$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d02ba20e-da65-37f3-b589-bee7bf4fb053.roa File: d02ba20e-da65-37f3-b589-bee7bf4fb053.roa (raw, json) Hash identifier: vAk0gWITnafakuxX6ttyJnpJwXB01p8QJv+L7xJsTiE= Subject key identifier: B1:7B:F0:B6:3E:7C:F2:A3:70:03:2F:BC:22:E9:0A:B0:F2:C2:7F:1B Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D28E623C9A1AE17ABA80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d02ba20e-da65-37f3-b589-bee7bf4fb053.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 64.16.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d2:8e:62:3c:9a:1a:e1:7a:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=724fa483-da93-45ed-be10-61ca50970df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:db:f8:d3:70:78:5a:32:8c:54:f7:16:5d:63: ad:86:c3:da:66:85:c0:4d:ba:bd:f4:d5:1d:c7:08: 43:4b:00:cb:2b:18:e1:7b:d6:f9:e0:50:52:03:04: 5a:bc:70:3b:cd:54:32:a7:e7:56:c9:7f:b7:ac:e6: bf:9f:ae:48:76:f7:e0:15:59:be:dc:62:5c:7b:68: 8c:bb:f6:4f:03:64:9b:d9:c9:e5:6c:38:d3:04:52: de:c9:7a:5e:b8:fe:83:ce:aa:ef:b8:ed:48:a5:f7: 59:7c:0b:1e:c1:36:b0:6b:4c:84:c7:19:88:a2:16: 87:30:15:d4:d2:f6:6b:bb:28:9d:00:a5:e6:6a:7d: 04:6f:63:c3:d7:14:ec:20:3d:66:ac:07:c6:9b:80: 33:52:3b:e1:29:67:bf:25:e1:0b:d2:13:02:4e:cc: db:1c:19:8b:40:8f:2d:21:43:65:6b:a0:4d:03:75: 6a:d4:51:ef:44:f7:f3:f2:e3:ee:f9:71:e5:15:c5: cf:a0:47:f0:f5:9f:4c:31:40:0a:c4:2e:f2:5d:00: db:a7:26:d6:72:9b:c2:44:28:21:30:04:c2:b5:1e: 2f:63:e5:30:a2:b1:54:98:a4:9b:01:0e:a4:3b:fe: 1b:81:de:68:38:50:dc:f3:22:a6:fd:7d:31:6c:6d: a2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7B:F0:B6:3E:7C:F2:A3:70:03:2F:BC:22:E9:0A:B0:F2:C2:7F:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d02ba20e-da65-37f3-b589-bee7bf4fb053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:62:78:38:3c:cb:5d:31:1a:31:8d:80:b4:60:9f:b1:f1:1b: 6b:80:f2:48:90:fc:cf:8f:7c:92:e0:1a:c3:87:88:72:1f:c3: 33:da:b6:f5:bb:ca:95:18:3a:4b:e7:e4:8b:ca:37:fc:99:94: 63:dd:8f:0c:88:e2:66:7f:47:55:aa:dc:fa:c8:fb:4c:42:d7: 41:41:26:86:fb:be:b5:94:36:ea:db:90:f2:6a:4b:2a:ba:f6: 32:a0:d0:83:ab:70:66:d3:3d:1e:46:95:58:6d:11:84:e8:28: 67:c9:81:4c:e6:45:c6:4e:3d:f1:dc:48:85:35:b5:48:3d:da: 2e:69:a5:bd:aa:8a:6d:c4:d4:92:d9:bd:2f:24:7b:f4:14:95: 4f:43:f9:1c:3d:94:9c:5d:a5:53:80:69:41:91:eb:2c:a4:94: fc:5d:2d:f4:3a:41:18:05:91:3f:05:80:6d:48:18:9f:4f:2d: be:e6:a5:a5:3e:1a:d6:a2:d2:09:17:6a:06:94:d3:74:85:88: 11:2e:e1:f1:6c:19:fc:8c:1a:b9:d0:83:de:31:1d:b1:fb:4c: 28:32:2e:98:1d:bc:f3:2a:02:51:20:ce:53:66:5d:91:78:d9: ac:60:ee:16:10:ee:3a:37:f7:fc:53:87:0b:3d:f6:39:13:7f: 9e:bb:9f:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNKOYjyaGuF6uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NzI0ZmE0ODMtZGE5My00NWVkLWJlMTAtNjFjYTUwOTcwZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntv403B4WjKMVPcWXWOthsPaZoXATbq99NUd xwhDSwDLKxjhe9b54FBSAwRavHA7zVQyp+dWyX+3rOa/n65IdvfgFVm+3GJce2iM u/ZPA2Sb2cnlbDjTBFLeyXpeuP6DzqrvuO1IpfdZfAsewTawa0yExxmIohaHMBXU 0vZruyidAKXman0Eb2PD1xTsID1mrAfGm4AzUjvhKWe/JeEL0hMCTszbHBmLQI8t IUNla6BNA3Vq1FHvRPfz8uPu+XHlFcXPoEfw9Z9MMUAKxC7yXQDbpybWcpvCRCgh MATCtR4vY+UworFUmKSbAQ6kO/4bgd5oOFDc8yKm/X0xbG2iJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF78LY+fPKjcAMvvCLpCrDywn8bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZDAyYmEyMGUtZGE2NS0z N2YzLWI1ODktYmVlN2JmNGZiMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhieDg8y10xGjGNgLRgn7HxG2uA8kiQ/M+PfJLgGsOHiHIfwzPatvW7 ypUYOkvn5IvKN/yZlGPdjwyI4mZ/R1Wq3PrI+0xC10FBJob7vrWUNurbkPJqSyq6 9jKg0IOrcGbTPR5GlVhtEYToKGfJgUzmRcZOPfHcSIU1tUg92i5ppb2qim3E1JLZ vS8ke/QUlU9D+Rw9lJxdpVOAaUGR6yyklPxdLfQ6QRgFkT8FgG1IGJ9PLb7mpaU+ Gtai0gkXagaU03SFiBEu4fFsGfyMGrnQg94xHbH7TCgyLpgdvPMqAlEgzlNmXZF4 2axg7hYQ7jo39/xThws99jkTf567n4w= -----END CERTIFICATE-----Generated at Sat Jul 18 01:18:33 2026 by rpki-client