$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b7f4aeb0-8342-3c43-836c-68b8e6b66737.roa File: b7f4aeb0-8342-3c43-836c-68b8e6b66737.roa (raw, json) Hash identifier: 9fJ+u1xSXlAzpIavqaQARDPxkQBr9L1X53jsiw6qHLE= Subject key identifier: CC:17:FB:C1:3F:DC:DC:4D:E6:3A:64:89:34:09:C7:CE:DD:57:38:2A Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D80E3D359938D3433000 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b7f4aeb0-8342-3c43-836c-68b8e6b66737.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d8:0e:3d:35:99:38:d3:43:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=2e20e623-6977-4b0f-baac-8a8ffe86e2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:d5:a2:10:ea:a1:bd:de:2e:e4:39:0a:0b: 18:50:7f:9c:3d:c9:1e:71:52:92:b6:35:2b:4b:8e: a5:19:84:07:86:8b:30:27:17:9a:0a:18:08:50:08: 3c:55:c0:e7:35:51:5d:de:60:74:e5:19:5e:3e:4e: c6:4b:e0:08:1b:e2:68:b9:33:b8:78:7e:c2:1a:93: 2c:9f:2c:3f:66:a6:a1:bc:a6:55:97:5e:2e:75:1e: 05:c6:7a:05:ba:c2:77:9a:53:5b:31:45:ea:81:c6: 62:12:fd:4a:28:a3:b7:8a:e0:7e:32:13:d9:21:e3: f3:5b:a7:0f:07:3e:32:61:18:f4:82:d8:ec:19:ea: b3:0c:0c:fb:d5:7c:4f:50:22:7a:e5:dc:c3:37:33: ab:d5:1f:ad:ea:37:c9:d9:dc:0b:54:d3:c2:d5:a5: 80:a4:09:e7:64:23:ea:9a:4f:e0:5a:37:44:29:d2: 40:58:db:27:e0:a2:2f:6b:c8:3a:19:1b:9e:0e:10: b6:7a:86:94:8e:95:83:32:d5:d6:16:f3:ad:4e:29: 81:5c:5a:bf:90:d1:68:e9:9f:90:d0:3f:dc:40:d3: 42:d8:2e:bd:b5:cf:14:30:62:b8:aa:a7:81:66:19: 35:23:66:81:bf:69:ee:a1:fb:0f:ec:7c:d4:1c:2c: b9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:17:FB:C1:3F:DC:DC:4D:E6:3A:64:89:34:09:C7:CE:DD:57:38:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b7f4aeb0-8342-3c43-836c-68b8e6b66737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:17:98:56:59:1f:28:2b:5f:a3:0d:98:57:e2:69:87:29:c7: 30:0b:40:f6:0c:e8:54:fb:80:ed:04:54:3f:f2:ec:a7:37:bd: dc:5a:23:43:98:6b:96:d8:e7:ab:eb:05:1b:cc:8f:88:94:77: cf:45:2b:e6:c8:00:d7:7c:02:d8:97:40:60:85:d1:65:bd:65: 18:20:cf:36:e0:90:75:0c:41:97:e6:78:53:c8:af:aa:34:f8: 0b:3e:77:85:56:f1:b7:d0:d9:0b:91:16:37:a1:a6:6d:1f:da: 7f:0e:21:66:19:bb:15:43:dc:e1:32:8b:97:b4:bc:c7:f4:cd: 42:c8:2f:5c:d8:8c:a5:66:d8:b8:73:61:a0:01:c4:01:fc:15: 0f:4b:3b:1f:cd:7e:97:d4:71:74:d8:f6:f4:39:fa:7f:6a:2b: db:7a:5d:aa:1f:c9:31:d5:12:f5:6a:5b:11:29:f5:33:32:e6: 50:ae:9a:63:0b:1e:a1:01:94:ae:36:b0:4f:ee:e6:0c:3f:82: fb:57:47:8e:e4:35:ed:ed:c8:a5:fe:f5:fe:33:d8:f2:48:f5: 9b:ca:8c:c6:d2:e7:d2:79:91:b1:75:0a:fc:46:45:df:9f:aa: ce:c1:94:73:18:21:67:36:ec:4f:50:7f:0e:a5:a4:43:8c:28: 51:86:fe:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNgOPTWZONNDMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MmUyMGU2MjMtNjk3Ny00YjBmLWJhYWMtOGE4ZmZlODZlMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxebVohDqob3eLuQ5CgsYUH+cPckecVKStjUr S46lGYQHhoswJxeaChgIUAg8VcDnNVFd3mB05RlePk7GS+AIG+JouTO4eH7CGpMs nyw/ZqahvKZVl14udR4FxnoFusJ3mlNbMUXqgcZiEv1KKKO3iuB+MhPZIePzW6cP Bz4yYRj0gtjsGeqzDAz71XxPUCJ65dzDNzOr1R+t6jfJ2dwLVNPC1aWApAnnZCPq mk/gWjdEKdJAWNsn4KIva8g6GRueDhC2eoaUjpWDMtXWFvOtTimBXFq/kNFo6Z+Q 0D/cQNNC2C69tc8UMGK4qqeBZhk1I2aBv2nuofsP7HzUHCy5JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwX+8E/3NxN5jpkiTQJx87dVzgqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYjdmNGFlYjAtODM0Mi0z YzQzLTgzNmMtNjhiOGU2YjY2NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8XmFZZHygrX6MNmFfiaYcpxzALQPYM6FT7gO0EVD/y7Kc3vdxaI0OY a5bY56vrBRvMj4iUd89FK+bIANd8AtiXQGCF0WW9ZRggzzbgkHUMQZfmeFPIr6o0 +As+d4VW8bfQ2QuRFjehpm0f2n8OIWYZuxVD3OEyi5e0vMf0zULIL1zYjKVm2Lhz YaABxAH8FQ9LOx/NfpfUcXTY9vQ5+n9qK9t6XaofyTHVEvVqWxEp9TMy5lCummML HqEBlK42sE/u5gw/gvtXR47kNe3tyKX+9f4z2PJI9ZvKjMbS59J5kbF1CvxGRd+f qs7BlHMYIWc27E9Qfw6lpEOMKFGG/pQ= -----END CERTIFICATE-----Generated at Tue Jul 21 13:24:06 2026 by rpki-client