$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7497f4dd-b59f-3cbe-8a89-925ff1f7fde3.roa File: 7497f4dd-b59f-3cbe-8a89-925ff1f7fde3.roa (raw, json) Hash identifier: d9vUIxn4VeEJZ89/grod4aPL0DJkG4W2hXESuB2C/fQ= Subject key identifier: EF:A4:F9:0E:17:93:6C:12:82:8E:63:CC:C9:28:B2:24:C3:F0:0B:B5 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D659D9D65E32E7AD9900 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7497f4dd-b59f-3cbe-8a89-925ff1f7fde3.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d6:59:d9:d6:5e:32:e7:ad:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=dadcbe37-74d0-4c8f-99f9-f45a2fe560e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:14:4d:99:1b:d3:af:5c:6e:da:7e:18:3c: 2d:25:18:ae:d1:d7:06:9c:53:43:9e:12:49:d2:b0: 2c:a4:5b:19:cd:35:7d:73:e2:5c:e2:d6:db:74:c5: c2:a5:4a:d1:e8:c9:dc:64:6d:2c:c3:22:9a:c9:45: 1a:a2:86:71:b0:90:3c:2d:56:1f:57:0c:c8:af:84: 30:a3:f7:1b:f5:20:f1:ba:8e:33:20:e5:52:36:5e: 2b:94:f5:cd:5e:93:ec:b9:99:01:25:07:c0:85:2c: b5:bf:28:40:b3:3d:53:d5:ab:49:c5:de:25:da:b5: d5:23:b4:74:ae:3a:3f:f1:a1:75:91:7e:67:c1:6b: ae:4d:e8:f1:32:8a:4f:45:f3:25:45:b6:b0:91:ef: f1:af:3b:78:51:79:88:d4:c6:94:0f:67:05:d9:56: 88:a9:e4:9f:bf:2f:88:c0:ce:27:d9:87:23:b6:20: a1:02:ac:da:6b:dc:f0:d8:86:21:b2:34:f8:f5:b8: 8e:84:4f:4a:9d:e2:d3:72:f5:fe:a8:62:7d:72:2a: 57:24:50:af:29:d8:9e:03:d9:b4:24:06:41:2a:3a: 0d:62:9c:6f:34:02:6e:eb:5f:46:b7:7b:16:da:45: b2:0a:07:9e:1a:ee:d4:80:7b:41:6e:17:73:b3:20: 01:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A4:F9:0E:17:93:6C:12:82:8E:63:CC:C9:28:B2:24:C3:F0:0B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7497f4dd-b59f-3cbe-8a89-925ff1f7fde3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:01:b7:59:2c:4d:ba:f7:c5:c7:7f:82:45:9f:09:50:60:2c: 3a:a1:da:c6:33:e1:c4:5f:36:a5:e4:69:04:9a:6c:84:17:70: 97:f8:5e:60:3b:8f:da:ed:88:e7:d2:2e:36:5a:ca:49:56:58: d1:5e:b4:12:86:c5:67:3b:7e:3b:21:e8:6c:e7:5b:e8:a0:91: 18:88:26:e1:28:a7:1e:61:59:44:d9:f2:e7:e4:9a:67:f7:07: 6e:b2:9d:8e:8a:0d:43:e7:a9:2c:2e:41:23:09:ae:f1:d4:0c: 4c:b2:b9:f8:78:5e:9b:0d:c0:93:77:3e:a6:ec:87:94:2a:ea: 9b:b0:5b:59:48:d2:6d:cb:9d:a6:56:d9:2b:d4:6b:fa:39:60: 8f:b5:e9:46:12:4b:84:b1:ad:4f:91:75:33:66:84:cf:3e:b8: 89:16:4d:6a:60:b8:47:4e:71:c0:28:6b:43:6d:e6:a4:32:b4: c3:cf:96:19:fa:e3:85:e0:11:93:2e:80:a9:f6:fe:0a:5b:06: 6a:0d:1f:15:ec:7f:6c:2d:4f:89:aa:1a:f3:9e:38:38:b5:c3: d8:5c:91:c4:4c:4f:52:a5:3a:aa:68:64:39:10:b0:c1:1e:a8: 2f:6e:a9:85:8b:a9:08:ae:f0:08:23:70:d8:aa:61:2a:cc:b6: e6:90:03:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNZZ2dZeMuetmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZGFkY2JlMzctNzRkMC00YzhmLTk5ZjktZjQ1YTJmZTU2MGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAMUTZkb069cbtp+GDwtJRiu0dcGnFNDnhJJ 0rAspFsZzTV9c+Jc4tbbdMXCpUrR6MncZG0swyKayUUaooZxsJA8LVYfVwzIr4Qw o/cb9SDxuo4zIOVSNl4rlPXNXpPsuZkBJQfAhSy1vyhAsz1T1atJxd4l2rXVI7R0 rjo/8aF1kX5nwWuuTejxMopPRfMlRbawke/xrzt4UXmI1MaUD2cF2VaIqeSfvy+I wM4n2YcjtiChAqzaa9zw2IYhsjT49biOhE9KneLTcvX+qGJ9cipXJFCvKdieA9m0 JAZBKjoNYpxvNAJu619Gt3sW2kWyCgeeGu7UgHtBbhdzsyABswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+k+Q4Xk2wSgo5jzMkosiTD8Au1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNzQ5N2Y0ZGQtYjU5Zi0z Y2JlLThhODktOTI1ZmYxZjdmZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0Bt1ksTbr3xcd/gkWfCVBgLDqh2sYz4cRfNqXkaQSabIQXcJf4XmA7 j9rtiOfSLjZayklWWNFetBKGxWc7fjsh6GznW+igkRiIJuEopx5hWUTZ8ufkmmf3 B26ynY6KDUPnqSwuQSMJrvHUDEyyufh4XpsNwJN3Pqbsh5Qq6puwW1lI0m3LnaZW 2SvUa/o5YI+16UYSS4SxrU+RdTNmhM8+uIkWTWpguEdOccAoa0Nt5qQytMPPlhn6 44XgEZMugKn2/gpbBmoNHxXsf2wtT4mqGvOeODi1w9hckcRMT1KlOqpoZDkQsMEe qC9uqYWLqQiu8AgjcNiqYSrMtuaQA2s= -----END CERTIFICATE-----Generated at Tue Jul 21 13:22:41 2026 by rpki-client