$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a3796f5c-d560-3ed2-b2b1-b7e0af94121e.roa File: a3796f5c-d560-3ed2-b2b1-b7e0af94121e.roa (raw, json) Hash identifier: jpKRrNb3AY6QR9VeVao1aYKHTFBy3Vfddx68fcykcvE= Subject key identifier: 36:3F:C2:BB:CC:34:7D:C4:EF:74:F6:96:F3:6F:19:4E:57:5F:15:39 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DB86B8BF71FDF2DC40A0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a3796f5c-d560-3ed2-b2b1-b7e0af94121e.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:db:86:b8:bf:71:fd:f2:dc:40:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=2919c783-c79c-4fbc-9948-f503f87dbab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:2d:15:d8:94:11:ac:7d:f3:ff:c9:fa:d2: c9:2d:a0:6e:df:28:4f:f2:2d:c4:94:4f:4e:06:bc: 49:52:88:36:d2:c3:7a:19:65:89:1b:8c:63:b6:e3: cb:f4:fa:e7:d4:fe:16:ad:57:b2:52:4e:21:fb:bc: 47:a7:d9:d3:29:9f:d3:2d:0b:1b:85:91:ae:fa:74: 83:cc:b9:9f:d7:76:2e:7b:45:cb:0d:d5:c3:f5:29: 6a:8e:d1:3c:fa:98:37:f0:11:49:a3:22:fe:c6:86: 50:0e:1c:24:5c:54:71:a0:ac:4f:20:a7:1b:50:07: be:1d:8c:07:0b:5b:2b:e1:db:a5:e8:8d:df:7b:61: 44:6e:92:fe:1d:7e:01:64:95:46:c5:07:07:7a:cb: e8:15:4d:8c:a1:31:c0:fd:ba:79:f3:53:08:90:ea: 08:bd:70:ac:56:f5:88:52:53:51:13:ae:1e:61:76: 29:a9:3b:cd:e5:87:26:c0:08:73:47:a6:75:3f:a8: 69:05:fc:57:ff:2a:41:27:2a:5d:3e:8b:7c:22:07: 11:bc:ef:2e:fa:5f:b1:52:d7:02:fc:af:d5:d0:00: 09:b3:17:13:df:06:1a:14:09:ae:00:3e:2c:9e:6f: dc:ce:f1:f6:3d:17:17:05:8b:fb:09:6a:7b:d8:3f: fa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3F:C2:BB:CC:34:7D:C4:EF:74:F6:96:F3:6F:19:4E:57:5F:15:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a3796f5c-d560-3ed2-b2b1-b7e0af94121e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:80:21:00:7b:95:79:f3:1a:1e:9b:f3:9e:0c:5b:ed:21:d2: cd:67:37:ae:a0:3a:05:8a:68:1c:e4:d7:00:a1:26:bd:6f:99: 50:6a:d8:a1:5d:92:4f:b3:31:02:19:68:bc:b7:db:ec:ca:3b: 76:a2:1b:71:e5:b6:68:5a:7e:af:64:34:00:5d:e8:68:09:de: d2:18:76:b9:c5:c6:cb:80:fb:22:f3:63:9f:71:4a:bc:9f:45: 84:a6:61:cc:51:32:bf:67:72:8c:3b:95:73:de:d9:6a:d2:68: 00:63:01:f4:8b:39:39:18:bb:91:1a:fc:b3:31:71:cf:64:96: b4:de:ca:75:b3:73:8e:6d:61:3f:57:78:73:cb:5e:dd:84:f5: 8a:b9:07:c8:a9:d5:ac:d1:d2:d6:c7:75:d0:04:01:24:99:05: 9b:d8:0f:bf:e4:e6:d5:67:bf:35:31:c8:fe:23:51:95:1c:b3: 37:1f:e3:e8:35:1f:45:56:eb:7b:bd:bf:0c:5c:6f:08:86:f1: b9:db:72:8d:af:c4:f2:3c:d6:38:36:f3:2e:5a:01:ec:cc:fc: 2e:c2:ec:79:47:7d:9f:70:2d:bc:d7:b2:ee:d1:af:32:77:b2: ec:c3:45:e6:df:d9:60:51:f7:e8:46:3e:56:c3:af:1a:4d:c8: 86:ea:35:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNuGuL9x/fLcQKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MjkxOWM3ODMtYzc5Yy00ZmJjLTk5NDgtZjUwM2Y4N2RiYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqAtFdiUEax98//J+tLJLaBu3yhP8i3ElE9O BrxJUog20sN6GWWJG4xjtuPL9Prn1P4WrVeyUk4h+7xHp9nTKZ/TLQsbhZGu+nSD zLmf13Yue0XLDdXD9SlqjtE8+pg38BFJoyL+xoZQDhwkXFRxoKxPIKcbUAe+HYwH C1sr4dul6I3fe2FEbpL+HX4BZJVGxQcHesvoFU2MoTHA/bp581MIkOoIvXCsVvWI UlNRE64eYXYpqTvN5YcmwAhzR6Z1P6hpBfxX/ypBJypdPot8IgcRvO8u+l+xUtcC /K/V0AAJsxcT3wYaFAmuAD4snm/czvH2PRcXBYv7CWp72D/6aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDY/wrvMNH3E73T2lvNvGU5XXxU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTM3OTZmNWMtZDU2MC0z ZWQyLWIyYjEtYjdlMGFmOTQxMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWAIQB7lXnzGh6b854MW+0h0s1nN66gOgWKaBzk1wChJr1vmVBq2KFd kk+zMQIZaLy32+zKO3aiG3Hltmhafq9kNABd6GgJ3tIYdrnFxsuA+yLzY59xSryf RYSmYcxRMr9ncow7lXPe2WrSaABjAfSLOTkYu5Ea/LMxcc9klrTeynWzc45tYT9X eHPLXt2E9Yq5B8ip1azR0tbHddAEASSZBZvYD7/k5tVnvzUxyP4jUZUcszcf4+g1 H0VW63u9vwxcbwiG8bnbco2vxPI81jg28y5aAezM/C7C7HlHfZ9wLbzXsu7RrzJ3 suzDRebf2WBR9+hGPlbDrxpNyIbqNbo= -----END CERTIFICATE-----Generated at Tue Jul 21 01:40:02 2026 by rpki-client