$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a907043d-8870-3f2e-966e-1be6a52817cc.roa File: a907043d-8870-3f2e-966e-1be6a52817cc.roa (raw, json) Hash identifier: HC2voDPBtUyTU0xso1b5D1kzvnP7dXEFjFWgbVtD6Xk= Subject key identifier: A3:B9:5A:E1:6F:F5:8A:7B:5D:2A:DF:6F:7C:F3:7A:58:82:13:44:89 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DAE75F8CB27E48903480 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a907043d-8870-3f2e-966e-1be6a52817cc.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:da:e7:5f:8c:b2:7e:48:90:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=67d516ce-967b-492b-a568-a2887991fcbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:88:8e:c3:a6:ed:ae:4a:75:11:6f:a1:97: 10:31:14:b3:10:00:d9:4f:d6:bc:f9:d0:de:f3:50: ca:bd:fe:f9:ab:58:ff:89:28:f1:41:83:4e:be:53: 92:85:cb:6d:9b:ee:05:ef:f1:ab:eb:e9:15:29:02: 56:5e:b5:d3:18:47:68:db:d7:31:cd:2d:94:a0:f8: 74:bb:5f:d6:5c:23:3c:5d:8f:66:ba:15:5e:35:62: 58:c9:42:94:6a:0f:7d:35:35:6f:0f:e3:31:61:9a: b3:88:a3:c9:9b:90:a0:af:11:9e:31:db:56:9b:e5: 03:3f:04:a0:8b:d9:07:c7:7c:79:ac:bc:1e:ce:ef: 11:ac:b7:1d:72:20:b9:bd:44:e5:28:b1:70:8c:17: 00:dd:16:c5:dd:bf:7b:83:35:da:96:c0:96:b0:bc: ba:fd:d6:f8:d8:c2:9a:07:8e:76:89:76:d5:bf:6f: 8a:4b:e1:da:e1:7e:08:54:c0:d6:fa:a7:61:0d:51: 10:57:e9:9a:de:e8:e7:e3:f8:13:87:6b:ee:25:a4: 83:0d:16:b5:28:1c:de:3c:17:de:26:f8:96:0c:8d: 40:ab:c7:ea:fe:31:0f:e0:cb:c8:ef:16:3c:fd:b0: 84:e0:df:76:dc:5f:d3:d3:ae:95:12:f0:91:19:f9: 18:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B9:5A:E1:6F:F5:8A:7B:5D:2A:DF:6F:7C:F3:7A:58:82:13:44:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a907043d-8870-3f2e-966e-1be6a52817cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:56:e4:bd:54:13:02:67:31:23:7f:30:c3:85:ae:f8:74:3c: 6c:59:52:23:11:0a:8d:e8:92:c3:c3:0b:e5:4a:bb:c2:0e:25: d2:d3:a2:ed:f2:ec:da:15:8d:b0:f6:60:bb:55:5a:6e:8d:82: 41:e3:87:ab:82:55:b4:c9:5d:a8:98:af:07:58:ad:e6:ab:f9: 8e:2d:f1:94:1a:8f:15:8d:82:f0:9d:09:01:34:a7:2e:18:4f: 59:8c:f8:1f:1a:57:fa:9b:d1:0c:ef:d1:c2:22:1d:12:47:37: 5c:40:bb:81:33:ca:de:03:2b:23:c2:57:cd:a4:94:9a:1c:73: 60:d2:1e:78:65:4c:07:05:85:59:b6:f6:8e:79:6d:50:2d:04: 38:cb:be:2b:78:c0:5b:61:03:61:fd:84:b6:29:a3:0f:6a:74: 40:fe:aa:c9:ef:a2:71:b6:de:77:27:b6:90:31:66:e9:07:13: 47:52:58:b1:4c:25:b6:3a:6d:d8:e1:33:d9:52:e8:b9:21:19: 89:c4:8b:95:54:9a:3f:d4:75:06:2e:7d:29:b0:54:09:30:05: a1:62:73:71:e5:59:42:79:e7:71:9f:c9:32:42:a2:db:00:a7: bc:48:f1:14:ac:c1:f9:c4:61:de:f8:d4:91:30:e0:df:5b:27: 8b:27:e7:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNrnX4yyfkiQNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NjdkNTE2Y2UtOTY3Yi00OTJiLWE1NjgtYTI4ODc5OTFmY2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2+IjsOm7a5KdRFvoZcQMRSzEADZT9a8+dDe 81DKvf75q1j/iSjxQYNOvlOShcttm+4F7/Gr6+kVKQJWXrXTGEdo29cxzS2UoPh0 u1/WXCM8XY9muhVeNWJYyUKUag99NTVvD+MxYZqziKPJm5CgrxGeMdtWm+UDPwSg i9kHx3x5rLwezu8RrLcdciC5vUTlKLFwjBcA3RbF3b97gzXalsCWsLy6/db42MKa B452iXbVv2+KS+Ha4X4IVMDW+qdhDVEQV+ma3ujn4/gTh2vuJaSDDRa1KBzePBfe JviWDI1Aq8fq/jEP4MvI7xY8/bCE4N923F/T066VEvCRGfkYAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO5WuFv9Yp7XSrfb3zzeliCE0SJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTkwNzA0M2QtODg3MC0z ZjJlLTk2NmUtMWJlNmE1MjgxN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9W5L1UEwJnMSN/MMOFrvh0PGxZUiMRCo3oksPDC+VKu8IOJdLTou3y 7NoVjbD2YLtVWm6NgkHjh6uCVbTJXaiYrwdYrear+Y4t8ZQajxWNgvCdCQE0py4Y T1mM+B8aV/qb0Qzv0cIiHRJHN1xAu4Ezyt4DKyPCV82klJocc2DSHnhlTAcFhVm2 9o55bVAtBDjLvit4wFthA2H9hLYpow9qdED+qsnvonG23ncntpAxZukHE0dSWLFM JbY6bdjhM9lS6LkhGYnEi5VUmj/UdQYufSmwVAkwBaFic3HlWUJ553GfyTJCotsA p7xI8RSswfnEYd741JEw4N9bJ4sn52U= -----END CERTIFICATE-----Generated at Tue Jul 21 01:40:49 2026 by rpki-client