$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8253844d-08a2-33aa-9d5c-ba72879a0121.roa File: 8253844d-08a2-33aa-9d5c-ba72879a0121.roa (raw, json) Hash identifier: 34azgZQ1rCsXI6oVYDU4cIAGXAdWfa5dFzWZSWRZmtQ= Subject key identifier: DF:BA:DB:CA:D4:24:A9:AF:6F:2C:55:19:1B:28:17:A0:9B:D2:6C:11 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D81BC8E082CE1D456E80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8253844d-08a2-33aa-9d5c-ba72879a0121.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d8:1b:c8:e0:82:ce:1d:45:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=fb6702e8-2630-4d96-b9de-37418c7b85f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:bd:d4:da:55:d6:42:a7:49:18:20:6d:ef: c3:8f:25:71:c8:e1:d9:bf:04:3e:5e:99:d4:86:c0: 72:0c:ce:5f:9c:68:5e:f8:db:f1:b8:5d:ac:9b:9d: c5:93:09:63:95:b1:4f:ab:10:bb:fa:f4:d9:74:24: ff:39:1c:33:c8:a5:20:8c:46:c3:7d:75:21:7e:23: 10:35:e5:99:6b:ef:13:ba:67:20:df:f2:02:2f:5c: 35:d4:36:23:e2:a7:78:c7:b8:46:d4:98:1a:73:fc: 4f:2d:56:91:ef:48:90:54:d1:04:fb:a3:c0:26:75: 1a:31:43:a6:79:a1:62:32:e4:16:1a:d1:4c:92:e1: 19:e1:60:83:67:b1:9a:06:24:7c:77:30:e9:4b:fd: ae:fe:68:0f:a8:40:ce:1d:3a:25:6e:14:4d:25:a8: d6:9c:e2:c4:80:20:fe:4d:6f:39:95:68:1f:97:14: e6:d4:3b:22:e0:e7:b9:aa:8e:0a:a0:08:ce:5a:66: 37:3a:d1:8a:42:9a:88:c4:1d:a2:eb:e9:6b:dd:b8: 43:e0:5c:48:ee:f3:53:84:61:dc:96:cc:5d:d0:7a: 02:45:b3:95:f4:a1:84:2c:25:51:e5:1a:98:0b:bf: f1:25:fc:26:ff:9d:ae:a2:b5:1e:65:8a:4f:2d:d4: d0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BA:DB:CA:D4:24:A9:AF:6F:2C:55:19:1B:28:17:A0:9B:D2:6C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8253844d-08a2-33aa-9d5c-ba72879a0121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:2b:c5:92:60:3d:d5:44:bb:c6:0c:65:2e:ef:18:5a:a3:03: f7:cd:63:f7:5a:fa:8c:40:b9:64:54:8e:db:a4:dc:63:64:a7: ce:68:6d:e5:f0:30:ea:69:a4:0f:a5:24:b8:8d:b4:b0:31:5f: 4c:0a:8a:57:ae:73:b4:fc:91:c0:be:a0:8a:8c:2e:91:b3:36: c6:9a:c0:65:91:5d:6e:4d:41:4f:c3:c2:99:7f:bf:b2:da:a0: 61:63:14:94:fe:17:b2:e2:f0:27:57:9e:b8:d8:5e:f9:13:37: 6d:a2:61:d1:d0:92:8f:bf:9a:e8:ac:ea:80:3b:ca:91:b6:97: c2:14:70:aa:a5:e2:2f:9d:25:b3:27:47:d9:2f:af:38:ea:a9: a6:e1:19:cd:0d:7a:05:f1:99:7b:08:2f:62:9c:de:21:93:66: 00:89:99:af:3f:cb:ca:d6:20:4f:b0:ae:91:5a:8c:13:ff:70: 6c:70:e1:a9:a2:eb:69:af:68:3a:f7:7c:bb:bc:e8:78:57:8f: 73:ea:1e:87:fc:db:de:49:8e:04:e8:0d:aa:ff:35:10:4b:3a: 46:cd:42:2a:f8:45:9c:1a:56:db:61:a5:9d:3c:d1:42:3d:51: c6:a1:f4:50:41:f7:c6:b8:9f:df:8b:05:15:72:19:22:e1:bd: 92:38:94:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNgbyOCCzh1FboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZmI2NzAyZTgtMjYzMC00ZDk2LWI5ZGUtMzc0MThjN2I4NWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhC91NpV1kKnSRggbe/DjyVxyOHZvwQ+XpnU hsByDM5fnGhe+NvxuF2sm53FkwljlbFPqxC7+vTZdCT/ORwzyKUgjEbDfXUhfiMQ NeWZa+8Tumcg3/ICL1w11DYj4qd4x7hG1Jgac/xPLVaR70iQVNEE+6PAJnUaMUOm eaFiMuQWGtFMkuEZ4WCDZ7GaBiR8dzDpS/2u/mgPqEDOHTolbhRNJajWnOLEgCD+ TW85lWgflxTm1Dsi4Oe5qo4KoAjOWmY3OtGKQpqIxB2i6+lr3bhD4FxI7vNThGHc lsxd0HoCRbOV9KGELCVR5RqYC7/xJfwm/52uorUeZYpPLdTQCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+628rUJKmvbyxVGRsoF6Cb0mwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvODI1Mzg0NGQtMDhhMi0z M2FhLTlkNWMtYmE3Mjg3OWEwMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcrxZJgPdVEu8YMZS7vGFqjA/fNY/da+oxAuWRUjtuk3GNkp85obeXw MOpppA+lJLiNtLAxX0wKileuc7T8kcC+oIqMLpGzNsaawGWRXW5NQU/Dwpl/v7La oGFjFJT+F7Li8CdXnrjYXvkTN22iYdHQko+/muis6oA7ypG2l8IUcKql4i+dJbMn R9kvrzjqqabhGc0NegXxmXsIL2Kc3iGTZgCJma8/y8rWIE+wrpFajBP/cGxw4ami 62mvaDr3fLu86HhXj3PqHof8295JjgToDar/NRBLOkbNQir4RZwaVtthpZ080UI9 Ucah9FBB98a4n9+LBRVyGSLhvZI4lP0= -----END CERTIFICATE-----Generated at Tue Jul 21 13:24:39 2026 by rpki-client