$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7e50bf05-8384-3579-a0cb-6808c52b3241.roa File: 7e50bf05-8384-3579-a0cb-6808c52b3241.roa (raw, json) Hash identifier: gKeoSbYscqQt79LAbv44F1eBCoSLviJ/JqpOvIQBT0Y= Subject key identifier: EE:E3:C0:7C:7C:FF:22:C0:ED:B6:C9:D2:63:E6:E0:99:4C:37:57:FF Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DAA6DE78D125B9832B80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7e50bf05-8384-3579-a0cb-6808c52b3241.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:da:a6:de:78:d1:25:b9:83:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=35faa467-2454-42f7-a453-fd7f08573892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:76:51:39:d3:8f:04:fb:93:cc:bd:51:4c:38: 3b:02:64:99:f0:8a:e5:62:14:16:21:78:9c:e1:8f: 2d:16:6e:a0:68:2b:1e:83:df:33:a6:39:e7:7e:54: 35:92:68:86:a0:48:a5:b9:20:97:0a:ac:45:e9:84: 3f:0a:f4:15:d5:38:cb:23:f4:b8:a6:c5:b0:b2:3a: 7d:c3:7d:38:c2:ba:b6:a9:da:d0:30:fc:22:83:e8: 8c:34:15:d4:81:06:be:05:7f:2e:f6:0f:45:4b:3f: 0d:2f:4b:24:f3:32:ec:d4:d0:ff:18:92:92:98:f4: 3f:49:c8:b9:8f:a0:e4:60:e3:37:70:0f:10:c2:c0: 18:9b:e3:a2:31:b5:c4:e6:b4:e0:89:48:49:bb:89: 9b:c8:74:48:24:97:6f:70:8e:b4:6f:f9:c6:c3:65: fa:ba:01:df:7a:d4:c3:83:0c:bb:98:76:64:fc:3a: e9:f8:c9:7d:e4:b7:82:59:25:25:97:5c:ab:70:2c: 7b:8e:9c:09:6d:ae:45:19:c2:c6:de:e3:be:72:6d: a1:b2:52:c7:29:8a:4f:1f:f6:4a:59:e2:38:b3:5a: 06:b8:ef:c8:96:41:3d:86:a6:ad:96:54:9f:bb:ef: 88:6b:13:75:dc:4a:36:bf:18:3e:58:fb:a5:6c:45: 7f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E3:C0:7C:7C:FF:22:C0:ED:B6:C9:D2:63:E6:E0:99:4C:37:57:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7e50bf05-8384-3579-a0cb-6808c52b3241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:80:f0:a4:74:83:b0:0b:85:5b:cf:fe:9e:8f:fa:0f:e1:c8: 59:38:a5:a4:9b:54:dc:2d:96:75:84:be:18:32:6b:b6:a5:e6: 02:3d:ca:99:0f:58:24:c6:38:9c:d3:f0:16:b4:c5:f2:5f:86: 79:0b:65:64:b5:98:12:37:18:94:1c:81:a4:4c:f0:67:d5:24: 1f:e5:35:a1:6c:77:5a:57:54:1b:0a:97:20:ef:de:22:db:61: 85:1a:f5:b0:d1:e1:8d:47:85:a6:52:f7:2c:b3:c4:e9:2f:56: ec:1f:8d:d3:ac:49:5e:b7:1e:7d:1d:b0:8c:dd:4f:07:08:79: cb:d8:19:de:a0:dd:2e:59:7d:76:52:fa:4a:66:79:f7:b7:dc: 5e:99:87:9b:d8:21:fc:6c:e3:26:59:bf:d7:09:36:43:ec:1d: 11:65:d9:31:ee:6a:10:35:f3:9e:c8:86:9e:89:22:aa:72:d6: bd:bd:6d:0a:e3:f6:b8:a8:43:e4:74:06:68:ce:af:f3:5b:c3: cc:12:34:a3:1c:3f:31:ac:0a:64:40:4c:6e:4d:b0:6c:13:4e: 09:2b:c6:b5:fa:be:c0:9c:97:0f:ec:ec:3e:a8:7c:cb:16:9c: 7b:f9:05:18:25:19:87:51:8c:bb:2d:a5:6b:03:88:bb:ef:8b: da:f8:a8:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNqm3njRJbmDK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MzVmYWE0NjctMjQ1NC00MmY3LWE0NTMtZmQ3ZjA4NTczODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXZROdOPBPuTzL1RTDg7AmSZ8IrlYhQWIXic 4Y8tFm6gaCseg98zpjnnflQ1kmiGoEiluSCXCqxF6YQ/CvQV1TjLI/S4psWwsjp9 w304wrq2qdrQMPwig+iMNBXUgQa+BX8u9g9FSz8NL0sk8zLs1ND/GJKSmPQ/Sci5 j6DkYOM3cA8QwsAYm+OiMbXE5rTgiUhJu4mbyHRIJJdvcI60b/nGw2X6ugHfetTD gwy7mHZk/Drp+Ml95LeCWSUll1yrcCx7jpwJba5FGcLG3uO+cm2hslLHKYpPH/ZK WeI4s1oGuO/IlkE9hqatllSfu++IaxN13Eo2vxg+WPulbEV/jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7jwHx8/yLA7bbJ0mPm4JlMN1f/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvN2U1MGJmMDUtODM4NC0z NTc5LWEwY2ItNjgwOGM1MmIzMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+A8KR0g7ALhVvP/p6P+g/hyFk4paSbVNwtlnWEvhgya7al5gI9ypkP WCTGOJzT8Ba0xfJfhnkLZWS1mBI3GJQcgaRM8GfVJB/lNaFsd1pXVBsKlyDv3iLb YYUa9bDR4Y1HhaZS9yyzxOkvVuwfjdOsSV63Hn0dsIzdTwcIecvYGd6g3S5ZfXZS +kpmefe33F6Zh5vYIfxs4yZZv9cJNkPsHRFl2THuahA1857Ihp6JIqpy1r29bQrj 9rioQ+R0BmjOr/Nbw8wSNKMcPzGsCmRATG5NsGwTTgkrxrX6vsCclw/s7D6ofMsW nHv5BRglGYdRjLstpWsDiLvvi9r4qHU= -----END CERTIFICATE-----Generated at Tue Jul 21 01:41:14 2026 by rpki-client