$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c5ad9c9e-fb52-3770-b68b-62b59ee9c035.roa File: c5ad9c9e-fb52-3770-b68b-62b59ee9c035.roa (raw, json) Hash identifier: UJ55FMtOBmx+6Jagmng/eP05oB6brhRp7tdGjJgxs7c= Subject key identifier: FC:B1:BD:B9:9D:C7:8F:CB:80:BC:C1:DD:95:A0:5D:62:7A:5E:C6:F5 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DB6C3034E91131537800 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c5ad9c9e-fb52-3770-b68b-62b59ee9c035.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:db:6c:30:34:e9:11:31:53:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=5124f632-4892-4761-b646-e38d7e0b82d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ce:5b:b2:26:c6:e0:3f:4a:f1:43:66:7a:6e: e0:39:d1:ce:79:28:b2:db:b9:18:a2:06:c4:5b:6a: 56:52:dd:f9:78:d6:d2:f6:57:93:f9:c7:db:5b:ca: 2f:00:c7:ec:98:e8:02:e9:3c:61:32:55:97:af:aa: ba:ed:73:80:78:73:38:01:41:8d:8c:ea:25:0d:77: 19:4d:aa:4e:f5:00:41:63:0b:f7:38:16:8f:d9:1f: f3:8d:57:f6:43:c4:78:96:7d:5c:97:c0:1d:85:45: 35:56:d3:2a:a2:9a:24:01:90:7d:a6:f9:01:e5:d4: c6:4c:11:c3:87:2c:db:0b:ac:be:33:4f:13:2f:7f: 1e:b4:b2:b1:81:3d:23:a3:cb:73:ec:27:5d:e1:3d: 12:70:59:dc:8b:ef:2f:81:c5:c9:b9:13:21:18:99: 6b:fc:21:59:45:a4:a0:a3:a0:5c:3c:f4:bf:a9:86: cf:cb:da:6b:3b:4a:e3:01:ec:11:0b:75:a3:aa:a6: fe:c7:30:9b:32:52:06:15:a3:14:bd:d2:ee:a7:f1: 4c:b3:3f:35:06:9c:ec:f1:f4:b9:f9:36:80:19:c7: 9e:2e:7b:07:be:88:7c:24:d1:67:19:33:3e:d0:fe: 84:e0:1e:94:87:23:59:59:38:d8:bd:41:2c:90:da: e4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B1:BD:B9:9D:C7:8F:CB:80:BC:C1:DD:95:A0:5D:62:7A:5E:C6:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c5ad9c9e-fb52-3770-b68b-62b59ee9c035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f8:ac:72:9d:bb:3d:be:31:ed:0b:0e:c5:0a:3b:c2:1b:0e: d6:c4:e4:fd:94:47:4a:b6:22:bb:cb:99:2a:e2:3d:b6:77:2d: e6:ea:35:27:1e:4b:bf:64:24:77:df:8b:de:6d:9a:c5:0c:8b: 92:ea:d4:3d:fa:b7:c2:a7:e4:64:01:14:ea:a0:78:e8:39:36: f0:4a:ae:9c:99:a4:52:cd:cf:53:92:45:68:ab:1a:8a:c0:79: 53:12:3d:27:25:df:06:41:10:51:93:d1:19:7e:b4:0b:b0:97: 77:c2:a2:cd:6a:78:91:f0:20:1b:5f:63:37:53:49:bd:ce:96: f2:55:72:8d:64:1f:ba:3f:54:9a:e0:fa:03:9e:37:59:e9:50: e4:ba:29:c1:ea:b1:1a:0c:76:c7:1a:76:85:13:21:08:75:6b: 50:7d:e0:22:48:62:7d:0d:2c:3d:74:f2:1c:88:c9:ae:18:fd: 15:da:1c:52:fc:30:3a:a5:2a:ab:84:8d:7f:43:d5:8d:d0:83: 9b:0e:04:59:7c:b0:5f:a8:31:d3:c7:14:4a:d8:57:62:f7:17: 13:5b:92:5a:c9:32:35:eb:7b:1c:97:27:33:98:24:87:99:81: 31:fa:8a:58:5f:98:76:07:75:72:51:e1:8f:d4:a8:6a:2d:ad: f2:97:d4:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNtsMDTpETFTeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NTEyNGY2MzItNDg5Mi00NzYxLWI2NDYtZTM4ZDdlMGI4MmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c5bsibG4D9K8UNmem7gOdHOeSiy27kYogbE W2pWUt35eNbS9leT+cfbW8ovAMfsmOgC6TxhMlWXr6q67XOAeHM4AUGNjOolDXcZ TapO9QBBYwv3OBaP2R/zjVf2Q8R4ln1cl8AdhUU1VtMqopokAZB9pvkB5dTGTBHD hyzbC6y+M08TL38etLKxgT0jo8tz7Cdd4T0ScFnci+8vgcXJuRMhGJlr/CFZRaSg o6BcPPS/qYbPy9prO0rjAewRC3Wjqqb+xzCbMlIGFaMUvdLup/FMsz81Bpzs8fS5 +TaAGceeLnsHvoh8JNFnGTM+0P6E4B6UhyNZWTjYvUEskNrkawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyxvbmdx4/LgLzB3ZWgXWJ6Xsb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYzVhZDljOWUtZmI1Mi0z NzcwLWI2OGItNjJiNTllZTljMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz4rHKduz2+Me0LDsUKO8IbDtbE5P2UR0q2IrvLmSriPbZ3LebqNSce S79kJHffi95tmsUMi5Lq1D36t8Kn5GQBFOqgeOg5NvBKrpyZpFLNz1OSRWirGorA eVMSPScl3wZBEFGT0Rl+tAuwl3fCos1qeJHwIBtfYzdTSb3OlvJVco1kH7o/VJrg +gOeN1npUOS6KcHqsRoMdscadoUTIQh1a1B94CJIYn0NLD108hyIya4Y/RXaHFL8 MDqlKquEjX9D1Y3Qg5sOBFl8sF+oMdPHFErYV2L3FxNbklrJMjXrexyXJzOYJIeZ gTH6ilhfmHYHdXJR4Y/UqGotrfKX1Dg= -----END CERTIFICATE-----Generated at Tue Jul 21 01:41:16 2026 by rpki-client