$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/6460297d-f097-3a1c-8f42-85dc46d24c4d.roa File: 6460297d-f097-3a1c-8f42-85dc46d24c4d.roa (raw, json) Hash identifier: mPwgzgQHTxsfyKUe9wExGjjnlZqf/qJkGS7pH5+EtxQ= Subject key identifier: C9:AF:08:5F:BF:42:14:A1:A9:D3:F3:6F:A5:22:03:9B:93:8B:E4:EF Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DA30B097F7D40495DE00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/6460297d-f097-3a1c-8f42-85dc46d24c4d.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:da:30:b0:97:f7:d4:04:95:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=db3dc582-afde-4066-abbb-aa96e88a8ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:56:35:6f:3f:0e:c4:29:d7:83:bc:c4:a5:b7: 00:dd:91:e1:6f:6c:c0:0a:2c:8d:b1:73:57:34:f5: 7e:5c:24:c5:71:5c:b7:07:6b:09:be:ae:30:fd:06: b3:83:1c:5e:26:93:9b:c1:1b:98:11:97:33:05:9d: b9:eb:32:1b:ac:00:99:90:9f:ee:25:2a:7e:b1:ac: dd:07:e2:b5:f4:27:9f:34:b4:03:4f:c5:37:f1:91: be:49:f2:b5:26:90:19:1d:e1:71:5e:9f:0b:cd:b8: 57:97:70:53:c0:68:97:dc:6d:b2:c3:33:aa:76:7a: 33:d7:7d:fe:84:36:5e:e7:b9:74:dc:9b:45:3d:f6: 50:d7:9e:cb:29:de:b5:f0:bd:45:ae:c4:be:54:3a: 2b:26:8d:34:44:fd:44:dc:10:4d:29:43:7f:01:1b: e2:0e:11:fb:fc:e6:54:db:4f:83:50:8f:e8:af:b2: 16:e7:a2:43:1e:5d:26:de:a5:c0:9f:40:d4:76:96: 6d:a7:26:ac:5b:2b:39:b2:16:e7:d7:9a:76:4d:54: 4a:d2:8b:81:bd:9a:82:2e:41:90:56:97:e9:0d:5b: c8:49:ba:07:3b:2d:a7:51:4a:2b:e8:cf:84:62:3c: 22:13:90:98:51:26:c6:1e:94:83:77:e1:53:7d:83: 71:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AF:08:5F:BF:42:14:A1:A9:D3:F3:6F:A5:22:03:9B:93:8B:E4:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/6460297d-f097-3a1c-8f42-85dc46d24c4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:87:1d:84:6b:42:02:72:b1:72:c7:ce:33:f9:6b:6d:9c:0c: 22:4b:d4:02:fd:0d:1d:2e:e4:17:4d:64:be:75:16:03:f3:8d: 9c:fd:ce:0b:b7:ca:fc:3d:77:b8:19:b6:7c:cb:f0:0b:f5:80: c0:1a:d1:63:0a:a0:d8:b0:21:5a:85:1d:f4:27:70:76:70:66: 85:dd:8a:47:f1:b8:41:65:53:38:f3:a1:6d:3e:82:75:3f:e4: 1a:0b:65:d6:c0:2b:fd:3c:83:73:98:70:4d:d2:19:39:14:a8: 54:26:6a:dc:cb:9b:dd:35:c3:3d:7f:c3:70:0e:13:81:93:ee: c9:7a:89:10:1c:5e:58:de:6a:f9:ea:fc:fe:92:0d:8e:1b:36: f8:6f:be:6d:1d:2a:f2:45:50:88:4d:cc:17:1b:f2:49:c6:77: a5:43:0d:51:51:a5:8a:df:e1:98:e6:02:16:21:a4:5c:2c:77: 54:11:8c:19:13:9b:18:13:32:e5:1d:a4:bd:cd:3a:19:fc:d1: 31:a5:96:35:7c:b8:23:72:b7:46:30:2f:30:95:3b:ac:a1:ad: b3:f9:41:d7:2a:93:c5:62:0e:35:18:5c:27:4f:1e:9c:5e:61: 53:07:09:98:e6:b2:72:5e:22:48:56:b0:0d:6a:f7:21:91:df: 97:03:00:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNowsJf31ASV3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZGIzZGM1ODItYWZkZS00MDY2LWFiYmItYWE5NmU4OGE4ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlY1bz8OxCnXg7zEpbcA3ZHhb2zACiyNsXNX NPV+XCTFcVy3B2sJvq4w/QazgxxeJpObwRuYEZczBZ256zIbrACZkJ/uJSp+sazd B+K19CefNLQDT8U38ZG+SfK1JpAZHeFxXp8LzbhXl3BTwGiX3G2ywzOqdnoz133+ hDZe57l03JtFPfZQ157LKd618L1FrsS+VDorJo00RP1E3BBNKUN/ARviDhH7/OZU 20+DUI/or7IW56JDHl0m3qXAn0DUdpZtpyasWys5shbn15p2TVRK0ouBvZqCLkGQ VpfpDVvISboHOy2nUUor6M+EYjwiE5CYUSbGHpSDd+FTfYNxcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmvCF+/QhShqdPzb6UiA5uTi+TvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjQ2MDI5N2QtZjA5Ny0z YTFjLThmNDItODVkYzQ2ZDI0YzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBClMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCHHYRrQgJysXLHzjP5a22cDCJL1AL9DR0u5BdNZL51FgPzjZz9zgu3 yvw9d7gZtnzL8Av1gMAa0WMKoNiwIVqFHfQncHZwZoXdikfxuEFlUzjzoW0+gnU/ 5BoLZdbAK/08g3OYcE3SGTkUqFQmatzLm901wz1/w3AOE4GT7sl6iRAcXljeavnq /P6SDY4bNvhvvm0dKvJFUIhNzBcb8knGd6VDDVFRpYrf4ZjmAhYhpFwsd1QRjBkT mxgTMuUdpL3NOhn80TGlljV8uCNyt0YwLzCVO6yhrbP5Qdcqk8ViDjUYXCdPHpxe YVMHCZjmsnJeIkhWsA1q9yGR35cDAEY= -----END CERTIFICATE-----Generated at Tue Jul 21 01:41:11 2026 by rpki-client