$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9331f381-34ae-3fb8-a7a2-81f713dcb73d.roa File: 9331f381-34ae-3fb8-a7a2-81f713dcb73d.roa (raw, json) Hash identifier: 8821DsTUWB0Yj0gHFGlzxHaPZvoSs0f7XxubCWFlp78= Subject key identifier: 8C:2C:5B:0F:17:89:E2:86:FB:5C:38:FE:00:08:B6:76:54:FC:D8:2A Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D7BFA3238876E3CB0400 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9331f381-34ae-3fb8-a7a2-81f713dcb73d.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d7:bf:a3:23:88:76:e3:cb:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=db397962-6b92-41eb-bc26-971b975dec0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7b:60:ec:b0:14:70:86:96:6f:df:59:33:56: 15:28:d6:59:a6:d2:24:fd:cb:2e:9a:a7:cd:46:fa: b5:c9:51:51:3c:9d:3c:49:04:1c:1e:00:7d:71:89: c5:5d:62:62:36:83:8c:45:91:21:f1:b6:97:77:64: 58:6b:f2:c9:24:05:70:0d:d8:26:ff:8c:6c:88:e2: 3a:6d:b2:64:32:b8:a7:23:22:de:41:54:7d:ea:53: f3:9c:86:13:34:58:b6:c0:a2:6e:23:f0:26:71:6b: b3:93:ff:0d:27:89:a1:e5:13:90:7f:25:62:9f:9f: 6c:73:5f:71:e2:bf:67:23:e9:22:62:a9:25:2b:c2: 36:49:e3:d7:0c:72:f3:f3:ac:6c:0e:e9:06:ac:d0: f4:64:6d:5b:cb:af:e1:59:ff:92:dd:a0:da:79:81: d8:da:e3:d8:8f:d1:b9:b3:a3:41:af:e7:a7:f6:bf: 81:f4:3f:eb:bc:96:23:3f:73:9d:6b:b9:e8:32:51: 0e:59:10:4e:29:14:ce:ec:5e:b8:93:ff:23:39:4b: e0:c3:e1:e0:25:d1:d1:56:43:b2:a3:3d:9d:36:b3: 3e:06:93:24:16:87:cd:96:08:bb:77:04:5f:03:08: 7f:45:f6:b8:c1:d8:f0:39:df:46:84:38:87:d6:24: 0c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2C:5B:0F:17:89:E2:86:FB:5C:38:FE:00:08:B6:76:54:FC:D8:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9331f381-34ae-3fb8-a7a2-81f713dcb73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e7:2b:27:f5:38:10:05:42:03:74:ed:9b:5e:4a:4e:b2:c2: 9b:d7:f4:17:6c:e1:6d:4e:f5:f9:4e:3d:99:22:4c:d7:0b:60: 9a:3a:6a:d5:53:48:c1:79:20:dc:f2:61:ed:68:2a:03:cc:2e: d9:c5:6d:98:86:45:7b:a1:1f:b1:41:79:c8:fb:94:82:08:ee: a4:d0:b2:6e:e2:cb:3e:5c:99:14:10:36:7b:54:bf:77:33:89: d0:a1:00:d7:1b:43:bd:24:82:4e:65:e3:1f:2d:71:ab:dc:86: f5:64:4f:b0:ed:41:80:25:19:8b:7e:38:4c:e1:81:90:8b:9a: da:c3:f8:5b:18:88:b2:a7:07:2d:3e:08:df:05:10:71:d3:96: d7:59:71:da:4c:58:ae:20:27:a2:49:19:af:fc:f4:53:8b:73: 6f:7c:16:e0:39:71:a4:c8:da:9f:8f:4b:be:44:98:b3:3e:dc: 1e:d1:f0:5a:9c:00:8d:b7:69:62:a1:a3:b6:39:82:cc:a3:2f: 21:41:20:26:17:97:a4:5b:c8:6a:36:72:3d:3c:1e:71:bf:64: 31:6c:f4:28:2e:aa:1c:44:39:a3:bb:e8:7a:7b:77:6b:63:91: fb:10:99:85:ab:a6:f5:61:69:79:18:f8:95:81:99:b1:b7:c0: 51:1a:8a:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNe/oyOIduPLBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZGIzOTc5NjItNmI5Mi00MWViLWJjMjYtOTcxYjk3NWRlYzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHtg7LAUcIaWb99ZM1YVKNZZptIk/csumqfN Rvq1yVFRPJ08SQQcHgB9cYnFXWJiNoOMRZEh8baXd2RYa/LJJAVwDdgm/4xsiOI6 bbJkMrinIyLeQVR96lPznIYTNFi2wKJuI/AmcWuzk/8NJ4mh5ROQfyVin59sc19x 4r9nI+kiYqklK8I2SePXDHLz86xsDukGrND0ZG1by6/hWf+S3aDaeYHY2uPYj9G5 s6NBr+en9r+B9D/rvJYjP3Oda7noMlEOWRBOKRTO7F64k/8jOUvgw+HgJdHRVkOy oz2dNrM+BpMkFofNlgi7dwRfAwh/Rfa4wdjwOd9GhDiH1iQMtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwsWw8XieKG+1w4/gAItnZU/NgqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOTMzMWYzODEtMzRhZS0z ZmI4LWE3YTItODFmNzEzZGNiNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvnKyf1OBAFQgN07ZteSk6ywpvX9Bds4W1O9flOPZkiTNcLYJo6atVT SMF5INzyYe1oKgPMLtnFbZiGRXuhH7FBecj7lIII7qTQsm7iyz5cmRQQNntUv3cz idChANcbQ70kgk5l4x8tcavchvVkT7DtQYAlGYt+OEzhgZCLmtrD+FsYiLKnBy0+ CN8FEHHTltdZcdpMWK4gJ6JJGa/89FOLc298FuA5caTI2p+PS75EmLM+3B7R8Fqc AI23aWKho7Y5gsyjLyFBICYXl6RbyGo2cj08HnG/ZDFs9CguqhxEOaO76Hp7d2tj kfsQmYWrpvVhaXkY+JWBmbG3wFEainM= -----END CERTIFICATE-----Generated at Tue Jul 21 13:23:55 2026 by rpki-client