$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5594c8dd-cbd6-3497-a85b-4e656a001a98.roa File: 5594c8dd-cbd6-3497-a85b-4e656a001a98.roa (raw, json) Hash identifier: 7IU0qGNz8BbTDDGGBlvrNR5to/7foOvJNZdanq4tjxo= Subject key identifier: EA:C9:D0:F4:D5:1E:60:0A:5D:A9:22:03:3C:DA:AB:21:A6:0A:DF:7B Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D63A629B966438C78B80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5594c8dd-cbd6-3497-a85b-4e656a001a98.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d6:3a:62:9b:96:64:38:c7:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=ae57c07c-3a31-4f8c-9d73-2a88ae3af348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:aa:94:15:30:7c:8f:ee:6e:ed:b6:e7:30:d8: 40:8c:75:3a:5e:78:60:13:d7:5d:3c:83:0c:73:da: 40:67:1c:20:1c:2a:d0:ce:61:43:5d:9b:77:97:ee: e1:3f:74:1d:a3:17:dc:e0:c0:a7:af:34:12:44:9b: ee:be:41:3d:89:7c:7c:34:c4:36:cc:4f:15:08:34: 1b:90:e8:e6:dd:1e:13:40:bf:12:6c:fc:1b:29:88: 69:ae:f8:c0:48:6d:68:65:2f:80:05:53:39:fa:bb: 51:99:cb:16:7b:50:a2:71:b4:60:ba:14:2d:c1:b0: 6a:67:f7:9f:5f:63:38:57:16:be:f2:33:f5:d2:0d: 9b:d5:5d:86:95:ef:3b:20:c8:d2:31:c7:a9:27:4b: 9b:35:13:d3:f4:8f:34:81:09:05:26:f0:8a:fd:58: ce:d6:62:cc:6e:6c:53:b3:e5:72:48:7a:6b:9d:c8: f6:96:7c:10:8e:4a:ef:cf:4d:0d:dd:18:dc:f2:8d: bd:3f:cb:27:e5:0d:e0:21:08:a1:87:c1:53:ef:a8: 9b:3a:f1:8f:f0:fc:87:ab:5c:9e:28:d1:07:cd:0c: fe:b5:07:e8:52:7a:2e:84:5e:e7:93:f0:19:ee:56: 2c:c5:f1:e8:cf:5b:64:9f:a3:09:12:53:9e:eb:82: 18:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C9:D0:F4:D5:1E:60:0A:5D:A9:22:03:3C:DA:AB:21:A6:0A:DF:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5594c8dd-cbd6-3497-a85b-4e656a001a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:50:1d:4b:ce:f5:07:41:87:7a:8d:df:3d:3f:6a:78:48:b0: ac:9c:ab:d2:38:01:35:63:4e:70:60:67:fd:00:0c:b2:ae:4a: d3:6f:77:61:f8:e0:1c:0e:63:1d:a1:fc:cd:96:bc:80:96:39: 29:c1:75:df:88:dc:db:05:2b:de:6e:1a:99:fa:88:84:9d:62: d8:8d:f7:a6:95:c3:f4:50:79:d3:0b:da:83:04:d6:ed:e6:c6: f2:b4:b2:cd:e6:1c:3c:89:92:cb:7a:1a:13:31:f4:74:b8:c7: 22:be:4b:ce:65:e8:fd:b6:03:48:c3:81:18:e9:0a:4f:8d:a6: 6e:2b:f4:b4:06:03:10:75:d1:9f:89:a0:3b:1a:41:b3:5e:e4: 67:0e:fa:ed:3c:92:52:af:c2:49:57:f1:de:99:46:0c:35:f6: aa:b2:c5:d7:5e:6c:ab:53:d0:17:b1:0a:77:0f:ac:0f:e3:26: e0:d0:3c:26:48:7e:cb:54:39:d9:cd:43:ea:29:ee:aa:b3:ce: 16:b7:f6:17:40:eb:fc:fd:cc:72:4c:e2:7b:f7:b7:cc:a3:81: 53:bd:e5:ed:40:6c:3f:c5:25:f3:c6:67:7c:6f:db:2d:7a:b7: 2b:64:0c:97:32:40:6a:1d:66:1d:2e:73:24:90:e9:7a:8f:7f: ed:bc:ba:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNY6YpuWZDjHi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YWU1N2MwN2MtM2EzMS00ZjhjLTlkNzMtMmE4OGFlM2FmMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaqUFTB8j+5u7bbnMNhAjHU6XnhgE9ddPIMM c9pAZxwgHCrQzmFDXZt3l+7hP3Qdoxfc4MCnrzQSRJvuvkE9iXx8NMQ2zE8VCDQb kOjm3R4TQL8SbPwbKYhprvjASG1oZS+ABVM5+rtRmcsWe1CicbRguhQtwbBqZ/ef X2M4Vxa+8jP10g2b1V2Gle87IMjSMcepJ0ubNRPT9I80gQkFJvCK/VjO1mLMbmxT s+VySHprncj2lnwQjkrvz00N3Rjc8o29P8sn5Q3gIQihh8FT76ibOvGP8PyHq1ye KNEHzQz+tQfoUnouhF7nk/AZ7lYsxfHoz1tkn6MJElOe64IYAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrJ0PTVHmAKXakiAzzaqyGmCt97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNTU5NGM4ZGQtY2JkNi0z NDk3LWE4NWItNGU2NTZhMDAxYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhQHUvO9QdBh3qN3z0/anhIsKycq9I4ATVjTnBgZ/0ADLKuStNvd2H4 4BwOYx2h/M2WvICWOSnBdd+I3NsFK95uGpn6iISdYtiN96aVw/RQedML2oME1u3m xvK0ss3mHDyJkst6GhMx9HS4xyK+S85l6P22A0jDgRjpCk+Npm4r9LQGAxB10Z+J oDsaQbNe5GcO+u08klKvwklX8d6ZRgw19qqyxddebKtT0BexCncPrA/jJuDQPCZI fstUOdnNQ+op7qqzzha39hdA6/z9zHJM4nv3t8yjgVO95e1AbD/FJfPGZ3xv2y16 tytkDJcyQGodZh0ucySQ6XqPf+28um4= -----END CERTIFICATE-----Generated at Tue Jul 21 13:21:28 2026 by rpki-client