$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7ba9a0a7-4b74-308a-8e29-504851b27706.roa File: 7ba9a0a7-4b74-308a-8e29-504851b27706.roa (raw, json) Hash identifier: 4pD2u1M2vebJzF7QN4WSmHNxk7nNivFY56lVIMxjfgE= Subject key identifier: 99:A5:CE:E9:67:B2:44:2B:07:0A:C3:3C:95:7A:4F:CB:CB:02:86:24 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D326B3BF8EA3B753BBE8 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7ba9a0a7-4b74-308a-8e29-504851b27706.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 64.16.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d3:26:b3:bf:8e:a3:b7:53:bb:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=d360e91f-47f3-449c-a9dd-b380b3e78a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:68:0f:fa:77:91:cf:31:68:80:ef:7f:ee:6a: 9c:83:84:91:67:7e:1a:bf:3a:60:c0:77:56:78:b2: 33:16:9b:83:06:13:36:96:17:58:d6:1f:e7:80:27: c4:e9:f0:d1:84:c6:17:5c:e8:d4:72:99:cb:b4:58: da:0b:c1:e0:4f:21:38:70:98:52:54:80:c9:cd:c7: c5:65:f3:48:68:43:88:7d:17:d3:cc:4d:3d:5d:53: 98:31:4c:4d:51:4b:7c:b1:24:c6:a2:10:a6:44:3c: d0:72:49:7e:d3:75:fa:87:ba:d2:35:41:aa:9d:29: 28:6f:91:e7:1f:b7:32:ea:68:a1:ef:e3:6e:89:73: 86:b5:6b:be:4d:8d:cc:1a:19:b0:a1:6b:b1:02:dc: c3:67:e7:fb:1f:8b:af:b5:0d:a1:6c:9a:c3:8e:61: fa:4f:0d:47:f3:fe:12:17:e5:e7:e0:5d:5a:25:f1: ba:05:e0:0a:27:27:db:68:a8:d5:ca:bd:89:d6:01: 10:c0:4b:11:82:da:0f:ad:05:44:66:95:5b:da:5c: b4:c5:1e:b6:3d:4a:ae:d7:e2:0b:49:4e:1c:16:4b: e0:4c:cd:69:02:31:00:2d:59:f0:90:c7:48:f0:52: 76:bf:d0:8a:b4:2b:0d:ab:05:98:3a:d6:37:4c:13: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A5:CE:E9:67:B2:44:2B:07:0A:C3:3C:95:7A:4F:CB:CB:02:86:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7ba9a0a7-4b74-308a-8e29-504851b27706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:80:3e:f4:da:29:30:90:92:50:05:94:11:38:7c:bb:f1:ca: 14:36:6e:b1:7f:a4:e4:e3:26:57:96:97:f0:94:33:0f:4c:fb: 14:43:71:28:48:3b:d5:bd:31:11:dd:ea:5f:84:24:8f:a6:f2: c5:a0:47:51:15:2d:7b:1b:a1:1f:aa:04:ce:ef:8a:0f:fb:9d: 11:23:36:81:2e:05:8a:d3:91:bc:f9:de:91:80:9c:2c:c0:5c: b2:fa:b1:c0:f2:0f:8c:69:a5:69:59:c7:e0:0b:0a:e3:9d:de: 1d:9a:bc:45:9c:0d:a3:22:9e:c1:c1:c8:95:ab:8d:94:74:c2: 08:94:95:89:d0:a5:02:97:2f:e6:c8:54:93:72:5d:4f:26:82: 05:e4:36:c5:08:01:76:8e:66:db:77:e5:4c:09:ad:51:5e:05: 6d:53:fb:65:17:b7:7e:5a:97:1a:2d:ee:99:7a:80:aa:73:aa: cc:1b:63:61:70:ed:1e:34:ae:a5:3e:11:82:f3:ce:80:78:85: 7d:d8:4a:44:3c:98:ec:d0:70:a4:3e:2f:b4:4c:66:45:c0:da: 76:22:6e:09:ea:45:84:6e:52:84:58:e5:01:55:69:8d:59:1c: a6:52:f7:f9:58:c5:b3:6a:cc:25:8e:93:ff:b7:d9:3a:c4:38: bf:aa:19:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNMms7+Oo7dTu+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZDM2MGU5MWYtNDdmMy00NDljLWE5ZGQtYjM4MGIzZTc4YTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGgP+neRzzFogO9/7mqcg4SRZ34avzpgwHdW eLIzFpuDBhM2lhdY1h/ngCfE6fDRhMYXXOjUcpnLtFjaC8HgTyE4cJhSVIDJzcfF ZfNIaEOIfRfTzE09XVOYMUxNUUt8sSTGohCmRDzQckl+03X6h7rSNUGqnSkob5Hn H7cy6mih7+NuiXOGtWu+TY3MGhmwoWuxAtzDZ+f7H4uvtQ2hbJrDjmH6Tw1H8/4S F+Xn4F1aJfG6BeAKJyfbaKjVyr2J1gEQwEsRgtoPrQVEZpVb2ly0xR62PUqu1+IL SU4cFkvgTM1pAjEALVnwkMdI8FJ2v9CKtCsNqwWYOtY3TBPctwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmlzulnskQrBwrDPJV6T8vLAoYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvN2JhOWEwYTctNGI3NC0z MDhhLThlMjktNTA0ODUxYjI3NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyAPvTaKTCQklAFlBE4fLvxyhQ2brF/pOTjJleWl/CUMw9M+xRDcShI O9W9MRHd6l+EJI+m8sWgR1EVLXsboR+qBM7vig/7nREjNoEuBYrTkbz53pGAnCzA XLL6scDyD4xppWlZx+ALCuOd3h2avEWcDaMinsHByJWrjZR0wgiUlYnQpQKXL+bI VJNyXU8mggXkNsUIAXaOZtt35UwJrVFeBW1T+2UXt35alxot7pl6gKpzqswbY2Fw 7R40rqU+EYLzzoB4hX3YSkQ8mOzQcKQ+L7RMZkXA2nYibgnqRYRuUoRY5QFVaY1Z HKZS9/lYxbNqzCWOk/+32TrEOL+qGaE= -----END CERTIFICATE-----Generated at Sat Jul 18 01:19:34 2026 by rpki-client