$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b8118dcf-938b-3b61-969a-234da348456c.roa File: b8118dcf-938b-3b61-969a-234da348456c.roa (raw, json) Hash identifier: +GCFuEvP9LRdyIDOVTqpm30BqSqDF0yySYvBxeiAmnw= Subject key identifier: 44:63:7C:81:90:FC:91:9D:6F:4C:AB:18:BA:A5:45:F2:65:A3:58:DF Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D5070987FF76683F7B00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b8118dcf-938b-3b61-969a-234da348456c.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d5:07:09:87:ff:76:68:3f:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=610d0c22-9b20-4c7d-8cb7-c67f2618f78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6c:84:35:c2:3b:ba:a1:e9:87:6c:1c:e6:b4: a3:82:a3:b3:4a:ec:05:20:87:d2:ec:fb:88:7e:19: f0:a4:29:9f:76:da:19:bc:d7:a5:72:40:20:73:fe: f3:29:31:a7:ed:0e:a6:37:d1:b0:4f:7e:db:3e:f5: c0:af:37:40:5e:07:d5:90:92:ef:80:05:e1:3b:37: 2e:a9:65:6b:ec:23:ba:1b:00:60:3e:6d:9e:7d:e0: 32:20:df:a7:26:de:04:cc:33:e6:2e:e1:07:ab:45: 29:23:b3:fd:fc:4a:2a:db:9b:13:9f:6d:2d:32:b0: 4c:3b:6e:23:86:a9:39:39:f4:d4:1e:1e:fe:8f:33: 16:e7:0f:5a:58:79:b8:e0:7b:39:3a:48:3a:30:4c: 06:25:7c:23:8e:7c:21:07:cc:fe:ba:d7:75:a5:72: 79:c4:2f:09:a2:33:f2:93:e3:d3:b0:dc:ec:e4:34: 2e:1c:88:73:a9:c6:d8:61:32:36:8d:0e:5a:60:3d: 0e:f7:f3:d4:6c:4a:3c:08:cc:e6:0b:67:e9:a0:27: 26:c9:4c:63:34:b1:93:83:fc:42:b8:e1:d2:e6:15: 87:10:10:d3:60:9c:f6:8e:30:96:23:7b:79:a7:09: e9:7c:4b:5d:2b:0a:bf:6a:4d:d0:39:02:a0:34:4c: 71:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:63:7C:81:90:FC:91:9D:6F:4C:AB:18:BA:A5:45:F2:65:A3:58:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b8118dcf-938b-3b61-969a-234da348456c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7a:bf:9c:83:b3:20:21:da:24:69:60:ba:23:cc:2d:53:a2: 62:d7:1f:73:3f:06:a7:0b:ee:cb:3a:78:03:46:53:22:85:83: 77:e1:57:54:3e:44:55:eb:6b:94:03:23:10:25:6d:93:0a:66: 11:c7:95:99:58:43:33:8b:00:da:45:91:bd:76:f9:c5:aa:94: 56:43:f5:72:48:de:0b:a1:c9:77:87:a1:d3:d0:3c:f4:79:d6: 93:cd:ca:08:71:bf:f2:f7:a6:2e:8c:e6:fb:a7:b6:9c:22:68: 31:59:c6:a1:45:51:16:50:19:ae:96:5b:5b:4a:64:51:4f:33: b6:9e:55:39:7c:7b:1f:b8:56:a7:58:b1:8e:c0:f5:46:f9:4b: 50:ca:87:87:27:86:64:57:c0:c9:4c:82:b3:d2:5c:c7:b1:0e: 69:5a:76:44:ee:94:6e:fc:26:d8:ba:4d:e4:71:a3:c1:c1:7e: 8d:4f:a0:1d:42:cb:40:5f:8c:86:36:89:6f:9e:aa:67:36:2e: d3:ac:39:49:b7:7f:85:d1:46:1f:11:08:4a:5b:e1:17:e1:70: 76:4b:97:04:8b:16:3d:d5:bb:03:3e:8c:7e:60:c4:8f:48:73: 31:d9:4e:0c:c9:6e:11:24:0f:f8:34:d3:c3:c3:aa:36:20:16: ce:e9:86:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNUHCYf/dmg/ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NjEwZDBjMjItOWIyMC00YzdkLThjYjctYzY3ZjI2MThmNzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGyENcI7uqHph2wc5rSjgqOzSuwFIIfS7PuI fhnwpCmfdtoZvNelckAgc/7zKTGn7Q6mN9GwT37bPvXArzdAXgfVkJLvgAXhOzcu qWVr7CO6GwBgPm2efeAyIN+nJt4EzDPmLuEHq0UpI7P9/Eoq25sTn20tMrBMO24j hqk5OfTUHh7+jzMW5w9aWHm44Hs5Okg6MEwGJXwjjnwhB8z+utd1pXJ5xC8JojPy k+PTsNzs5DQuHIhzqcbYYTI2jQ5aYD0O9/PUbEo8CMzmC2fpoCcmyUxjNLGTg/xC uOHS5hWHEBDTYJz2jjCWI3t5pwnpfEtdKwq/ak3QOQKgNExxpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERjfIGQ/JGdb0yrGLqlRfJlo1jfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYjgxMThkY2YtOTM4Yi0z YjYxLTk2OWEtMjM0ZGEzNDg0NTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ6v5yDsyAh2iRpYLojzC1TomLXH3M/BqcL7ss6eANGUyKFg3fhV1Q+ RFXra5QDIxAlbZMKZhHHlZlYQzOLANpFkb12+cWqlFZD9XJI3guhyXeHodPQPPR5 1pPNyghxv/L3pi6M5vuntpwiaDFZxqFFURZQGa6WW1tKZFFPM7aeVTl8ex+4VqdY sY7A9Ub5S1DKh4cnhmRXwMlMgrPSXMexDmladkTulG78Jti6TeRxo8HBfo1PoB1C y0BfjIY2iW+eqmc2LtOsOUm3f4XRRh8RCEpb4RfhcHZLlwSLFj3VuwM+jH5gxI9I czHZTgzJbhEkD/g008PDqjYgFs7phpE= -----END CERTIFICATE-----Generated at Tue Jul 21 13:26:10 2026 by rpki-client