$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9162e2da-99f7-38b5-b7ee-c4c8931b73b3.roa File: 9162e2da-99f7-38b5-b7ee-c4c8931b73b3.roa (raw, json) Hash identifier: KRC0gvz0CM12U2Qp2algWvUEBGiC+CQagOKH3bwXmRs= Subject key identifier: F1:5D:0D:E7:3C:9A:2A:05:74:B7:D0:07:BF:F2:C2:6C:54:18:E2:93 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DB79B846254FD82B8CC0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9162e2da-99f7-38b5-b7ee-c4c8931b73b3.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:db:79:b8:46:25:4f:d8:2b:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=2ab72a71-85a7-428a-80fd-cb9447039185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:5e:e2:ee:0f:3a:60:e5:e2:a2:ec:53:65:d0: ac:f2:8c:22:c1:36:69:99:53:4a:1a:0a:94:63:d5: 62:8c:5c:3d:2b:e3:2f:a1:2b:17:81:5b:be:19:7c: 4d:7c:a7:60:7c:48:ce:1a:c1:f3:bb:da:8e:f1:26: c5:0e:10:9f:d6:b7:71:7b:1e:b5:15:1e:f7:fe:49: 1c:e8:cc:86:29:fc:fb:3b:b9:22:6b:ff:3c:ff:b7: 0a:19:d2:ae:c0:d5:f3:79:95:e5:4b:a3:ff:d4:97: 6e:36:8c:47:d5:4c:9f:e3:b3:0a:56:a9:7b:35:f9: 74:0d:f6:1d:07:b8:db:58:83:3f:14:83:ee:ac:8a: 51:46:93:48:29:f1:36:b1:ef:0e:a0:29:7b:4c:24: d0:05:60:e6:a7:ea:65:53:f2:85:07:3f:8e:7c:5c: ee:77:7b:4b:70:53:5e:c7:e8:1f:c9:57:fe:20:12: 03:41:2f:28:e0:86:75:bd:37:d7:f8:b8:c0:df:5c: cc:81:4f:bc:b8:34:39:50:c4:20:67:0c:6a:92:f1: 65:61:fc:47:d5:72:cd:3a:11:2a:91:70:96:cb:c2: 3f:78:7a:9b:a3:a0:6b:ce:a0:94:7b:44:0c:64:1a: 22:ea:c0:a2:f4:97:20:ab:14:4b:9e:98:d8:1f:9f: 6a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5D:0D:E7:3C:9A:2A:05:74:B7:D0:07:BF:F2:C2:6C:54:18:E2:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9162e2da-99f7-38b5-b7ee-c4c8931b73b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:3e:67:9e:78:84:1e:45:6c:92:ca:4a:72:0d:cb:af:5a:1c: 64:cc:7c:8e:31:87:02:e4:77:d0:ba:a6:ea:42:e6:77:56:3a: 29:fb:44:97:5b:83:54:00:3b:6e:cc:1c:71:d3:43:25:f5:3a: a7:f4:98:6f:4c:45:dc:08:93:56:11:e5:9b:c4:cb:9c:1b:2a: d8:75:5c:33:2b:85:00:0c:e2:4e:c2:41:34:e8:c2:ae:c0:cd: 55:41:d9:13:9e:27:a2:a1:e1:11:97:ec:bb:c3:dc:34:62:d4: 2a:00:ee:34:89:89:e7:a2:40:42:5c:3f:9e:02:ec:23:d1:56: 76:f3:1e:69:7f:6d:ad:31:b7:30:d3:41:c6:42:01:28:2f:9d: de:db:1f:41:32:9a:51:08:b2:9f:f9:f4:6e:22:2f:18:d6:4d: 3d:24:d7:d9:1e:34:65:22:6a:49:95:7c:5a:86:1b:0d:13:70: fe:2f:c0:6a:a2:44:4c:37:e8:30:44:a1:01:f6:d1:9f:e4:11: b3:b0:74:53:0f:5a:54:a1:89:e3:6a:80:a5:c6:47:33:51:9b: e3:a1:0b:ef:79:aa:d0:c5:06:04:79:56:13:7d:0b:a2:6b:e8: ba:1b:71:62:d6:bf:25:e1:e9:e9:8b:b0:f2:e8:c9:e6:c7:59: c5:72:ff:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNt5uEYlT9grjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MmFiNzJhNzEtODVhNy00MjhhLTgwZmQtY2I5NDQ3MDM5MTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9V7i7g86YOXiouxTZdCs8owiwTZpmVNKGgqU Y9VijFw9K+MvoSsXgVu+GXxNfKdgfEjOGsHzu9qO8SbFDhCf1rdxex61FR73/kkc 6MyGKfz7O7kia/88/7cKGdKuwNXzeZXlS6P/1JduNoxH1Uyf47MKVql7Nfl0DfYd B7jbWIM/FIPurIpRRpNIKfE2se8OoCl7TCTQBWDmp+plU/KFBz+OfFzud3tLcFNe x+gfyVf+IBIDQS8o4IZ1vTfX+LjA31zMgU+8uDQ5UMQgZwxqkvFlYfxH1XLNOhEq kXCWy8I/eHqbo6BrzqCUe0QMZBoi6sCi9JcgqxRLnpjYH59qUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFdDec8mioFdLfQB7/ywmxUGOKTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOTE2MmUyZGEtOTlmNy0z OGI1LWI3ZWUtYzRjODkzMWI3M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACE+Z554hB5FbJLKSnINy69aHGTMfI4xhwLkd9C6pupC5ndWOin7RJdb g1QAO27MHHHTQyX1Oqf0mG9MRdwIk1YR5ZvEy5wbKth1XDMrhQAM4k7CQTTowq7A zVVB2ROeJ6Kh4RGX7LvD3DRi1CoA7jSJieeiQEJcP54C7CPRVnbzHml/ba0xtzDT QcZCASgvnd7bH0EymlEIsp/59G4iLxjWTT0k19keNGUiakmVfFqGGw0TcP4vwGqi REw36DBEoQH20Z/kEbOwdFMPWlShieNqgKXGRzNRm+OhC+95qtDFBgR5VhN9C6Jr 6LobcWLWvyXh6emLsPLoyebHWcVy/5k= -----END CERTIFICATE-----Generated at Tue Jul 21 01:40:08 2026 by rpki-client