$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/adf9349d-bef8-3006-8826-0a570987e422.roa File: adf9349d-bef8-3006-8826-0a570987e422.roa (raw, json) Hash identifier: XAcqV8QuSRDeMusJqHno6JbKTg71fGyAh5LvMGC8+L4= Subject key identifier: AC:A8:F1:09:0A:DD:BA:67:FE:73:02:24:2B:8C:42:4B:24:53:25:FF Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D928A60429FADCC648E0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/adf9349d-bef8-3006-8826-0a570987e422.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d9:28:a6:04:29:fa:dc:c6:48:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=35bfb57d-2b51-4e4d-94a5-9bd10c3cce55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0a:6d:47:09:6f:24:4f:f5:10:6d:cc:8b:85: 3c:6d:2b:76:1a:35:b8:e6:c6:0f:96:ff:ff:4e:61: 28:2b:34:03:31:d6:36:14:f6:f7:85:3b:ce:41:9f: 6e:7e:f9:c1:71:dc:ca:c4:e2:73:81:ec:a5:27:8e: bf:c3:d1:ea:b4:04:93:2a:de:b2:26:5c:e8:a5:26: 32:4a:0c:c1:8c:53:f9:32:a9:de:c2:27:50:a0:09: 0d:d7:40:3c:bd:31:08:74:0c:6b:85:7a:f4:26:49: 90:18:77:b8:df:37:27:6b:29:c4:b4:03:fd:91:88: 1f:09:6f:41:1e:2f:2a:90:a7:56:1d:aa:64:2b:0b: 61:c7:03:18:c3:b0:37:9b:59:51:3a:c9:bd:af:7c: cf:cd:57:12:a2:91:d4:05:c9:60:be:c5:e2:35:e9: 21:31:eb:2e:26:df:86:ec:49:a4:1f:12:f9:79:b3: 2b:0f:8e:68:85:db:40:10:28:56:d1:8d:5b:d6:3e: 3a:f5:22:a2:3b:45:ba:a1:7a:4c:08:ed:1d:cb:ca: 5a:10:44:7b:c1:90:a2:d1:ce:20:3e:53:44:10:a9: 3c:0b:15:cd:30:8a:40:fd:13:de:90:29:45:8e:dc: df:8e:7a:a8:07:8f:d4:f3:9e:f8:68:2b:5a:c5:c8: 96:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A8:F1:09:0A:DD:BA:67:FE:73:02:24:2B:8C:42:4B:24:53:25:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/adf9349d-bef8-3006-8826-0a570987e422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ca:db:2b:2a:75:6b:97:f7:f0:10:59:48:d0:ea:03:63:b4: fb:a4:73:3a:4a:9c:56:9d:58:31:c4:0c:bd:24:32:ae:19:07: f1:94:df:71:3f:6b:3a:5a:e0:43:2e:5c:87:a4:f1:66:d5:3d: a2:1b:ef:e5:40:c6:b7:06:06:b9:ba:8e:97:41:2a:fa:6a:f2: b4:66:b6:a1:4f:92:a9:bb:90:6d:1e:86:b6:e2:09:2b:e7:0c: f0:c8:c1:f4:96:fc:0a:16:c8:26:d0:c7:f3:89:4b:2f:0d:e7: e6:00:89:9a:4b:c9:d7:c3:0a:8c:0d:16:bf:10:67:13:2d:ee: b5:37:80:00:84:f6:5c:ec:ad:3c:fb:67:03:8a:b6:5c:b3:12: 46:f8:a3:27:79:4a:98:e1:77:a0:53:1f:37:23:cb:1f:54:ce: 19:59:71:03:40:87:19:af:20:89:c5:28:1a:58:9d:fe:06:79: 1c:23:e0:ef:c2:42:1e:23:d4:cd:99:bf:0f:5a:3c:f4:2d:f3: 88:e4:14:cf:08:40:35:67:d0:63:90:c1:3d:a4:33:a4:ac:79: 02:41:c0:b1:09:4a:97:bb:6a:61:5f:1e:82:ef:18:01:21:3e: 1c:94:31:d4:3e:57:45:02:38:57:de:b1:15:cb:b5:60:80:d1: da:6e:c2:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNkopgQp+tzGSOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MzViZmI1N2QtMmI1MS00ZTRkLTk0YTUtOWJkMTBjM2NjZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAptRwlvJE/1EG3Mi4U8bSt2GjW45sYPlv// TmEoKzQDMdY2FPb3hTvOQZ9ufvnBcdzKxOJzgeylJ46/w9HqtASTKt6yJlzopSYy SgzBjFP5MqnewidQoAkN10A8vTEIdAxrhXr0JkmQGHe43zcnaynEtAP9kYgfCW9B Hi8qkKdWHapkKwthxwMYw7A3m1lROsm9r3zPzVcSopHUBclgvsXiNekhMesuJt+G 7EmkHxL5ebMrD45ohdtAEChW0Y1b1j469SKiO0W6oXpMCO0dy8paEER7wZCi0c4g PlNEEKk8CxXNMIpA/RPekClFjtzfjnqoB4/U8574aCtaxciWwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyo8QkK3bpn/nMCJCuMQkskUyX/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYWRmOTM0OWQtYmVmOC0z MDA2LTg4MjYtMGE1NzA5ODdlNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATK2ysqdWuX9/AQWUjQ6gNjtPukczpKnFadWDHEDL0kMq4ZB/GU33E/ azpa4EMuXIek8WbVPaIb7+VAxrcGBrm6jpdBKvpq8rRmtqFPkqm7kG0ehrbiCSvn DPDIwfSW/AoWyCbQx/OJSy8N5+YAiZpLydfDCowNFr8QZxMt7rU3gACE9lzsrTz7 ZwOKtlyzEkb4oyd5Spjhd6BTHzcjyx9UzhlZcQNAhxmvIInFKBpYnf4GeRwj4O/C Qh4j1M2Zvw9aPPQt84jkFM8IQDVn0GOQwT2kM6SseQJBwLEJSpe7amFfHoLvGAEh PhyUMdQ+V0UCOFfesRXLtWCA0dpuwlk= -----END CERTIFICATE-----Generated at Tue Jul 21 01:41:11 2026 by rpki-client