$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61666019-0c9a-36e0-a487-94a151a81bc7.roa File: 61666019-0c9a-36e0-a487-94a151a81bc7.roa (raw, json) Hash identifier: 1WBWWxcbpF/hO1nyZW/Uo8q1ehXf5jxwubRFMpI7dpQ= Subject key identifier: E4:13:1A:B9:49:12:20:F2:2F:5E:A4:0E:D0:12:9C:3D:10:2F:DD:D7 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D8A694F951A6833A7E80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61666019-0c9a-36e0-a487-94a151a81bc7.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d8:a6:94:f9:51:a6:83:3a:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=16033d04-01e7-418f-b330-b0fafdbc580f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:39:c1:67:c0:ad:54:2e:e5:8e:95:8c:9c: 75:5c:85:b9:38:af:c1:a7:95:4a:09:f3:69:14:7d: 35:a1:c0:a6:67:4a:1a:9d:b8:e0:d8:7d:f0:45:83: 49:77:47:50:65:86:00:ab:3e:ec:ee:8a:2f:99:6c: 18:65:64:d6:a3:a0:f9:b2:a4:0b:a7:74:95:d1:79: 34:04:d3:de:26:33:87:2a:7b:94:98:70:6e:66:3d: 87:30:09:c1:85:56:24:8e:02:57:33:67:2f:16:31: 90:58:bd:c2:6f:21:6b:43:98:2a:31:36:68:7a:b0: 99:0a:98:38:63:12:46:1e:2c:51:2d:24:2e:19:c1: 5a:5a:29:e4:a0:3e:1e:f6:23:ec:1b:b8:25:24:5e: e6:53:e9:aa:e0:9b:2a:fc:3b:eb:74:36:f9:4e:84: c7:39:5f:d8:3f:90:cb:5b:9e:45:3b:63:e5:1a:9b: 3d:29:1d:68:b9:c1:c5:31:ef:13:65:28:74:45:07: 82:33:09:5d:fc:5b:25:2d:03:3b:7b:0e:bb:e7:20: ad:32:a6:ba:16:b1:1e:9c:54:2d:f0:ee:c6:61:b1: e7:3b:97:92:e6:19:3a:d2:94:7d:4b:0c:23:0b:11: fd:06:02:9a:ae:98:c5:30:ee:29:81:b8:c4:5b:01: d8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:13:1A:B9:49:12:20:F2:2F:5E:A4:0E:D0:12:9C:3D:10:2F:DD:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61666019-0c9a-36e0-a487-94a151a81bc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a2:15:03:64:6d:fe:c9:67:9b:16:2b:4b:c5:f5:e6:e7:38: 83:a7:ee:dc:8c:2e:1e:4c:71:43:b6:05:16:20:73:92:1f:bb: 7c:93:c8:e3:5b:03:cf:83:f4:5e:20:a5:40:2d:c3:5c:7d:de: cc:b6:43:b8:c1:a8:98:c3:d7:5b:9f:a6:cf:ea:e4:b5:ca:cf: 75:8c:77:6f:a9:67:f7:c5:b7:da:5c:61:4d:8e:cb:4d:9d:76: 5a:97:28:03:fe:09:9a:35:2d:37:22:ff:85:33:a9:07:62:28: 87:6c:2d:88:d8:8c:61:a7:2e:e6:2a:cc:71:f7:06:27:58:c8: ed:b1:31:17:fe:12:2d:e0:d0:d5:0e:2e:ca:da:74:35:9d:7d: 39:cd:2e:46:38:2e:6e:67:c3:e0:55:65:59:fe:f1:d4:92:d5: 49:47:d6:56:e7:7e:ad:25:7b:4e:ac:ec:e3:66:95:c1:9f:42: 86:23:8f:33:47:a1:2f:a6:3b:c6:38:2f:3c:0d:71:1e:55:50: fe:ee:1c:ff:6a:be:94:eb:13:76:69:9e:8b:3b:ef:2c:4d:07: a6:40:7b:c4:0e:ca:a0:85:9d:b3:8b:10:c5:76:7b:3d:c3:26: 87:a4:77:d9:92:b1:7b:b4:4c:60:ca:f7:62:91:13:37:8a:3c: 58:18:fa:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNimlPlRpoM6foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MTYwMzNkMDQtMDFlNy00MThmLWIzMzAtYjBmYWZkYmM1ODBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUs5wWfArVQu5Y6VjJx1XIW5OK/Bp5VKCfNp FH01ocCmZ0oanbjg2H3wRYNJd0dQZYYAqz7s7oovmWwYZWTWo6D5sqQLp3SV0Xk0 BNPeJjOHKnuUmHBuZj2HMAnBhVYkjgJXM2cvFjGQWL3CbyFrQ5gqMTZoerCZCpg4 YxJGHixRLSQuGcFaWinkoD4e9iPsG7glJF7mU+mq4Jsq/DvrdDb5ToTHOV/YP5DL W55FO2PlGps9KR1oucHFMe8TZSh0RQeCMwld/FslLQM7ew675yCtMqa6FrEenFQt 8O7GYbHnO5eS5hk60pR9SwwjCxH9BgKarpjFMO4pgbjEWwHYdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQTGrlJEiDyL16kDtASnD0QL93XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjE2NjYwMTktMGM5YS0z NmUwLWE0ODctOTRhMTUxYTgxYmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKiFQNkbf7JZ5sWK0vF9ebnOIOn7tyMLh5McUO2BRYgc5Ifu3yTyONb A8+D9F4gpUAtw1x93sy2Q7jBqJjD11ufps/q5LXKz3WMd2+pZ/fFt9pcYU2Oy02d dlqXKAP+CZo1LTci/4UzqQdiKIdsLYjYjGGnLuYqzHH3BidYyO2xMRf+Ei3g0NUO LsradDWdfTnNLkY4Lm5nw+BVZVn+8dSS1UlH1lbnfq0le06s7ONmlcGfQoYjjzNH oS+mO8Y4LzwNcR5VUP7uHP9qvpTrE3Zpnos77yxNB6ZAe8QOyqCFnbOLEMV2ez3D Joekd9mSsXu0TGDK92KREzeKPFgY+ng= -----END CERTIFICATE-----Generated at Tue Jul 21 01:41:15 2026 by rpki-client