$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8cc0e971-e4e3-3871-af4c-749afe525f46.roa File: 8cc0e971-e4e3-3871-af4c-749afe525f46.roa (raw, json) Hash identifier: j7IjQWe/F3CJkT7CTtgS5FxONvRyF3w71jLdjzu9o9I= Subject key identifier: F8:ED:37:E6:E9:FD:83:A4:13:47:5B:0D:1C:9C:4A:E0:38:09:36:06 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D943BEDA75005F1CDC90 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8cc0e971-e4e3-3871-af4c-749afe525f46.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d9:43:be:da:75:00:5f:1c:dc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=42ea434b-f44f-48ca-b206-03b5c4a295c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d6:25:cc:10:39:ae:4c:6c:32:7b:f5:05:a6: f0:38:a6:68:60:6d:89:5b:42:9a:73:78:d4:21:42: 29:f9:1d:bc:73:8b:10:16:25:f9:72:8f:8e:13:d9: 53:d8:59:cf:76:bd:e6:8f:e3:b0:a2:9f:dd:19:b1: 74:94:f6:c0:78:6f:3e:3d:b3:c8:e4:e3:0e:b4:95: 41:be:cd:78:33:75:18:2a:e1:ce:64:fd:9c:22:14: 5a:8a:40:a3:46:65:3f:13:89:ad:01:ed:f5:65:f5: 8a:e4:fe:c7:74:2a:37:3e:9a:e8:af:8f:e3:95:48: d9:99:b3:33:2b:1e:ba:11:d0:40:e8:a2:81:40:f5: d4:25:e4:61:a6:b5:8e:c9:8a:39:93:be:f7:89:d4: 55:74:d7:0b:e8:1f:1c:2e:f5:be:6b:67:ff:2f:9e: 5b:ab:ae:5e:ab:09:39:70:19:a8:fe:a1:8a:af:95: 92:85:d5:ec:6d:c3:f0:ad:1a:5a:f2:c9:36:59:6e: 82:ac:c4:67:05:53:24:2d:34:5a:a2:5e:64:d5:ab: e7:2d:8d:75:92:a9:ee:05:2f:e6:3f:8b:83:21:c8: e8:55:46:49:8a:c0:65:ba:25:30:c3:bf:60:bc:a0: ca:86:a4:a1:34:95:02:a9:95:02:c6:44:98:0b:b0: 23:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:ED:37:E6:E9:FD:83:A4:13:47:5B:0D:1C:9C:4A:E0:38:09:36:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8cc0e971-e4e3-3871-af4c-749afe525f46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:60:ac:fc:88:c6:8d:3c:c2:64:a4:68:46:39:86:26:54:ab: 02:3d:84:cb:a8:4a:20:40:ca:a0:b4:c9:3b:42:64:4b:4d:98: 99:e3:13:aa:62:e2:b1:31:1e:6e:02:5c:96:e7:27:eb:ee:0f: eb:23:0b:dd:a2:ce:08:ea:f2:e4:df:76:eb:83:42:d8:b3:2c: 8c:dc:0b:03:58:cb:35:2f:76:c8:08:ac:6d:f8:2b:67:ec:8f: 2a:9d:55:1d:4d:6c:69:3d:cb:c0:ce:a2:ec:7c:9a:19:07:da: 91:71:55:15:3b:ab:d7:e5:ff:72:6a:a5:35:04:a6:ee:6e:0f: ca:f7:d6:1c:16:88:69:c4:9f:5c:54:b0:91:76:f6:9c:cc:1f: 8a:c8:5d:7b:7b:58:50:5e:93:3e:b4:b2:9a:8c:ad:13:4a:f8: 62:fd:52:e1:14:ba:d2:b5:b3:7f:08:0a:9c:c0:62:45:e9:7a: 12:74:d5:4e:d7:8a:7d:4f:ea:8f:37:a0:90:9a:87:3c:89:fb: e7:a7:29:c9:2f:98:1d:b6:23:5f:ed:e0:9c:d5:a3:ea:f7:91: 2a:4c:73:48:a3:39:47:1c:97:6e:99:6d:8e:f1:f6:c9:86:48: 7a:97:86:04:0a:62:f7:ec:be:89:33:62:9e:e7:d0:67:3d:6e: df:4a:59:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNlDvtp1AF8c3JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NDJlYTQzNGItZjQ0Zi00OGNhLWIyMDYtMDNiNWM0YTI5NWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19YlzBA5rkxsMnv1BabwOKZoYG2JW0Kac3jU IUIp+R28c4sQFiX5co+OE9lT2FnPdr3mj+Owop/dGbF0lPbAeG8+PbPI5OMOtJVB vs14M3UYKuHOZP2cIhRaikCjRmU/E4mtAe31ZfWK5P7HdCo3Ppror4/jlUjZmbMz Kx66EdBA6KKBQPXUJeRhprWOyYo5k773idRVdNcL6B8cLvW+a2f/L55bq65eqwk5 cBmo/qGKr5WShdXsbcPwrRpa8sk2WW6CrMRnBVMkLTRaol5k1avnLY11kqnuBS/m P4uDIcjoVUZJisBluiUww79gvKDKhqShNJUCqZUCxkSYC7Aj4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjtN+bp/YOkE0dbDRycSuA4CTYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOGNjMGU5NzEtZTRlMy0z ODcxLWFmNGMtNzQ5YWZlNTI1ZjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdgrPyIxo08wmSkaEY5hiZUqwI9hMuoSiBAyqC0yTtCZEtNmJnjE6pi 4rExHm4CXJbnJ+vuD+sjC92izgjq8uTfduuDQtizLIzcCwNYyzUvdsgIrG34K2fs jyqdVR1NbGk9y8DOoux8mhkH2pFxVRU7q9fl/3JqpTUEpu5uD8r31hwWiGnEn1xU sJF29pzMH4rIXXt7WFBekz60spqMrRNK+GL9UuEUutK1s38ICpzAYkXpehJ01U7X in1P6o83oJCahzyJ++enKckvmB22I1/t4JzVo+r3kSpMc0ijOUccl26ZbY7x9smG SHqXhgQKYvfsvokzYp7n0Gc9bt9KWS0= -----END CERTIFICATE-----Generated at Tue Jul 21 01:39:24 2026 by rpki-client