$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f1aea5-9fe6-3937-a1d0-5db3957de106.roa File: 61f1aea5-9fe6-3937-a1d0-5db3957de106.roa (raw, json) Hash identifier: /jky4RbH9j3mSYjPv+QIHkwGSZ1p7Ekd7Bzk3AtIh+8= Subject key identifier: 1B:82:FD:BE:AA:B6:D1:07:AA:75:55:24:98:9B:C0:7E:CE:BC:94:D3 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D55DC2B9B40ED5E39E40 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f1aea5-9fe6-3937-a1d0-5db3957de106.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d5:5d:c2:b9:b4:0e:d5:e3:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=cadc17ed-73cd-415d-b743-d9d5b4ca3132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:cd:a0:3c:dd:9f:3c:bf:6b:c0:b9:5b:21: bb:4c:81:e6:1c:da:ea:b6:b0:9e:7c:14:83:fd:43: b0:78:94:e5:14:8d:56:34:72:8b:81:cd:00:1a:59: 7a:21:b1:eb:8d:99:e8:b7:73:7f:4b:43:5a:69:45: b7:91:5e:b5:39:40:0d:c9:53:64:03:a3:19:c1:0f: 7a:9e:cd:cb:a0:d3:19:1e:ad:df:77:c2:f3:4c:f7: ee:bc:26:c3:ec:86:1f:59:74:78:57:b1:5d:50:68: 79:20:45:d1:6a:76:8b:b5:2f:5b:98:a6:b3:99:18: 57:51:26:1c:67:f8:d9:1d:6f:82:77:e1:32:e8:cf: d8:22:b8:bb:bf:f6:cc:15:7d:d5:13:86:35:e7:d9: 01:3c:85:6e:86:b1:35:c4:b9:d8:4a:76:11:1f:27: e7:37:48:ac:4c:36:5a:f3:e5:73:1f:c3:9a:a0:e6: 74:35:c3:ad:d7:fc:25:e5:a2:fb:4e:3e:23:9b:79: 9b:55:7e:6e:15:76:a5:f9:48:94:a2:56:d8:1e:e8: 3e:a4:e2:13:41:43:bc:d5:d5:ec:a2:51:2c:55:29: 23:da:5d:d1:44:42:af:ce:69:bb:3f:12:0b:42:e3: c1:e5:8d:86:f1:db:91:42:33:ba:bc:30:db:f6:69: 6e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:82:FD:BE:AA:B6:D1:07:AA:75:55:24:98:9B:C0:7E:CE:BC:94:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f1aea5-9fe6-3937-a1d0-5db3957de106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:22:90:3a:bb:c3:cc:a9:36:b7:99:70:a0:a6:cc:42:36:62: f5:1c:c3:d7:56:b6:5c:e6:88:23:a7:49:6c:a4:b8:a7:5b:32: 65:1b:a7:c3:58:29:52:2d:63:ce:62:55:3c:56:39:a8:99:ab: 15:66:98:c0:95:19:8b:14:ef:57:95:f9:55:5d:5d:88:e0:8d: 06:2f:c9:c2:76:9f:7a:93:81:87:72:65:f5:06:cb:8b:17:d0: 9b:72:a0:2c:2e:dc:08:59:97:40:7b:79:f9:b7:40:13:bd:d2: 91:f0:47:d1:7d:df:a6:59:e7:5e:13:a2:d6:4a:8f:0e:f0:d7: 58:87:b0:5e:ec:43:9c:c5:49:01:09:b4:4f:2a:a5:93:43:34: b3:f9:13:46:2f:bb:ef:69:94:d2:d8:32:a1:e4:2f:b9:a8:80: 07:c6:1d:0f:74:eb:2f:c4:ed:a7:24:be:10:22:bc:59:1a:69: 8a:79:0c:fa:ec:81:ac:3c:cd:6e:ce:50:87:af:65:da:1e:58: a5:12:b6:cb:1d:96:51:4c:42:d7:91:a1:38:9e:94:8c:22:c2: 2b:d9:1e:d8:a8:6c:75:a6:63:3a:92:8b:2f:8f:4b:d4:66:d8: f7:11:58:48:ff:a2:2d:5f:32:87:c8:54:a5:59:3a:85:e1:37: c6:3c:b8:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNVdwrm0DtXjnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk Y2FkYzE3ZWQtNzNjZC00MTVkLWI3NDMtZDlkNWI0Y2EzMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr63NoDzdnzy/a8C5WyG7TIHmHNrqtrCefBSD /UOweJTlFI1WNHKLgc0AGll6IbHrjZnot3N/S0NaaUW3kV61OUANyVNkA6MZwQ96 ns3LoNMZHq3fd8LzTPfuvCbD7IYfWXR4V7FdUGh5IEXRanaLtS9bmKazmRhXUSYc Z/jZHW+Cd+Ey6M/YIri7v/bMFX3VE4Y159kBPIVuhrE1xLnYSnYRHyfnN0isTDZa 8+VzH8OaoOZ0NcOt1/wl5aL7Tj4jm3mbVX5uFXal+UiUolbYHug+pOITQUO81dXs olEsVSkj2l3RREKvzmm7PxILQuPB5Y2G8duRQjO6vDDb9mlucwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuC/b6qttEHqnVVJJibwH7OvJTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjFmMWFlYTUtOWZlNi0z OTM3LWExZDAtNWRiMzk1N2RlMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEikDq7w8ypNreZcKCmzEI2YvUcw9dWtlzmiCOnSWykuKdbMmUbp8NY KVItY85iVTxWOaiZqxVmmMCVGYsU71eV+VVdXYjgjQYvycJ2n3qTgYdyZfUGy4sX 0JtyoCwu3AhZl0B7efm3QBO90pHwR9F936ZZ514TotZKjw7w11iHsF7sQ5zFSQEJ tE8qpZNDNLP5E0Yvu+9plNLYMqHkL7mogAfGHQ906y/E7ackvhAivFkaaYp5DPrs gaw8zW7OUIevZdoeWKUStssdllFMQteRoTielIwiwivZHtiobHWmYzqSiy+PS9Rm 2PcRWEj/oi1fMofIVKVZOoXhN8Y8uA8= -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:57 2026 by rpki-client