2oa dqB+EpBJ1pnEhM4cHw7FtWREIR3GVlWYYiRF91Fd5X8bA86FZmROZa7CohJDQ5U5 19XReXMN/TZ7TShuPsBlwN0SD1Ivq0K0bdR1sAv9ol5BST4vbjK9bq84DBe6kYgo fuNEzoHKX4TIxkjyG2uHhF6YrkO2igudISqyIYeuAGanIATxPgci6sFRlsPL8HB4 Kbcg7UD91lVhEyMvqPxpADytrOlzZ1VzweTPNO3jCV+OXzty3nldSk6G4aUiMHbG em5HEPUkOXS2j+p3FJ5Xxj3+wOkrAeM= -----END CERTIFICATE-----Generated at Tue Jul 21 01:40:02 2026 by rpki-client