$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a5f393d2-3dfc-365d-b786-29802417a9a8.roa File: a5f393d2-3dfc-365d-b786-29802417a9a8.roa (raw, json) Hash identifier: jHQNg0Snmups3oBnU6ULP5mBNfTlaRB9pUNenMuBEGc= Subject key identifier: E7:4C:6F:A8:70:AB:05:C9:8F:03:89:CA:AC:64:36:F8:1A:86:A5:D6 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D6E1E350B4D17D6B0C50 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a5f393d2-3dfc-365d-b786-29802417a9a8.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d6:e1:e3:50:b4:d1:7d:6b:0c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=89b3d49e-3bc5-493c-a4e0-7756b55939de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:91:16:e6:2b:83:17:15:89:e2:21:4c:dc:58: 86:bc:9a:80:af:41:89:55:50:8f:10:4d:2f:cf:5f: 36:09:60:ce:0e:53:b2:0b:da:21:b9:b5:c4:47:d0: 55:f7:68:3b:ef:13:b5:ee:c1:f7:37:1a:52:dd:17: e6:9b:3f:83:98:2d:5a:2b:c3:ba:b6:1f:c3:ef:ca: a9:f5:0c:d4:ee:5e:39:58:5a:dd:bd:c4:ae:29:ce: 25:a2:12:da:54:16:c3:0e:c4:81:2f:69:8e:ce:df: d2:5f:b4:d3:13:29:27:e0:f3:86:03:ce:7a:48:3a: a9:e6:54:c4:24:4c:af:60:a6:7d:0a:8d:07:56:e7: a4:9f:3f:01:d0:be:19:b3:ce:80:57:d0:2a:b9:9d: 8c:b3:f3:d5:e7:ba:70:7c:5e:5f:33:5d:0c:0b:be: e5:57:0e:3d:a5:63:e1:04:ab:54:db:b2:8e:bf:49: ed:52:49:b2:3d:be:2d:ed:38:d7:39:bd:6a:1b:4a: c4:00:88:eb:74:97:56:ed:65:d3:e2:e8:35:e1:d6: c3:e8:2b:cc:a5:1b:8a:04:7a:22:23:3e:9c:a0:82: 96:30:9c:b4:6a:db:31:ff:2b:f7:55:b9:20:a5:94: 34:9c:32:b8:12:c0:03:c9:32:80:c2:46:df:1f:d9: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4C:6F:A8:70:AB:05:C9:8F:03:89:CA:AC:64:36:F8:1A:86:A5:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a5f393d2-3dfc-365d-b786-29802417a9a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e0:7c:f7:06:5f:a5:af:ef:e7:28:92:bb:6d:52:d5:5c:8e: b1:6f:29:54:71:0f:cc:f0:23:e2:e1:7c:bd:d6:63:51:e2:6c: 63:f3:f4:7c:8f:fe:a1:cb:b4:0d:8e:95:23:e1:0a:e3:5b:06: 8d:50:89:25:dc:8c:22:f0:a6:70:df:22:ac:01:74:cb:b3:58: 4c:12:30:a6:52:fe:a7:a4:a2:7c:6f:8b:8b:b1:5a:84:92:d6: b5:8a:1c:f0:96:f5:a4:cc:29:e6:22:15:49:4f:e7:e0:b3:3b: 6c:07:71:ca:fa:ff:98:3a:c4:fe:6c:e7:08:84:d4:87:94:2c: 28:ce:77:a9:b5:53:f2:b1:46:a4:25:78:37:2a:12:8c:ff:39: d1:89:da:8a:97:d4:4b:97:ab:95:ce:bc:6b:a5:01:ac:43:79: 4a:0d:73:e1:0c:40:1d:a2:16:4c:6f:7d:de:ae:b7:c0:b4:e2: 64:32:95:e0:b3:8c:a7:99:77:c9:f6:f7:38:d0:5d:77:24:f1: 1d:b6:af:72:90:fb:96:c0:7d:f3:86:26:75:a1:1f:64:66:d5: 6a:c6:8f:85:03:9a:d4:e6:99:51:5d:a5:52:ca:e3:b3:e5:2f: 01:69:20:90:d2:23:6f:fd:d4:6e:24:24:d6:4a:5f:42:04:7e: 1b:a7:8f:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNbh41C00X1rDFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ODliM2Q0OWUtM2JjNS00OTNjLWE0ZTAtNzc1NmI1NTkzOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZEW5iuDFxWJ4iFM3FiGvJqAr0GJVVCPEE0v z182CWDODlOyC9ohubXER9BV92g77xO17sH3NxpS3Rfmmz+DmC1aK8O6th/D78qp 9QzU7l45WFrdvcSuKc4lohLaVBbDDsSBL2mOzt/SX7TTEykn4POGA856SDqp5lTE JEyvYKZ9Co0HVueknz8B0L4Zs86AV9AquZ2Ms/PV57pwfF5fM10MC77lVw49pWPh BKtU27KOv0ntUkmyPb4t7TjXOb1qG0rEAIjrdJdW7WXT4ug14dbD6CvMpRuKBHoi Iz6coIKWMJy0atsx/yv3VbkgpZQ0nDK4EsADyTKAwkbfH9mS7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdMb6hwqwXJjwOJyqxkNvgahqXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTVmMzkzZDItM2RmYy0z NjVkLWI3ODYtMjk4MDI0MTdhOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBClMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHgfPcGX6Wv7+cokrttUtVcjrFvKVRxD8zwI+LhfL3WY1HibGPz9HyP /qHLtA2OlSPhCuNbBo1QiSXcjCLwpnDfIqwBdMuzWEwSMKZS/qekonxvi4uxWoSS 1rWKHPCW9aTMKeYiFUlP5+CzO2wHccr6/5g6xP5s5wiE1IeULCjOd6m1U/KxRqQl eDcqEoz/OdGJ2oqX1EuXq5XOvGulAaxDeUoNc+EMQB2iFkxvfd6ut8C04mQyleCz jKeZd8n29zjQXXck8R22r3KQ+5bAffOGJnWhH2Rm1WrGj4UDmtTmmVFdpVLK47Pl LwFpIJDSI2/91G4kJNZKX0IEfhunj28= -----END CERTIFICATE-----Generated at Tue Jul 21 13:23:07 2026 by rpki-client