$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b99d1726-265e-331d-912b-00ce0f133e0a.roa File: b99d1726-265e-331d-912b-00ce0f133e0a.roa (raw, json) Hash identifier: +LvvI4VrEGo4SKMIvRqboKhKJHurBglfpttIBEagiKs= Subject key identifier: BF:53:87:AE:A0:A3:2C:7B:7F:9D:E5:82:01:47:A8:C4:1E:9D:C4:1F Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D6B45CE283F3255CE980 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b99d1726-265e-331d-912b-00ce0f133e0a.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d6:b4:5c:e2:83:f3:25:5c:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=42bd5aa4-e8a7-47a9-9510-469c655a4730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:1b:56:11:8a:8a:3c:24:e5:8c:fb:9b:ba: 7a:60:8d:70:a5:fe:2d:03:e3:87:3d:9a:50:44:6e: 6a:59:ac:fb:96:97:c4:7a:d7:8f:f5:21:34:8d:66: ca:c4:96:56:a1:55:b1:58:d6:35:13:6e:48:53:b5: b2:69:5e:ce:dc:2b:87:55:19:f8:ab:da:fa:3e:dd: 52:91:12:33:7c:62:8e:34:e9:77:2c:be:c7:a4:b3: eb:b0:9f:89:a2:bd:63:7d:6d:cb:60:c0:26:62:f9: fd:66:ab:44:37:43:ed:e0:8b:b0:54:29:cc:39:85: b5:f7:4d:21:98:3f:ed:fd:c9:30:3a:c9:30:99:6b: 4d:95:f6:1e:94:5e:0b:06:c3:8b:01:b6:de:36:9b: b2:a5:4d:a1:9d:9a:f6:b2:2c:cd:2d:90:20:51:a0: 0b:54:e8:a3:cd:1a:7c:b1:a7:6a:b0:c2:d5:b2:05: a3:b6:b4:b6:6a:89:5b:89:ac:27:33:98:4e:d1:11: 73:30:86:55:2c:b2:cb:a8:97:d1:e0:2b:be:ca:f0: 66:b9:79:47:c9:a7:c2:96:17:a9:ec:7f:f1:30:62: 97:9e:29:26:b7:ec:7c:cd:ac:a1:56:b7:0e:5b:b8: 6d:7f:82:f6:14:c0:9f:09:d0:1a:5a:6a:86:2f:f1: 04:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:53:87:AE:A0:A3:2C:7B:7F:9D:E5:82:01:47:A8:C4:1E:9D:C4:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b99d1726-265e-331d-912b-00ce0f133e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b2:c9:f2:68:35:fa:42:c0:5f:77:1a:39:bf:f8:2e:d5:b3: 29:80:7e:a2:02:f8:5e:3d:40:35:a6:ad:b2:11:88:7f:c6:e3: 32:fe:2a:c0:c6:dd:9d:25:9b:f5:01:49:b4:5e:c2:6e:59:f8: 73:41:19:ea:1f:a0:eb:44:5c:b1:4a:21:49:7d:b6:47:62:69: 8a:86:d7:81:6d:d8:4c:3c:12:af:66:d0:0d:cd:f1:63:f6:9f: 71:ce:4e:b7:36:00:d9:c3:65:18:03:0d:e1:40:4d:af:d4:54: c0:d5:b0:ed:90:5e:e1:f0:08:cf:7d:f6:ee:58:68:15:0a:90: 72:fe:28:ad:89:e4:07:72:d9:a3:2b:a7:ca:5e:66:42:22:97: 88:d8:39:31:79:a9:7a:48:82:c7:5b:d3:68:31:31:4d:97:eb: 04:aa:ef:bb:99:3e:9e:d1:b8:cf:d0:19:50:82:10:fb:ea:8a: 3c:ff:d8:a8:95:cb:4d:39:c6:da:d6:ee:27:9f:44:da:10:9c: 0b:3f:42:f8:c5:c3:54:a8:ec:ea:c1:66:b8:51:8b:ff:5f:a8: 7e:e8:d3:12:ab:74:53:bb:d0:e1:d1:84:0d:5a:a2:28:4d:0e: 7c:ce:9f:b3:77:5e:12:85:06:82:35:49:72:98:b8:44:0f:74: 0d:c2:35:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNa0XOKD8yVc6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NDJiZDVhYTQtZThhNy00N2E5LTk1MTAtNDY5YzY1NWE0NzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEcbVhGKijwk5Yz7m7p6YI1wpf4tA+OHPZpQ RG5qWaz7lpfEeteP9SE0jWbKxJZWoVWxWNY1E25IU7WyaV7O3CuHVRn4q9r6Pt1S kRIzfGKONOl3LL7HpLPrsJ+Jor1jfW3LYMAmYvn9ZqtEN0Pt4IuwVCnMOYW1900h mD/t/ckwOskwmWtNlfYelF4LBsOLAbbeNpuypU2hnZr2sizNLZAgUaALVOijzRp8 sadqsMLVsgWjtrS2aolbiawnM5hO0RFzMIZVLLLLqJfR4Cu+yvBmuXlHyafClhep 7H/xMGKXnikmt+x8zayhVrcOW7htf4L2FMCfCdAaWmqGL/EEaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9Th66goyx7f53lggFHqMQencQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYjk5ZDE3MjYtMjY1ZS0z MzFkLTkxMmItMDBjZTBmMTMzZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGyyfJoNfpCwF93Gjm/+C7VsymAfqIC+F49QDWmrbIRiH/G4zL+KsDG 3Z0lm/UBSbRewm5Z+HNBGeofoOtEXLFKIUl9tkdiaYqG14Ft2Ew8Eq9m0A3N8WP2 n3HOTrc2ANnDZRgDDeFATa/UVMDVsO2QXuHwCM999u5YaBUKkHL+KK2J5Ady2aMr p8peZkIil4jYOTF5qXpIgsdb02gxMU2X6wSq77uZPp7RuM/QGVCCEPvqijz/2KiV y005xtrW7iefRNoQnAs/QvjFw1So7OrBZrhRi/9fqH7o0xKrdFO70OHRhA1aoihN DnzOn7N3XhKFBoI1SXKYuEQPdA3CNWo= -----END CERTIFICATE-----Generated at Tue Jul 21 13:23:56 2026 by rpki-client