$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/63c5a1bd-c65b-3521-a66b-3fca4cd57415.roa File: 63c5a1bd-c65b-3521-a66b-3fca4cd57415.roa (raw, json) Hash identifier: hOc3LKlBOrofA9gCr1+L09enKHrD6iMvqFKtQ9nlWns= Subject key identifier: 52:18:A5:46:2D:E8:89:D6:34:3D:F7:82:24:86:B4:EA:83:75:C3:E7 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D798962DA9282CD59C80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/63c5a1bd-c65b-3521-a66b-3fca4cd57415.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d7:98:96:2d:a9:28:2c:d5:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=7248e017-5872-4fd4-ad10-d8deaca2db7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:df:d0:f1:b3:7d:fd:e3:98:c0:c0:42:1c:d1: ae:ff:42:20:6b:90:21:11:87:00:4f:e8:ef:3b:f6: 01:7e:d0:06:e5:e6:bc:03:59:2a:fa:86:b9:da:66: 5c:7f:f3:d5:e2:6a:77:b9:9d:2d:18:b4:c0:9b:97: d4:18:dc:e5:0e:f3:b0:b3:be:c8:eb:d8:59:72:ca: 57:9f:05:f0:22:71:e0:88:e2:09:8c:81:aa:99:b6: 8b:45:03:7b:9f:c8:e4:ad:ee:e0:9c:c5:8c:e6:96: 9d:5c:a0:ea:72:d5:83:d2:88:a1:31:6b:8d:95:11: 55:bc:11:6b:36:e5:14:a7:b4:a8:05:a5:97:89:8a: 57:6b:1f:3a:ac:e8:68:e6:2a:c9:19:89:bc:db:c8: f2:f1:83:06:26:43:4e:ec:d2:8c:eb:51:49:ac:03: fd:d5:f6:87:cd:ef:94:7d:f7:eb:e2:6c:e5:bf:52: 2a:81:53:ef:39:ed:64:0c:74:62:b6:57:a8:f4:65: ae:0a:e0:60:4d:8d:9a:f1:be:7d:cf:83:8c:f7:87: d4:b7:bd:7f:02:45:d3:88:73:26:5b:62:b8:50:41: 36:6c:b3:bf:9e:b5:d3:9a:fc:36:12:77:70:95:74: 22:9c:98:c0:cd:d8:cd:95:e9:de:54:85:a2:b7:a7: 85:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:18:A5:46:2D:E8:89:D6:34:3D:F7:82:24:86:B4:EA:83:75:C3:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/63c5a1bd-c65b-3521-a66b-3fca4cd57415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:f5:47:e1:a0:2a:51:cd:5b:b5:8b:93:df:21:63:1f:2f:9d: f9:be:78:9a:9b:be:ce:8e:32:96:ea:d6:88:2e:22:ce:bf:43: 40:d4:62:4d:1e:42:41:d4:12:e7:ba:76:a4:f9:54:63:42:6e: da:2a:d3:c0:40:17:ce:02:3d:75:70:b7:19:96:da:a5:ad:c9: 0b:bb:ed:0f:15:76:d9:25:25:f1:26:45:61:36:47:39:7e:41: c8:36:88:5f:1a:ef:48:91:c5:03:7e:53:b4:c3:d0:da:d7:c0: dc:87:ce:52:bc:ec:a1:04:e2:c5:59:23:cf:d3:cc:05:e3:ea: a8:4a:af:b9:d2:2b:ff:3a:c6:49:3d:c7:d7:73:3d:9b:25:c4: 56:8c:1e:d0:de:ee:82:49:eb:cb:f3:e2:8b:8d:5f:62:d6:14: 0f:af:43:b1:bb:b6:be:49:08:c0:9e:63:ae:67:64:5e:43:af: f4:8e:77:2c:03:d3:39:5a:35:a4:44:f6:c9:2b:a9:02:23:f2: a6:6d:a9:c3:a5:d2:40:70:ec:b9:ab:9f:74:46:08:78:e7:8d: 4a:5c:ab:5d:f9:58:f5:e2:0e:89:60:63:29:79:7e:67:8f:b5: d6:07:9c:a6:bc:e2:45:de:d0:3f:ba:09:e0:b8:10:e7:68:b1: 1b:27:72:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNeYli2pKCzVnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NzI0OGUwMTctNTg3Mi00ZmQ0LWFkMTAtZDhkZWFjYTJkYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9/Q8bN9/eOYwMBCHNGu/0Iga5AhEYcAT+jv O/YBftAG5ea8A1kq+oa52mZcf/PV4mp3uZ0tGLTAm5fUGNzlDvOws77I69hZcspX nwXwInHgiOIJjIGqmbaLRQN7n8jkre7gnMWM5padXKDqctWD0oihMWuNlRFVvBFr NuUUp7SoBaWXiYpXax86rOho5irJGYm828jy8YMGJkNO7NKM61FJrAP91faHze+U fffr4mzlv1IqgVPvOe1kDHRitleo9GWuCuBgTY2a8b59z4OM94fUt71/AkXTiHMm W2K4UEE2bLO/nrXTmvw2EndwlXQinJjAzdjNleneVIWit6eFSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIYpUYt6InWND33giSGtOqDdcPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjNjNWExYmQtYzY1Yi0z NTIxLWE2NmItM2ZjYTRjZDU3NDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALL1R+GgKlHNW7WLk98hYx8vnfm+eJqbvs6OMpbq1oguIs6/Q0DUYk0e QkHUEue6dqT5VGNCbtoq08BAF84CPXVwtxmW2qWtyQu77Q8VdtklJfEmRWE2Rzl+ Qcg2iF8a70iRxQN+U7TD0NrXwNyHzlK87KEE4sVZI8/TzAXj6qhKr7nSK/86xkk9 x9dzPZslxFaMHtDe7oJJ68vz4ouNX2LWFA+vQ7G7tr5JCMCeY65nZF5Dr/SOdywD 0zlaNaRE9skrqQIj8qZtqcOl0kBw7Lmrn3RGCHjnjUpcq135WPXiDolgYyl5fmeP tdYHnKa84kXe0D+6CeC4EOdosRsncvA= -----END CERTIFICATE-----Generated at Tue Jul 21 13:23:17 2026 by rpki-client