$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8402f520-c85b-359c-a454-1cedfef7c566.roa File: 8402f520-c85b-359c-a454-1cedfef7c566.roa (raw, json) Hash identifier: yDOcPk5WXduEsE3pYddUv5hJl7bL7oqFk3om9bF1xwQ= Subject key identifier: C1:64:A0:D6:56:80:4A:B1:A2:3A:03:28:B3:BA:B3:CE:2B:B2:7C:A7 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7634F599FE9210E1A7E951BC Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8402f520-c85b-359c-a454-1cedfef7c566.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:f5:99:fe:92:10:e1:a7:e9:51:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=f2f909c0-3adf-4a89-9bc4-0d7765b08a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ee:4e:ff:b4:00:ec:91:53:6d:5b:7b:3f:26: aa:a8:50:70:57:f7:1f:ee:3a:c0:7c:27:4c:71:49: 0a:3e:4d:5c:d6:b8:28:48:37:81:e4:ec:ef:b0:57: 78:aa:20:90:c3:8d:6f:94:2c:48:a1:86:ec:37:e1: a2:9d:3f:d1:e1:a4:87:6b:cb:10:e0:38:c2:13:6f: f0:c2:8b:22:62:bd:3d:6b:fb:8e:31:8c:63:cc:41: 93:1d:cf:65:58:b7:ee:8a:2f:56:56:6c:46:5d:bf: 3d:47:a9:fa:fb:32:90:bf:f1:41:99:ff:a2:f7:58: 4f:70:4a:22:22:6d:39:22:77:87:de:d6:25:f8:b8: 3f:31:df:fe:77:10:13:b9:fd:5e:ad:a6:4f:76:8d: e2:eb:bf:c2:91:32:da:cd:cd:94:c9:50:57:01:bd: 8b:4a:48:e7:aa:ed:6e:42:e4:cc:17:d5:5c:23:6f: cd:a8:7b:7d:a9:87:68:b3:df:91:a6:e2:76:47:e2: 62:d1:be:2d:c1:71:f6:1d:de:2a:58:24:09:09:50: f5:18:96:76:f2:f3:51:c3:85:b9:11:05:a7:9b:2b: da:ce:f3:7b:ed:05:c4:f7:70:aa:10:ba:6f:78:c7: 72:fc:3b:e3:68:75:5a:b5:8f:3b:05:ad:30:7b:3c: ec:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:64:A0:D6:56:80:4A:B1:A2:3A:03:28:B3:BA:B3:CE:2B:B2:7C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8402f520-c85b-359c-a454-1cedfef7c566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:57:c6:d3:ad:76:88:b0:4d:52:e6:20:56:59:5c:4a:9c:f7: 7c:02:61:83:53:f0:52:76:66:ee:07:42:77:76:a8:fb:e0:5f: f2:9d:46:2d:0f:bf:50:ae:34:6d:38:b8:16:74:95:1e:a1:13: 9d:31:43:76:ec:80:63:8d:a0:fa:2b:7e:b2:49:17:9c:30:5c: 00:75:aa:f6:09:6a:27:df:44:2b:50:8a:c7:79:cd:55:af:48: 33:50:d6:e8:18:c5:6d:1a:d8:b2:d2:92:9a:c3:96:7b:5c:66: 35:b0:2a:ea:fb:93:f6:39:19:9d:48:b5:f0:da:1a:04:f6:ab: 50:a2:2b:e7:db:71:06:4a:13:0f:a0:5a:79:31:04:bf:33:e8: 8e:47:68:ac:0c:37:1e:79:8c:c4:35:50:57:47:a2:02:57:23: 1e:73:88:08:9c:c5:91:39:31:d1:06:e5:9c:02:d0:c1:b1:9e: 9a:be:16:51:34:03:52:35:7a:eb:92:31:83:9f:8b:4c:8c:d9: 0b:89:60:c9:32:99:25:0e:1d:e6:e8:db:f4:0b:f5:ed:89:02: d3:02:26:87:ce:75:5a:d4:2d:c3:94:7e:e1:c6:4a:27:b4:f4: 5b:c5:5a:c1:27:4c:93:07:6b:1e:be:ac:76:0a:ed:3d:c6:a2: ae:4b:7e:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NPWZ/pIQ4afpUbwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk ZjJmOTA5YzAtM2FkZi00YTg5LTliYzQtMGQ3NzY1YjA4YTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe5O/7QA7JFTbVt7PyaqqFBwV/cf7jrAfCdM cUkKPk1c1rgoSDeB5OzvsFd4qiCQw41vlCxIoYbsN+GinT/R4aSHa8sQ4DjCE2/w wosiYr09a/uOMYxjzEGTHc9lWLfuii9WVmxGXb89R6n6+zKQv/FBmf+i91hPcEoi Im05IneH3tYl+Lg/Md/+dxATuf1eraZPdo3i67/CkTLazc2UyVBXAb2LSkjnqu1u QuTMF9VcI2/NqHt9qYdos9+RpuJ2R+Ji0b4twXH2Hd4qWCQJCVD1GJZ28vNRw4W5 EQWnmyvazvN77QXE93CqELpveMdy/DvjaHVatY87Ba0wezzsjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFkoNZWgEqxojoDKLO6s84rsnynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvODQwMmY1MjAtYzg1Yi0z NTljLWE0NTQtMWNlZGZlZjdjNTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFXxtOtdoiwTVLmIFZZXEqc93wCYYNT8FJ2Zu4HQnd2qPvgX/KdRi0P v1CuNG04uBZ0lR6hE50xQ3bsgGONoPorfrJJF5wwXAB1qvYJaiffRCtQisd5zVWv SDNQ1ugYxW0a2LLSkprDlntcZjWwKur7k/Y5GZ1ItfDaGgT2q1CiK+fbcQZKEw+g WnkxBL8z6I5HaKwMNx55jMQ1UFdHogJXIx5ziAicxZE5MdEG5ZwC0MGxnpq+FlE0 A1I1euuSMYOfi0yM2QuJYMkymSUOHebo2/QL9e2JAtMCJofOdVrULcOUfuHGSie0 9FvFWsEnTJMHax6+rHYK7T3Goq5LfuA= -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:10 2026 by rpki-client