$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f07d22-8648-3fa0-9c86-d1f0137e730e.roa File: 61f07d22-8648-3fa0-9c86-d1f0137e730e.roa (raw, json) Hash identifier: q4jhW6SW9fgYCX9/KWZcys+MD8zWi4Pwp7Ox9H6FcVY= Subject key identifier: A0:B8:D3:20:A6:D8:F6:1E:1B:0B:DB:BB:8C:37:18:32:5C:E4:EB:62 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DA220266ECA2241178C8 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f07d22-8648-3fa0-9c86-d1f0137e730e.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:da:22:02:66:ec:a2:24:11:78:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=5049b5d9-a3da-438f-b188-9d9a1c2755c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fb:8a:ae:2c:69:42:be:bd:18:2a:f3:f3:de: e8:2a:e0:ad:76:a4:38:75:c9:75:99:e2:a5:e1:24: d5:b0:91:45:ec:6b:41:d9:a3:16:c5:f4:32:a6:9b: 6d:0e:13:c9:99:db:c0:7c:c1:38:4e:ac:e2:e7:e7: 9b:c5:14:cd:50:17:29:18:fa:df:63:4c:9c:4c:9f: c7:d7:2c:0c:c8:08:fb:db:5b:cc:06:f6:44:ba:fc: f2:cf:c5:c9:dc:ba:14:34:cb:73:01:5d:9a:c3:4b: 0a:bb:58:1d:1e:cd:75:f3:55:f7:5e:ef:e6:f3:95: a2:bd:76:5e:b0:f5:2b:65:37:bb:da:88:6a:ee:3f: e9:32:c4:da:e9:09:20:99:66:0b:3a:c2:fd:16:84: 1b:5b:5d:3a:18:88:e2:ff:b2:00:9a:7d:0d:c6:a2: cb:f4:1a:b2:ee:de:d1:31:34:16:8a:84:a7:40:42: 32:e5:2e:43:90:1f:54:64:12:9c:ab:78:1a:72:31: bb:28:37:6e:bd:d1:76:73:fd:0a:20:70:40:44:85: eb:3d:f4:08:be:71:57:3b:83:97:96:85:e9:85:21: 12:66:4b:31:a3:5d:b5:28:db:d9:55:e6:7d:f5:a8: 49:67:2e:02:b2:ab:4f:0c:4e:35:31:05:7b:a0:3f: 82:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B8:D3:20:A6:D8:F6:1E:1B:0B:DB:BB:8C:37:18:32:5C:E4:EB:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f07d22-8648-3fa0-9c86-d1f0137e730e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:5d:af:60:ac:74:a0:1d:e0:63:02:46:83:eb:f6:45:05:40: 3c:03:fc:fb:c0:31:e3:7c:2a:d2:f5:6f:0f:8f:ca:1a:5b:05: c5:77:ea:b5:ef:1a:e0:aa:c0:0d:53:a0:7a:23:c1:0b:8e:a5: 52:5e:bd:f1:7f:54:99:f1:23:f8:c9:4a:7b:b1:0c:7f:e3:c4: b9:13:61:14:4c:c9:04:59:92:b3:43:0f:9f:51:cc:a9:37:be: 19:cb:30:1b:4f:6f:00:bb:12:a7:1b:e4:7e:c3:a8:92:bb:6d: 03:bc:11:41:7c:58:70:b1:cf:79:6c:3a:fa:b7:58:65:65:9a: 3e:d5:bb:2b:de:20:5b:01:e4:db:7e:42:db:e3:5b:69:5b:34: 48:a1:00:63:d8:ed:4d:65:77:1d:58:3d:f0:25:5e:61:95:de: eb:20:5f:a4:3c:25:37:15:2f:da:3e:d0:90:b5:34:6f:32:b3: 3f:09:aa:00:36:e4:d0:d2:db:cf:1b:a0:8d:14:a3:aa:4b:92: 0e:a7:ab:8e:07:62:0a:1e:dc:73:10:a6:89:89:61:b2:8d:31: 95:45:5c:e0:10:af:59:38:05:d7:a8:ec:ba:4a:cf:54:72:72: 05:86:c0:95:24:5f:2b:e8:76:f3:88:12:a6:c1:f2:a1:60:ff: 29:d3:49:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNoiAmbsoiQReMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NTA0OWI1ZDktYTNkYS00MzhmLWIxODgtOWQ5YTFjMjc1NWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPuKrixpQr69GCrz897oKuCtdqQ4dcl1meKl 4STVsJFF7GtB2aMWxfQyppttDhPJmdvAfME4Tqzi5+ebxRTNUBcpGPrfY0ycTJ/H 1ywMyAj721vMBvZEuvzyz8XJ3LoUNMtzAV2aw0sKu1gdHs1181X3Xu/m85WivXZe sPUrZTe72ohq7j/pMsTa6QkgmWYLOsL9FoQbW106GIji/7IAmn0NxqLL9Bqy7t7R MTQWioSnQEIy5S5DkB9UZBKcq3gacjG7KDduvdF2c/0KIHBARIXrPfQIvnFXO4OX loXphSESZksxo121KNvZVeZ99ahJZy4CsqtPDE41MQV7oD+CVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKC40yCm2PYeGwvbu4w3GDJc5OtiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjFmMDdkMjItODY0OC0z ZmEwLTljODYtZDFmMDEzN2U3MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVdr2CsdKAd4GMCRoPr9kUFQDwD/PvAMeN8KtL1bw+PyhpbBcV36rXv GuCqwA1ToHojwQuOpVJevfF/VJnxI/jJSnuxDH/jxLkTYRRMyQRZkrNDD59RzKk3 vhnLMBtPbwC7Eqcb5H7DqJK7bQO8EUF8WHCxz3lsOvq3WGVlmj7VuyveIFsB5Nt+ QtvjW2lbNEihAGPY7U1ldx1YPfAlXmGV3usgX6Q8JTcVL9o+0JC1NG8ysz8JqgA2 5NDS288boI0Uo6pLkg6nq44HYgoe3HMQpomJYbKNMZVFXOAQr1k4Bdeo7LpKz1Ry cgWGwJUkXyvodvOIEqbB8qFg/ynTScc= -----END CERTIFICATE-----Generated at Tue Jul 21 01:41:18 2026 by rpki-client