$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/65f34d40-eb13-329d-87ed-7e5f780cd301.roa File: 65f34d40-eb13-329d-87ed-7e5f780cd301.roa (raw, json) Hash identifier: C4LpGy8zi5q4GHNJDHcmlEOi+jgoZBCfrSdQqbq8+ys= Subject key identifier: 73:5A:A3:51:B4:14:79:AF:30:F4:48:08:FF:DB:C7:CF:F8:66:CD:FB Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DACEFD143A0BE8E3DB00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/65f34d40-eb13-329d-87ed-7e5f780cd301.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:da:ce:fd:14:3a:0b:e8:e3:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=f3706d11-52af-4db1-94a8-e600f07bbde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:55:96:25:87:e1:ba:8f:c2:2f:03:50:1a:31: 62:4f:f2:54:60:fa:9b:3b:35:3e:42:51:91:bd:a5: 70:9b:49:37:85:a5:cf:1b:4d:95:f6:4f:38:32:e2: 97:f8:54:6d:8c:f3:29:c9:93:c4:01:eb:a7:38:42: 98:e5:41:49:b0:3b:3e:5c:6f:6c:f3:cc:b1:c6:2e: ea:9c:a9:1d:7a:57:0f:61:bc:b4:97:b2:23:41:64: 14:37:44:ef:76:b7:74:29:88:89:6f:9a:8b:70:6d: e1:cf:a4:47:cd:52:16:f7:c7:d6:40:e4:a6:0e:9c: 2c:16:df:89:34:3e:2d:ae:42:5b:52:c5:12:86:7a: 73:5b:a2:df:b8:9c:7f:c1:a4:03:b4:42:75:8c:ab: e0:60:f1:70:55:be:35:50:fb:b4:5f:be:9d:0e:ac: f5:14:cc:68:86:9f:77:e4:bf:1f:63:95:2b:cf:2b: ec:a4:e2:c9:72:d3:3b:76:36:6e:4c:31:79:2d:50: da:e1:b2:a7:36:70:fc:9d:34:d6:68:44:cd:95:2e: eb:b9:10:ad:9e:2e:15:83:4c:e6:35:6d:a8:89:b6: d5:40:b9:90:5b:cd:d1:72:74:ed:10:9d:cc:4b:01: 80:ce:70:1a:de:1b:61:18:4d:4e:3c:39:8a:60:67: 43:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5A:A3:51:B4:14:79:AF:30:F4:48:08:FF:DB:C7:CF:F8:66:CD:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/65f34d40-eb13-329d-87ed-7e5f780cd301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:60:33:ae:0e:97:1b:a3:23:3a:18:fe:54:9f:76:f1:c8:3f: 3d:e1:46:a3:b6:99:09:9e:24:65:0d:a2:9c:cb:3c:9c:6f:ca: fb:eb:e7:16:b3:71:92:b0:4f:ef:39:11:21:02:74:d9:ea:45: 47:02:65:4b:80:98:1d:b2:bd:4a:1a:c2:3a:98:be:d6:4c:8c: 0e:a2:38:e2:a3:1c:c8:12:07:1a:33:b8:3a:bd:ec:e1:2a:cc: a4:af:e9:25:31:e1:bd:9a:4f:c7:fb:2f:38:c2:71:a6:05:07: c3:05:e1:6c:ab:c4:1e:ae:73:70:32:fd:1d:16:b2:70:cb:33: 98:ea:d0:0d:b7:49:2b:df:f6:64:60:bf:84:55:2c:5a:c3:7d: 9f:1b:39:df:47:e5:5c:3e:ce:b1:c5:6b:9c:b2:40:09:e7:e7: 8b:1b:b1:95:71:89:4a:9f:f6:ca:24:ce:95:9a:f0:bd:5e:2a: 5f:0f:b7:fa:7e:75:6e:2b:19:5a:ea:fb:c3:a6:52:ec:95:5e: f7:99:8c:53:92:5b:fa:50:f4:37:e5:8e:e3:56:b4:6c:23:01: e1:35:df:20:0b:73:81:02:92:4e:9d:89:83:66:9a:37:39:80: 9c:1e:fc:4d:c3:2a:d5:ed:ec:0f:6f:56:db:a4:c1:80:84:00: dc:86:56:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNrO/RQ6C+jj2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZjM3MDZkMTEtNTJhZi00ZGIxLTk0YTgtZTYwMGYwN2JiZGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlWWJYfhuo/CLwNQGjFiT/JUYPqbOzU+QlGR vaVwm0k3haXPG02V9k84MuKX+FRtjPMpyZPEAeunOEKY5UFJsDs+XG9s88yxxi7q nKkdelcPYby0l7IjQWQUN0Tvdrd0KYiJb5qLcG3hz6RHzVIW98fWQOSmDpwsFt+J ND4trkJbUsUShnpzW6LfuJx/waQDtEJ1jKvgYPFwVb41UPu0X76dDqz1FMxohp93 5L8fY5UrzyvspOLJctM7djZuTDF5LVDa4bKnNnD8nTTWaETNlS7ruRCtni4Vg0zm NW2oibbVQLmQW83RcnTtEJ3MSwGAznAa3hthGE1OPDmKYGdD0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNao1G0FHmvMPRICP/bx8/4Zs37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjVmMzRkNDAtZWIxMy0z MjlkLTg3ZWQtN2U1Zjc4MGNkMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5gM64OlxujIzoY/lSfdvHIPz3hRqO2mQmeJGUNopzLPJxvyvvr5xaz cZKwT+85ESECdNnqRUcCZUuAmB2yvUoawjqYvtZMjA6iOOKjHMgSBxozuDq97OEq zKSv6SUx4b2aT8f7LzjCcaYFB8MF4WyrxB6uc3Ay/R0WsnDLM5jq0A23SSvf9mRg v4RVLFrDfZ8bOd9H5Vw+zrHFa5yyQAnn54sbsZVxiUqf9sokzpWa8L1eKl8Pt/p+ dW4rGVrq+8OmUuyVXveZjFOSW/pQ9DfljuNWtGwjAeE13yALc4ECkk6diYNmmjc5 gJwe/E3DKtXt7A9vVtukwYCEANyGVsY= -----END CERTIFICATE-----Generated at Tue Jul 21 01:40:50 2026 by rpki-client