$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/671008f9-dbae-3314-9992-bae543663a41.roa File: 671008f9-dbae-3314-9992-bae543663a41.roa (raw, json) Hash identifier: VgKe+ytiunqoqCnyq2AEY58YEfPOiGjVeeTkGszGQrk= Subject key identifier: 91:FC:2B:86:26:4B:45:CB:22:5F:C0:0B:C8:68:F6:C6:D3:D5:61:C4 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D82FDBB467864A969580 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/671008f9-dbae-3314-9992-bae543663a41.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d8:2f:db:b4:67:86:4a:96:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=3368e6a0-63d9-4bef-8f11-a9cab84eef4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:04:61:ec:2a:d4:04:d1:a0:0b:a3:8c:34: da:d3:8e:b4:59:05:88:e9:5b:e4:df:03:c2:82:2c: b0:78:db:e3:b0:db:c7:0a:b0:00:b8:cf:69:89:76: a7:84:40:03:72:4b:92:0b:bd:99:0f:e0:ee:c8:4b: 0c:1c:89:82:44:bd:80:a2:16:5d:6e:98:40:80:b1: 9f:ff:c3:11:4a:e3:0c:f4:30:7d:76:da:f5:74:cc: a1:6c:98:cc:49:21:58:a8:8f:5b:14:43:dc:a0:8d: ca:1f:90:24:3e:7e:f4:b0:d5:2b:4d:fd:54:ea:58: b6:98:97:e6:01:2b:9d:58:94:36:70:0b:e2:ed:39: 52:8b:4d:5d:de:d0:2e:27:d2:f6:71:ba:9b:a8:8f: b1:da:ec:ad:93:d6:27:6d:5a:6f:16:be:20:9a:5f: 50:f5:e9:e6:d8:8d:a5:ce:34:04:ab:55:7f:e9:27: 75:f5:0c:83:66:da:a8:d9:1e:62:eb:9c:08:9c:38: bf:05:7f:99:2f:82:d3:bb:77:62:0a:db:72:5d:51: 8a:9a:c8:5a:71:95:cf:fe:ea:a1:6c:10:9f:3e:42: ab:60:bc:83:bd:42:42:f7:52:a9:71:ed:23:32:73: 57:a2:ba:27:c4:2c:3e:58:7a:a7:67:cf:7c:23:51: a2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FC:2B:86:26:4B:45:CB:22:5F:C0:0B:C8:68:F6:C6:D3:D5:61:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/671008f9-dbae-3314-9992-bae543663a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:b4:e9:e3:75:8f:93:b0:40:bf:dc:9e:be:62:ad:0b:76:f6: 35:7c:88:aa:f2:06:23:40:5a:b7:ed:fe:f7:7a:ce:7e:94:9f: ee:82:27:6a:76:0b:35:44:8a:65:45:72:6e:d2:d9:31:65:de: 3b:dd:4b:4e:b4:35:de:39:aa:42:0e:85:e4:7e:44:a3:ef:5b: 53:ce:58:d4:6f:b7:3c:fb:23:0e:47:c4:0e:d8:ef:7d:db:12: d9:c3:8a:fc:23:25:eb:67:43:e9:08:ee:50:1b:e5:87:82:ea: 28:6f:70:0c:b8:86:9e:9d:8b:69:af:2a:99:b8:f6:62:fa:02: e0:6a:fc:9b:2f:c4:3f:0b:38:91:83:fc:8a:5f:5b:5e:7c:e9: e4:11:41:bf:53:f9:f6:b5:e4:9c:db:7e:da:64:47:3e:9a:a6: fe:1f:ac:fe:17:66:ac:3f:92:1c:94:a3:24:57:9b:91:b8:5b: f3:22:8f:99:7c:06:30:74:96:36:9e:18:7b:5f:da:26:71:7c: f0:2b:67:91:51:0c:a5:7f:01:ef:3b:ff:28:1a:c9:de:92:ac: 56:02:88:fa:65:2f:ea:75:e3:1b:61:4f:dd:75:ec:5d:21:c4: cd:5f:e1:0c:de:d6:85:eb:0e:13:e7:2f:fb:26:91:57:d0:5d: d9:40:37:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNgv27RnhkqWlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MzM2OGU2YTAtNjNkOS00YmVmLThmMTEtYTljYWI4NGVlZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMAEYewq1ATRoAujjDTa0460WQWI6Vvk3wPC giyweNvjsNvHCrAAuM9piXanhEADckuSC72ZD+DuyEsMHImCRL2AohZdbphAgLGf /8MRSuMM9DB9dtr1dMyhbJjMSSFYqI9bFEPcoI3KH5AkPn70sNUrTf1U6li2mJfm ASudWJQ2cAvi7TlSi01d3tAuJ9L2cbqbqI+x2uytk9YnbVpvFr4gml9Q9enm2I2l zjQEq1V/6Sd19QyDZtqo2R5i65wInDi/BX+ZL4LTu3diCttyXVGKmshacZXP/uqh bBCfPkKrYLyDvUJC91Kpce0jMnNXoronxCw+WHqnZ898I1GiJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJH8K4YmS0XLIl/AC8ho9sbT1WHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjcxMDA4ZjktZGJhZS0z MzE0LTk5OTItYmFlNTQzNjYzYTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFG06eN1j5OwQL/cnr5irQt29jV8iKryBiNAWrft/vd6zn6Un+6CJ2p2 CzVEimVFcm7S2TFl3jvdS060Nd45qkIOheR+RKPvW1POWNRvtzz7Iw5HxA7Y733b EtnDivwjJetnQ+kI7lAb5YeC6ihvcAy4hp6di2mvKpm49mL6AuBq/JsvxD8LOJGD /IpfW1586eQRQb9T+fa15JzbftpkRz6apv4frP4XZqw/khyUoyRXm5G4W/Mij5l8 BjB0ljaeGHtf2iZxfPArZ5FRDKV/Ae87/ygayd6SrFYCiPplL+p14xthT9117F0h xM1f4Qze1oXrDhPnL/smkVfQXdlAN1s= -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:40 2026 by rpki-client