$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a49d0180-d5c9-3a29-8d7a-9eca74c4b314.roa File: a49d0180-d5c9-3a29-8d7a-9eca74c4b314.roa (raw, json) Hash identifier: 4zP2XB4cWTkk+EFcTT86cDTl6YDTl5qluCkkOFHj26I= Subject key identifier: 14:C3:39:99:91:91:05:0E:B2:61:11:EE:61:1D:7A:F1:DE:ED:E6:AF Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D96A4614B141A39C0100 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a49d0180-d5c9-3a29-8d7a-9eca74c4b314.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d9:6a:46:14:b1:41:a3:9c:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=193deb4e-14e2-420b-8e4f-e101ca06abba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:68:77:8c:5c:92:ea:13:c0:0c:42:30:96: f1:ae:71:41:12:50:06:e1:4b:f0:92:7a:33:c6:8e: 53:c2:c1:91:99:48:e0:80:21:a2:1d:1c:ef:31:ab: cd:ee:49:13:94:36:35:f6:13:27:63:13:15:31:f6: 4a:0c:d2:5f:c9:ca:96:7b:8c:1c:ec:42:12:7b:1c: 28:7d:6c:67:30:93:03:aa:de:18:52:91:9d:57:24: a2:d0:ff:02:69:20:0f:50:b1:be:ad:62:14:d0:bb: e8:f3:df:fe:50:b8:14:9a:91:8d:c5:60:b3:09:ee: 35:7b:f5:38:79:6b:5b:6d:80:60:f8:7f:70:d5:ed: 8f:ad:0a:a7:f8:55:12:28:ed:cf:29:85:c1:09:84: bf:a2:74:6b:5d:70:db:7a:93:90:a3:4a:51:bb:3f: b6:d3:79:83:46:e3:9e:b6:1f:1c:34:19:5b:ea:5c: 25:63:89:5f:63:b3:b7:52:52:e1:fe:9b:b1:af:fe: 44:ba:5d:81:66:3c:f3:f3:ee:7d:90:f1:af:c6:08: d8:1d:94:35:d7:98:82:00:42:0b:87:9f:b6:c7:7c: 97:91:46:79:ac:42:98:dc:34:02:78:39:e9:57:cb: 30:5d:d0:37:03:91:89:1d:5a:ae:2e:b6:a9:86:d6: 3d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C3:39:99:91:91:05:0E:B2:61:11:EE:61:1D:7A:F1:DE:ED:E6:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a49d0180-d5c9-3a29-8d7a-9eca74c4b314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:87:f2:31:fa:d7:e0:eb:ec:c8:63:ec:17:73:d4:d6:95:dd: 4a:02:a4:6a:ca:a9:a2:e0:78:6c:56:42:76:a3:ed:59:1c:e1: 0e:f2:53:cc:57:13:ac:1f:16:ae:31:07:e5:ec:b7:16:58:62: e2:8e:00:cf:62:c2:71:d9:4c:b4:02:ed:cb:4a:ca:43:88:c6: a3:46:ae:69:b5:b0:e7:b5:a2:7e:96:21:0a:3f:ae:55:3b:45: e2:a2:57:32:e3:7b:61:2f:5b:0c:59:9d:93:86:10:e3:0c:6e: 44:91:95:08:94:de:72:a2:28:aa:03:54:37:10:3e:22:33:2f: d7:15:4a:3b:26:de:86:af:97:db:af:f7:0d:cd:26:19:ae:14: d1:40:a3:f1:d9:4c:21:d1:06:b2:0f:93:6b:15:38:6d:cd:7d: fd:93:c4:b2:95:74:00:10:63:53:ea:6d:ce:00:c1:28:81:51: 1a:07:ba:94:90:31:62:f6:8e:33:30:16:26:f2:80:2b:c1:fc: 10:92:66:99:a7:2c:39:ab:26:f1:ee:24:81:0b:d7:ce:8c:5d: 0b:bd:09:b1:92:2d:bd:1d:79:9a:b3:f2:d9:c2:c6:3b:93:f4: 1d:3b:ab:81:cb:76:a8:ab:47:7e:ba:8c:62:c0:85:65:3d:30: c6:f0:63:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNlqRhSxQaOcAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MTkzZGViNGUtMTRlMi00MjBiLThlNGYtZTEwMWNhMDZhYmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkxod4xckuoTwAxCMJbxrnFBElAG4Uvwknoz xo5TwsGRmUjggCGiHRzvMavN7kkTlDY19hMnYxMVMfZKDNJfycqWe4wc7EISexwo fWxnMJMDqt4YUpGdVySi0P8CaSAPULG+rWIU0Lvo89/+ULgUmpGNxWCzCe41e/U4 eWtbbYBg+H9w1e2PrQqn+FUSKO3PKYXBCYS/onRrXXDbepOQo0pRuz+203mDRuOe th8cNBlb6lwlY4lfY7O3UlLh/puxr/5Eul2BZjzz8+59kPGvxgjYHZQ115iCAEIL h5+2x3yXkUZ5rEKY3DQCeDnpV8swXdA3A5GJHVquLraphtY9uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTDOZmRkQUOsmER7mEdevHe7eavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTQ5ZDAxODAtZDVjOS0z YTI5LThkN2EtOWVjYTc0YzRiMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6H8jH61+Dr7Mhj7Bdz1NaV3UoCpGrKqaLgeGxWQnaj7Vkc4Q7yU8xX E6wfFq4xB+XstxZYYuKOAM9iwnHZTLQC7ctKykOIxqNGrmm1sOe1on6WIQo/rlU7 ReKiVzLje2EvWwxZnZOGEOMMbkSRlQiU3nKiKKoDVDcQPiIzL9cVSjsm3oavl9uv 9w3NJhmuFNFAo/HZTCHRBrIPk2sVOG3Nff2TxLKVdAAQY1Pqbc4AwSiBURoHupSQ MWL2jjMwFibygCvB/BCSZpmnLDmrJvHuJIEL186MXQu9CbGSLb0deZqz8tnCxjuT 9B07q4HLdqirR366jGLAhWU9MMbwY1o= -----END CERTIFICATE-----Generated at Tue Jul 21 01:40:03 2026 by rpki-client