$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c2bbbf5c-8486-3cc9-9800-c31a3c482d72.roa File: c2bbbf5c-8486-3cc9-9800-c31a3c482d72.roa (raw, json) Hash identifier: PnmfhAS/1axUM8yREaLfyRGl+EgdhOwmWuYCTtNdUio= Subject key identifier: D1:59:E8:05:87:54:22:D2:E3:6A:94:1D:E8:97:8D:3B:66:F2:22:30 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DB5E9DF8164E2F555800 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c2bbbf5c-8486-3cc9-9800-c31a3c482d72.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:db:5e:9d:f8:16:4e:2f:55:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=c8c88a16-676c-46f3-ba0f-3f1f2c7d3aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:32:a6:5a:61:28:bd:2f:5c:80:a1:b6:41:79: 6d:69:56:9d:1d:83:49:13:cb:08:3d:a5:0b:42:5b: e4:47:98:d1:8f:b7:16:7d:97:8e:89:ba:6a:b3:93: 6d:81:0e:18:0c:d2:fe:1d:ad:16:6a:f8:ca:c9:b1: 2c:3c:6a:30:de:97:5a:4c:4e:01:4b:75:ef:73:2b: e4:6a:e2:08:c0:29:e8:48:2b:da:9c:c8:29:cf:8f: f5:9d:bc:64:1e:ce:c6:27:10:ef:3e:28:d8:7d:bc: 89:e4:34:13:f2:57:83:6b:81:c1:ba:ae:3b:fa:e5: 2f:18:c8:2e:e8:68:50:d2:74:a9:c2:28:7f:ba:ed: 3b:ff:3d:51:3a:78:ac:f5:f2:7d:fc:e6:78:25:ff: cb:0f:e7:4f:c6:05:cc:c4:73:35:cd:77:6d:3e:84: 46:e2:b4:0d:56:45:13:e1:a7:59:3b:80:11:be:97: 6b:98:da:35:a5:52:d0:56:01:96:95:e0:b4:ef:82: a6:8c:af:fc:73:9d:0a:0a:4d:59:17:17:27:bd:06: f5:63:8d:c2:18:97:2f:ec:9c:ba:60:95:0b:81:99: 78:48:45:20:ba:fa:eb:05:ee:2f:a0:f4:38:2a:3d: 2e:59:42:cc:ce:9d:9e:8f:31:58:8f:ed:15:2d:0d: 18:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:59:E8:05:87:54:22:D2:E3:6A:94:1D:E8:97:8D:3B:66:F2:22:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c2bbbf5c-8486-3cc9-9800-c31a3c482d72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:38:b3:74:2d:8e:83:5b:10:cb:38:e6:70:0b:ae:f5:24:d9: 2c:1b:58:d3:b6:64:ee:44:c2:6a:55:19:3f:fe:29:d9:aa:d5: b4:60:eb:7b:96:24:00:f0:bf:c4:70:52:4a:a5:b7:92:92:91: 54:bd:0e:d0:65:e3:a6:29:29:40:fa:5b:82:c6:08:f8:7a:4a: 33:91:6e:0e:09:4c:e3:e2:fe:25:a2:6e:1c:b4:0b:42:0f:50: 98:9b:2d:cb:2d:bf:c5:7f:ac:62:b6:98:e9:5c:72:5d:c1:8e: ab:7d:73:68:4d:18:fb:e9:1b:fb:32:bf:52:4d:b7:65:5c:26: 48:2d:3d:a3:9e:e6:ac:59:41:3f:70:8e:fc:a5:7e:b1:84:5e: 88:05:31:61:79:fe:4b:d6:87:b5:2a:a3:be:87:6e:56:30:8b: 95:6b:ff:dc:df:da:5f:f8:2b:d9:0d:41:46:1e:1d:c5:3c:e3: 49:10:bc:0b:2a:15:65:fa:4b:96:f0:c2:77:50:f8:6f:77:a2: 85:3e:90:e1:d8:07:ea:b2:9a:b5:47:77:62:e4:5d:7e:76:68: 21:10:71:ed:d3:5c:69:c7:be:a2:fc:1c:74:b4:8f:42:ce:18: 6b:61:f0:f1:9a:cf:e7:fa:b6:0c:ca:07:21:dc:03:67:6a:60: ba:81:e0:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNtenfgWTi9VWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YzhjODhhMTYtNjc2Yy00NmYzLWJhMGYtM2YxZjJjN2QzYWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzKmWmEovS9cgKG2QXltaVadHYNJE8sIPaUL QlvkR5jRj7cWfZeOibpqs5NtgQ4YDNL+Ha0WavjKybEsPGow3pdaTE4BS3Xvcyvk auIIwCnoSCvanMgpz4/1nbxkHs7GJxDvPijYfbyJ5DQT8leDa4HBuq47+uUvGMgu 6GhQ0nSpwih/uu07/z1ROnis9fJ9/OZ4Jf/LD+dPxgXMxHM1zXdtPoRG4rQNVkUT 4adZO4ARvpdrmNo1pVLQVgGWleC074KmjK/8c50KCk1ZFxcnvQb1Y43CGJcv7Jy6 YJULgZl4SEUguvrrBe4voPQ4Kj0uWULMzp2ejzFYj+0VLQ0YawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFZ6AWHVCLS42qUHeiXjTtm8iIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYzJiYmJmNWMtODQ4Ni0z Y2M5LTk4MDAtYzMxYTNjNDgyZDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE4s3QtjoNbEMs45nALrvUk2SwbWNO2ZO5EwmpVGT/+Kdmq1bRg63uW JADwv8RwUkqlt5KSkVS9DtBl46YpKUD6W4LGCPh6SjORbg4JTOPi/iWibhy0C0IP UJibLcstv8V/rGK2mOlccl3Bjqt9c2hNGPvpG/syv1JNt2VcJkgtPaOe5qxZQT9w jvylfrGEXogFMWF5/kvWh7Uqo76HblYwi5Vr/9zf2l/4K9kNQUYeHcU840kQvAsq FWX6S5bwwndQ+G93ooU+kOHYB+qymrVHd2LkXX52aCEQce3TXGnHvqL8HHS0j0LO GGth8PGaz+f6tgzKByHcA2dqYLqB4Js= -----END CERTIFICATE-----Generated at Tue Jul 21 01:40:06 2026 by rpki-client