$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/cd30b33c-9781-3551-b7e0-33fa485c82f8.roa File: cd30b33c-9781-3551-b7e0-33fa485c82f8.roa (raw, json) Hash identifier: zg4Zncu0mF/RNtngQZUrQelRWsSnWr9120araN2e5Zk= Subject key identifier: 3A:67:82:11:14:A3:D4:8C:93:D1:3C:7B:71:2F:B6:8F:57:50:DD:20 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94DADB6F5384B23F36A8C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/cd30b33c-9781-3551-b7e0-33fa485c82f8.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:da:db:6f:53:84:b2:3f:36:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=1cbb4e60-cefa-4796-84dd-a63d8095622c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c9:b0:f7:7d:a2:e2:53:a0:35:fa:ec:81:e7: a5:13:56:26:91:8b:24:b1:27:65:cd:df:bc:fa:65: 42:61:34:76:58:2a:ec:4a:f4:08:2e:ea:be:18:84: 9d:0f:ec:e2:08:5e:f0:90:03:bb:30:7d:1d:63:81: 1f:90:a0:99:6d:ac:33:3e:1e:0f:e9:5b:81:97:51: ab:a4:cf:97:bb:09:19:4c:36:53:0b:a5:75:69:a8: 84:41:2b:e3:2b:ee:36:30:13:b1:81:86:35:de:15: 6d:86:6c:04:28:d0:f6:a6:32:6e:9c:d8:e4:c2:51: ec:ed:97:aa:d6:b7:b0:45:b0:9b:01:a3:2b:72:18: f6:c7:a2:2e:a6:4a:cb:d4:41:09:ad:29:b7:6f:14: 66:ce:77:a7:cd:5e:f0:d4:bd:da:83:3f:be:13:8b: 66:f7:d1:d6:44:f1:ab:44:04:18:cb:e2:39:d5:99: 8f:8b:18:23:d1:43:8d:e6:9d:bc:73:9a:15:94:56: b5:8c:56:4d:ab:a3:4a:f5:d6:d2:b7:0f:67:23:c2: f8:40:1b:8a:27:fb:39:b5:91:7f:86:99:9e:3b:ea: 6a:b9:04:ba:46:ba:46:0a:95:17:bd:22:e0:4a:fd: bd:c7:da:b5:c9:cc:3a:a0:d1:07:f5:1b:ee:f8:b8: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:67:82:11:14:A3:D4:8C:93:D1:3C:7B:71:2F:B6:8F:57:50:DD:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/cd30b33c-9781-3551-b7e0-33fa485c82f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:4d:53:a2:eb:47:5f:9e:aa:17:00:0e:3d:e5:b6:7d:52:bb: 04:c3:74:65:0d:24:f5:02:30:62:b6:01:29:e5:79:49:4d:76: c4:61:f0:56:dc:b1:6d:dd:a5:ff:58:19:d4:5a:e9:ce:53:8f: f2:30:62:62:21:1a:ba:af:48:55:60:2d:d0:97:b2:4d:4e:83: e5:a5:b6:f7:e0:05:ef:d1:02:32:e8:a6:35:6a:24:e3:72:38: 8e:3b:57:46:ef:0c:ce:ef:9f:ab:94:1c:ec:1b:43:f2:8b:f2: eb:4f:07:f0:0c:84:8b:37:56:11:27:4d:dd:b8:9e:5b:be:28: 19:05:bd:c9:c7:33:90:f0:99:89:a8:d2:47:6d:c2:91:53:49: 77:94:52:5f:d6:e2:22:de:03:f4:bb:77:84:1e:0e:34:39:87: 6b:0f:08:c0:ee:04:79:7a:65:1b:fd:75:ff:30:b1:c2:e3:7d: c4:cc:7b:9c:dc:31:d5:d6:24:d7:63:3a:5a:c5:2b:82:36:3a: 27:3c:6f:5f:b3:46:8b:81:06:18:2e:ec:44:24:de:88:26:20: cb:06:1a:8b:40:06:fd:77:85:2d:ea:62:5e:91:5c:dd:50:cc: f8:2a:fa:9f:ab:51:4b:2a:39:b2:ce:aa:bd:f4:a5:d3:12:0f: 04:ca:48:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNrbb1OEsj82qMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MWNiYjRlNjAtY2VmYS00Nzk2LTg0ZGQtYTYzZDgwOTU2MjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsmw932i4lOgNfrsgeelE1YmkYsksSdlzd+8 +mVCYTR2WCrsSvQILuq+GISdD+ziCF7wkAO7MH0dY4EfkKCZbawzPh4P6VuBl1Gr pM+XuwkZTDZTC6V1aaiEQSvjK+42MBOxgYY13hVthmwEKND2pjJunNjkwlHs7Zeq 1rewRbCbAaMrchj2x6IupkrL1EEJrSm3bxRmznenzV7w1L3agz++E4tm99HWRPGr RAQYy+I51ZmPixgj0UON5p28c5oVlFa1jFZNq6NK9dbStw9nI8L4QBuKJ/s5tZF/ hpmeO+pquQS6RrpGCpUXvSLgSv29x9q1ycw6oNEH9Rvu+LgXpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpnghEUo9SMk9E8e3Evto9XUN0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvY2QzMGIzM2MtOTc4MS0z NTUxLWI3ZTAtMzNmYTQ4NWM4MmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRNU6LrR1+eqhcADj3ltn1SuwTDdGUNJPUCMGK2ASnleUlNdsRh8Fbc sW3dpf9YGdRa6c5Tj/IwYmIhGrqvSFVgLdCXsk1Og+WltvfgBe/RAjLopjVqJONy OI47V0bvDM7vn6uUHOwbQ/KL8utPB/AMhIs3VhEnTd24nlu+KBkFvcnHM5DwmYmo 0kdtwpFTSXeUUl/W4iLeA/S7d4QeDjQ5h2sPCMDuBHl6ZRv9df8wscLjfcTMe5zc MdXWJNdjOlrFK4I2Oic8b1+zRouBBhgu7EQk3ogmIMsGGotABv13hS3qYl6RXN1Q zPgq+p+rUUsqObLOqr30pdMSDwTKSB8= -----END CERTIFICATE-----Generated at Tue Jul 21 01:40:48 2026 by rpki-client