$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5bae1293-6959-3c09-8e5a-dbba8328cd3a.roa File: 5bae1293-6959-3c09-8e5a-dbba8328cd3a.roa (raw, json) Hash identifier: pWai0x1TEiPNnwNd2rK8vucS+dK9CDcRZt31igTF6pI= Subject key identifier: 01:9C:FD:72:E5:02:3D:90:84:74:0B:73:4C:4C:D5:20:92:B1:CA:7C Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D746347EE0239A916100 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5bae1293-6959-3c09-8e5a-dbba8328cd3a.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d7:46:34:7e:e0:23:9a:91:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=9002ce98-8bf9-4fd2-b661-45436c18df01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7d:55:c5:2d:94:cc:7c:15:1f:77:d9:a0:d6: a3:16:8c:ad:a7:38:e4:e8:84:b0:d0:08:5d:e1:05: 9b:8f:1b:33:50:cd:a8:93:e5:7e:a8:fd:1e:85:f1: 19:7d:87:66:2a:eb:21:ba:7e:d3:0a:85:1f:d6:6d: d8:68:8d:41:bd:7f:81:4d:f4:4e:16:a0:c5:bf:18: a8:67:f9:0d:c2:59:bb:e9:9c:62:9a:9e:ea:f5:ae: 40:41:6c:7a:7c:60:0d:d5:8f:ba:f6:2b:8c:c2:2f: 47:93:81:67:3b:82:05:c2:b7:08:4f:6c:e7:4e:bb: b5:b7:81:44:5f:34:52:f2:d3:a3:cd:a2:8c:b6:d3: 0c:75:0c:08:f0:2d:38:de:57:c0:98:26:d2:aa:0b: 35:43:06:d6:61:0d:b9:48:71:89:f7:a7:b8:0b:5a: e7:8a:19:f3:7d:69:83:11:22:0e:4d:29:71:dc:dd: dc:80:68:91:f9:da:1f:ac:5b:f5:69:33:81:e2:09: 52:48:0b:93:dd:1b:78:08:ad:bc:55:e1:6b:f4:0f: e7:ca:b0:92:fe:03:1e:eb:e6:a9:0a:7e:e4:0e:44: fb:5e:41:96:3b:53:89:46:96:a3:c2:39:f6:7d:f3: 51:4e:d5:4e:12:49:ee:62:1b:db:ab:c1:10:22:18: 34:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9C:FD:72:E5:02:3D:90:84:74:0B:73:4C:4C:D5:20:92:B1:CA:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5bae1293-6959-3c09-8e5a-dbba8328cd3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:27:3b:f4:98:00:b2:17:b2:9d:08:d8:42:37:38:74:38:9a: 1e:0b:26:a5:59:8e:68:65:c8:e4:fa:ce:df:7c:dc:09:8b:2f: c1:d3:76:cc:db:75:5e:dc:92:ab:ad:63:bc:2c:a8:29:f8:6a: 07:d9:3c:dd:c6:8b:59:3e:17:8a:11:fe:48:bf:d9:c5:95:36: bd:80:51:3c:e5:13:61:e5:85:69:27:79:86:e1:46:3f:c4:87: bd:13:f1:af:24:d8:e5:a2:82:d4:82:fd:9c:07:c3:10:18:4d: 76:86:96:4a:13:06:91:68:4b:af:34:00:b6:7a:23:ba:aa:bd: 15:ce:e0:a3:33:c9:f3:69:2e:bf:ea:36:b3:8b:86:ff:be:8f: a6:b6:d9:33:51:06:c7:a4:36:63:92:71:f3:28:05:81:f4:91: e5:47:47:cc:2b:75:ce:72:32:a1:22:93:4c:70:bb:cc:ae:93: dc:c1:8d:a3:dc:a9:29:0f:8c:b7:cd:96:ff:e6:24:20:b4:c3: 62:d2:d1:9d:2f:ce:5d:e4:4d:19:83:3f:1b:03:ec:dd:f0:c6: ea:c0:12:2f:e0:73:65:6e:73:55:6c:4f:e8:c9:42:71:79:2e: d0:1f:f3:e5:1c:47:02:d3:73:de:66:8a:a7:ab:10:c0:39:b5: 3e:0b:ba:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNdGNH7gI5qRYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk OTAwMmNlOTgtOGJmOS00ZmQyLWI2NjEtNDU0MzZjMThkZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n1VxS2UzHwVH3fZoNajFoytpzjk6ISw0Ahd 4QWbjxszUM2ok+V+qP0ehfEZfYdmKushun7TCoUf1m3YaI1BvX+BTfROFqDFvxio Z/kNwlm76Zximp7q9a5AQWx6fGAN1Y+69iuMwi9Hk4FnO4IFwrcIT2znTru1t4FE XzRS8tOjzaKMttMMdQwI8C043lfAmCbSqgs1QwbWYQ25SHGJ96e4C1rnihnzfWmD ESIOTSlx3N3cgGiR+dofrFv1aTOB4glSSAuT3Rt4CK28VeFr9A/nyrCS/gMe6+ap Cn7kDkT7XkGWO1OJRpajwjn2ffNRTtVOEknuYhvbq8EQIhg0YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGc/XLlAj2QhHQLc0xM1SCSscp8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNWJhZTEyOTMtNjk1OS0z YzA5LThlNWEtZGJiYTgzMjhjZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQnO/SYALIXsp0I2EI3OHQ4mh4LJqVZjmhlyOT6zt983AmLL8HTdszb dV7ckqutY7wsqCn4agfZPN3Gi1k+F4oR/ki/2cWVNr2AUTzlE2HlhWkneYbhRj/E h70T8a8k2OWigtSC/ZwHwxAYTXaGlkoTBpFoS680ALZ6I7qqvRXO4KMzyfNpLr/q NrOLhv++j6a22TNRBsekNmOScfMoBYH0keVHR8wrdc5yMqEik0xwu8yuk9zBjaPc qSkPjLfNlv/mJCC0w2LS0Z0vzl3kTRmDPxsD7N3wxurAEi/gc2Vuc1VsT+jJQnF5 LtAf8+UcRwLTc95miqerEMA5tT4LuiI= -----END CERTIFICATE-----Generated at Tue Jul 21 13:23:11 2026 by rpki-client