$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/bc5d4f49-e748-329d-bd9b-4f941981b39b.roa File: bc5d4f49-e748-329d-bd9b-4f941981b39b.roa (raw, json) Hash identifier: 4n+CvJDC6FzYN3uMGKDd386mODe7xIXLzka5fy2gr3o= Subject key identifier: 93:51:9D:52:4E:54:B7:21:E2:AF:71:A4:B3:F1:87:DB:DC:8C:F7:AC Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D71D014A12B0F344DC80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/bc5d4f49-e748-329d-bd9b-4f941981b39b.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d7:1d:01:4a:12:b0:f3:44:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=e601df14-9d21-405c-89f1-2b2888f75eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:03:d3:ac:7c:cc:5e:c8:83:6c:05:50:d8: 44:7a:b7:6f:58:b9:8a:db:1d:7e:bf:53:9a:7f:f9: 38:e0:3e:ea:ba:94:c7:7e:7b:fc:46:c3:2e:d9:57: 20:70:9c:d6:4e:83:55:f2:c0:07:ee:1e:e9:47:31: 5c:75:9f:7f:53:75:d8:fd:22:dd:9d:84:08:f3:8d: 8f:aa:c8:1f:6e:99:8d:57:24:d5:41:2b:0c:d9:ed: d5:0f:3b:02:35:a2:d8:4d:15:f6:1a:fc:f2:35:26: ed:f1:01:d3:8b:44:2c:34:1b:1d:ba:dd:66:3a:49: 52:5b:d0:49:8e:30:12:6c:b2:97:4f:2b:d7:04:e9: 1c:bb:3e:8a:d4:b0:31:8b:c3:f1:ee:26:f4:e6:a4: 11:d0:92:3a:2a:f5:15:b5:c1:0b:6b:96:c8:a1:ed: 9e:42:9b:4b:24:63:a2:61:cf:56:0d:02:58:2f:d0: 13:6b:5d:b5:74:42:45:80:d3:6d:32:c8:1f:10:76: dd:78:e7:a4:df:bc:d1:ca:73:ab:b7:a9:63:e7:19: a1:33:13:12:a6:66:36:b9:2f:fb:f4:8c:16:3e:d4: 18:82:8e:b3:65:d7:ee:47:e1:05:c8:32:66:8e:13: 13:0f:db:e2:a2:e8:dc:e5:f0:95:49:63:10:82:ac: 61:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:51:9D:52:4E:54:B7:21:E2:AF:71:A4:B3:F1:87:DB:DC:8C:F7:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/bc5d4f49-e748-329d-bd9b-4f941981b39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:68:ec:0b:73:29:76:0e:e7:ea:5c:f1:1f:cc:4c:ac:2d:d3: 91:a4:a8:b5:ab:c3:d1:48:b8:8d:8c:c6:78:5b:d3:f2:21:5a: 4f:17:a0:28:53:81:20:4f:58:3e:1c:07:04:ed:7a:a0:52:c3: c4:32:05:da:41:20:bc:60:76:70:4a:85:38:69:bc:58:e4:bf: b5:e6:0d:b5:09:a1:51:79:c7:56:f4:d4:73:a8:ef:48:25:a8: ad:61:4a:14:1b:ba:c3:74:32:68:d1:5f:c0:09:fb:1f:6b:f7: 42:59:2d:9f:1d:bc:d6:7d:4a:6b:6a:47:95:67:0d:e3:66:42: bd:d1:0a:60:19:f9:6b:84:10:f3:f2:06:ed:79:6c:38:21:14: d9:8d:6f:fd:5d:5d:e4:b9:7b:7f:be:33:91:52:e0:9d:a1:9d: a3:e1:32:51:3a:47:ed:0c:fd:f2:aa:7c:c9:78:ad:25:51:5b: 80:e6:a8:af:e0:0a:11:09:08:eb:92:7b:fb:4a:ce:a1:a3:29: c2:17:c9:1c:89:4a:9a:44:03:6b:65:aa:d1:48:69:71:01:b5: d3:41:b2:be:40:54:46:00:02:4c:17:92:b6:dc:d7:b6:c7:c2: b9:7e:5a:07:28:a8:d9:1d:38:92:c6:6c:5e:8d:0e:33:d8:4f: 15:a3:b8:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNcdAUoSsPNE3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZTYwMWRmMTQtOWQyMS00MDVjLTg5ZjEtMmIyODg4Zjc1ZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd0D06x8zF7Ig2wFUNhEerdvWLmK2x1+v1Oa f/k44D7qupTHfnv8RsMu2VcgcJzWToNV8sAH7h7pRzFcdZ9/U3XY/SLdnYQI842P qsgfbpmNVyTVQSsM2e3VDzsCNaLYTRX2GvzyNSbt8QHTi0QsNBsdut1mOklSW9BJ jjASbLKXTyvXBOkcuz6K1LAxi8Px7ib05qQR0JI6KvUVtcELa5bIoe2eQptLJGOi Yc9WDQJYL9ATa121dEJFgNNtMsgfEHbdeOek37zRynOrt6lj5xmhMxMSpmY2uS/7 9IwWPtQYgo6zZdfuR+EFyDJmjhMTD9vioujc5fCVSWMQgqxhDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNRnVJOVLch4q9xpLPxh9vcjPesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYmM1ZDRmNDktZTc0OC0z MjlkLWJkOWItNGY5NDE5ODFiMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1o7AtzKXYO5+pc8R/MTKwt05GkqLWrw9FIuI2Mxnhb0/IhWk8XoChT gSBPWD4cBwTteqBSw8QyBdpBILxgdnBKhThpvFjkv7XmDbUJoVF5x1b01HOo70gl qK1hShQbusN0MmjRX8AJ+x9r90JZLZ8dvNZ9SmtqR5VnDeNmQr3RCmAZ+WuEEPPy Bu15bDghFNmNb/1dXeS5e3++M5FS4J2hnaPhMlE6R+0M/fKqfMl4rSVRW4DmqK/g ChEJCOuSe/tKzqGjKcIXyRyJSppEA2tlqtFIaXEBtdNBsr5AVEYAAkwXkrbc17bH wrl+WgcoqNkdOJLGbF6NDjPYTxWjuN0= -----END CERTIFICATE-----Generated at Tue Jul 21 13:21:21 2026 by rpki-client