$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/86d95cce-93a5-3a57-930a-a9aaecdac9ed.roa File: 86d95cce-93a5-3a57-930a-a9aaecdac9ed.roa (raw, json) Hash identifier: 82nWObHVD9S1gX57XWS/eQBieUdaGgtqHmVJY8tDCYc= Subject key identifier: 84:5C:FF:B5:74:C7:3B:A7:3F:3D:FC:D1:91:0E:6A:82:F8:C0:11:F7 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D7E6ABE7D58ACE956C00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/86d95cce-93a5-3a57-930a-a9aaecdac9ed.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d7:e6:ab:e7:d5:8a:ce:95:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=4c4dbd6e-445c-4751-9a1d-bff5c17cd39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5d:b9:a5:13:9d:b7:75:dd:b1:b1:af:c2:b8: c2:ef:5e:4f:6c:43:60:bc:d3:14:03:95:fa:ed:1d: 26:60:80:0f:44:45:bf:35:17:3f:63:b1:2f:d2:98: 93:76:d2:54:13:78:59:8a:03:a3:7c:ad:76:12:02: 9f:c0:7a:a0:c6:4e:61:2d:14:8f:c7:f6:8e:9e:f7: 21:85:89:02:8e:48:85:8e:77:ce:93:14:d7:2f:ba: 58:93:48:ba:4d:38:93:16:81:db:b2:d3:58:86:97: 4b:9c:97:75:f8:1a:1d:25:f9:25:72:36:9e:af:08: 3f:d9:b9:4c:75:d2:08:7a:03:f7:3c:cb:2c:7e:35: 83:a6:0b:5f:9e:48:9a:ca:24:b2:f3:3a:4c:c6:70: 8f:29:3c:66:ef:56:d3:25:8e:b2:f4:19:7b:d6:52: 60:f4:cb:29:73:c5:ea:10:f2:00:d7:7b:be:b7:ec: a6:ec:bd:bf:f5:ed:92:aa:86:8f:05:df:ee:08:3b: 06:76:1c:8a:fe:39:eb:41:11:ab:fb:c5:09:08:ea: 4e:3a:e0:4d:8c:d1:07:de:f4:83:6b:de:b3:6f:5a: 3f:e1:ee:85:34:29:42:25:26:d6:e0:c2:47:f7:60: a9:e9:b7:d9:78:53:dd:c0:b3:8c:26:76:b8:ff:e7: 7c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5C:FF:B5:74:C7:3B:A7:3F:3D:FC:D1:91:0E:6A:82:F8:C0:11:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/86d95cce-93a5-3a57-930a-a9aaecdac9ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:bd:a6:69:57:2a:b9:19:23:bd:dd:04:1e:3d:cc:cf:3c:67: 2e:9d:c7:83:f8:6e:4f:07:e5:af:93:f8:1c:d8:fa:97:e5:60: 54:74:95:6d:b1:6a:0c:9c:5e:2d:61:67:0f:44:7b:dc:c9:15: 3f:c6:17:9d:00:bf:ff:bf:01:3c:bc:c0:79:08:37:49:36:bb: 96:ad:02:a0:33:cf:e2:d7:a7:91:99:0a:8a:30:c1:dc:81:f8: 41:04:e8:0c:4f:e9:26:b7:18:eb:26:1f:06:3c:0f:41:e8:74: 61:a3:ee:41:9b:63:34:22:b5:f1:b3:c3:5e:2e:f5:45:37:4a: c7:a7:e2:21:d6:54:85:1e:ca:7e:71:0f:a0:69:fc:56:78:bb: e1:4b:9a:96:e8:d6:4f:a8:d7:e0:a3:a7:8d:51:50:b9:b6:d7: f3:1b:38:ce:fe:dc:86:58:ab:a6:5b:0e:17:93:60:48:8f:ab: 04:2d:d9:ab:6a:df:47:68:90:ed:0a:dc:90:95:58:10:cf:d2: 4b:41:4a:c5:b0:c4:83:68:0d:4d:ae:7a:51:70:5d:5b:ee:fc: cc:aa:a7:ce:ed:99:9a:4e:23:05:68:02:44:3a:0f:c2:4b:db: 80:45:d2:d1:49:e1:f5:79:ca:68:b3:a9:3a:c4:1a:81:39:d4: 9e:c5:09:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNfmq+fVis6VbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NGM0ZGJkNmUtNDQ1Yy00NzUxLTlhMWQtYmZmNWMxN2NkMzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg125pROdt3XdsbGvwrjC715PbENgvNMUA5X6 7R0mYIAPREW/NRc/Y7Ev0piTdtJUE3hZigOjfK12EgKfwHqgxk5hLRSPx/aOnvch hYkCjkiFjnfOkxTXL7pYk0i6TTiTFoHbstNYhpdLnJd1+BodJfklcjaerwg/2blM ddIIegP3PMssfjWDpgtfnkiayiSy8zpMxnCPKTxm71bTJY6y9Bl71lJg9Mspc8Xq EPIA13u+t+ym7L2/9e2SqoaPBd/uCDsGdhyK/jnrQRGr+8UJCOpOOuBNjNEH3vSD a96zb1o/4e6FNClCJSbW4MJH92Cp6bfZeFPdwLOMJna4/+d8vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRc/7V0xzunPz380ZEOaoL4wBH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvODZkOTVjY2UtOTNhNS0z YTU3LTkzMGEtYTlhYWVjZGFjOWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKq9pmlXKrkZI73dBB49zM88Zy6dx4P4bk8H5a+T+BzY+pflYFR0lW2x agycXi1hZw9Ee9zJFT/GF50Av/+/ATy8wHkIN0k2u5atAqAzz+LXp5GZCoowwdyB +EEE6AxP6Sa3GOsmHwY8D0HodGGj7kGbYzQitfGzw14u9UU3Ssen4iHWVIUeyn5x D6Bp/FZ4u+FLmpbo1k+o1+Cjp41RULm21/MbOM7+3IZYq6ZbDheTYEiPqwQt2atq 30dokO0K3JCVWBDP0ktBSsWwxINoDU2uelFwXVvu/Myqp87tmZpOIwVoAkQ6D8JL 24BF0tFJ4fV5ymizqTrEGoE51J7FCeQ= -----END CERTIFICATE-----Generated at Tue Jul 21 13:23:13 2026 by rpki-client