$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9f03d0c3-fc9d-35c8-a52f-c6c51c838608.roa File: 9f03d0c3-fc9d-35c8-a52f-c6c51c838608.roa (raw, json) Hash identifier: +vJKIiXzCTSwNh4Ntxfw7gZPWJaj/feBZixeda/Glew= Subject key identifier: 3C:F2:59:63:96:3A:FE:10:42:B3:72:28:27:AC:39:87:5C:BE:D6:51 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7634F5D155B43CB74CB52D00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9f03d0c3-fc9d-35c8-a52f-c6c51c838608.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:f5:d1:55:b4:3c:b7:4c:b5:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=5e3a197a-d817-44ee-9203-2914d08cb85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cb:f9:fe:26:ea:97:52:4a:25:f0:fc:ed:70: be:12:24:c6:b8:2c:8d:c9:5f:d0:55:7f:d0:e1:56: 61:18:5c:fb:c1:66:2f:8a:61:18:d8:f7:04:44:d2: 8d:f9:a6:7c:c3:d3:3e:d1:0a:3f:33:09:91:51:a9: 38:d7:44:ba:74:e2:72:29:01:35:e7:83:26:63:df: 26:71:e2:81:37:3e:d4:2e:a1:c9:07:1d:e0:a3:b5: b8:44:50:bf:6d:8d:0b:38:9c:7a:83:d6:6f:02:ac: 67:a9:61:1a:c8:87:15:41:d1:f6:e9:be:e7:85:2e: d3:b4:60:f1:c1:fa:4c:38:7d:02:2a:0a:e1:59:c6: 9a:b4:91:56:f6:20:2f:96:1e:00:ef:ea:15:d7:76: ce:74:22:6f:e2:85:ec:e4:6b:c8:33:e7:42:84:19: 6f:dd:0a:01:34:0d:1b:2a:e7:c6:05:c9:8d:b0:a7: 89:cc:18:e2:45:b5:76:72:41:e2:20:e2:c3:14:3c: 32:4a:49:45:a1:d6:99:41:87:fc:88:b4:32:29:c6: b0:56:83:9e:d2:2c:68:62:67:e9:7a:ab:98:ae:c1: 1d:dc:36:c4:93:c8:e4:4a:8c:0a:88:f7:f2:9e:40: 44:09:f5:5a:f8:4b:7c:26:73:d6:9a:d5:0a:6c:91: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F2:59:63:96:3A:FE:10:42:B3:72:28:27:AC:39:87:5C:BE:D6:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9f03d0c3-fc9d-35c8-a52f-c6c51c838608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:59:1f:72:ec:76:7b:68:3f:6f:4d:c8:78:ce:19:1b:a6:7c: 06:29:a5:0b:99:d9:18:70:d9:96:8b:87:0f:86:45:06:04:8a: ef:fc:e7:0f:5b:e2:42:32:6d:f1:d8:13:1f:35:6f:2c:8a:dd: 60:6b:36:b1:9f:a0:6d:69:82:2e:59:6a:72:58:a6:b8:e8:89: a1:1b:9b:00:79:74:3a:06:cf:11:96:0f:ac:7f:2d:86:90:21: ff:a9:99:d5:aa:11:78:f0:17:73:35:36:b2:38:7d:32:f7:3a: 7c:24:f7:fb:33:13:7e:42:a6:2d:bc:b0:d1:fb:e1:8b:e4:e2: 94:cd:85:ce:bc:87:fc:ea:6e:7e:79:71:6a:e5:70:af:f9:b5: ce:ff:2f:26:ca:f1:86:72:76:46:cd:c9:06:d6:8e:92:0f:36: 74:ec:8a:b9:db:60:dc:b9:77:0b:a0:26:c9:14:e0:aa:2b:f6: 16:65:68:a5:0e:a8:48:20:d9:fb:32:8d:24:85:92:31:51:93: 9d:9e:46:a9:f6:54:7d:41:45:6b:bb:06:55:fb:07:91:e6:b8: 75:87:45:16:86:0f:65:91:03:1b:0f:32:19:f5:55:e9:de:53: 9b:2f:3a:2c:49:b0:3b:d5:95:64:86:aa:7b:37:f1:ae:b8:f7: a1:a9:4a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NPXRVbQ8t0y1LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk NWUzYTE5N2EtZDgxNy00NGVlLTkyMDMtMjkxNGQwOGNiODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMv5/ibql1JKJfD87XC+EiTGuCyNyV/QVX/Q 4VZhGFz7wWYvimEY2PcERNKN+aZ8w9M+0Qo/MwmRUak410S6dOJyKQE154MmY98m ceKBNz7ULqHJBx3go7W4RFC/bY0LOJx6g9ZvAqxnqWEayIcVQdH26b7nhS7TtGDx wfpMOH0CKgrhWcaatJFW9iAvlh4A7+oV13bOdCJv4oXs5GvIM+dChBlv3QoBNA0b KufGBcmNsKeJzBjiRbV2ckHiIOLDFDwySklFodaZQYf8iLQyKcawVoOe0ixoYmfp equYrsEd3DbEk8jkSowKiPfynkBECfVa+Et8JnPWmtUKbJEjjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzyWWOWOv4QQrNyKCesOYdcvtZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOWYwM2QwYzMtZmM5ZC0z NWM4LWE1MmYtYzZjNTFjODM4NjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFZH3LsdntoP29NyHjOGRumfAYppQuZ2Rhw2ZaLhw+GRQYEiu/85w9b 4kIybfHYEx81byyK3WBrNrGfoG1pgi5ZanJYprjoiaEbmwB5dDoGzxGWD6x/LYaQ If+pmdWqEXjwF3M1NrI4fTL3Onwk9/szE35Cpi28sNH74Yvk4pTNhc68h/zqbn55 cWrlcK/5tc7/LybK8YZydkbNyQbWjpIPNnTsirnbYNy5dwugJskU4Kor9hZlaKUO qEgg2fsyjSSFkjFRk52eRqn2VH1BRWu7BlX7B5HmuHWHRRaGD2WRAxsPMhn1Vene U5svOixJsDvVlWSGqns38a6496GpSig= -----END CERTIFICATE-----Generated at Tue Jul 21 01:41:12 2026 by rpki-client