$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d0d668aa-4ddb-3397-8c73-9d5ae9e9a42c.roa File: d0d668aa-4ddb-3397-8c73-9d5ae9e9a42c.roa (raw, json) Hash identifier: DocrWNOMQGupKvUp8OtvGA/7mV/QZw3KcCnVwX0NLFc= Subject key identifier: B4:2C:0D:C9:D3:5A:99:4E:E2:45:60:0C:FF:AC:EA:46:35:3B:BF:29 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D6A531414E8EB92D9500 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d0d668aa-4ddb-3397-8c73-9d5ae9e9a42c.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d6:a5:31:41:4e:8e:b9:2d:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=dd3b02cf-a3f6-489d-8858-d97786d667d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f9:37:ee:1c:34:5b:e0:c0:f0:f3:e4:cd:90: 68:c4:c5:4b:38:47:aa:60:b9:23:76:a7:67:36:13: fe:96:68:64:08:63:df:53:5a:7a:7c:88:26:cc:d9: d1:34:cf:3d:37:7a:e7:ff:80:69:cc:f9:5c:60:d4: d1:9d:5a:68:a2:36:d7:78:82:b5:6f:dc:9b:bc:98: 73:0b:57:59:0e:ab:d8:26:92:ed:0e:20:67:e0:74: 10:0f:9a:f2:3e:be:bc:4a:6e:32:36:c9:c6:d5:b5: 31:07:bd:c1:0d:34:9b:0c:4c:08:03:43:76:fd:ab: f6:26:6e:aa:3f:13:f1:be:80:34:8a:00:fd:bb:c8: cc:03:8a:d3:95:85:2b:67:2d:1f:46:eb:6a:00:77: d8:8b:a0:dc:4e:be:aa:86:04:91:7c:49:f9:a7:46: d4:66:dc:9f:6c:48:4c:e3:2a:db:8a:f1:a0:44:09: fc:16:48:2e:2c:61:b7:2b:19:df:7d:40:97:6a:96: d5:85:05:98:21:91:d9:02:77:ba:e7:4c:3a:9a:7d: 6e:e4:1e:e7:d8:7d:10:03:52:48:9b:d6:74:11:35: 5d:24:5a:b2:63:50:51:cc:d3:20:ed:36:c2:ee:86: 99:96:fe:ab:7e:9a:e7:7a:df:70:fd:a4:b4:39:58: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2C:0D:C9:D3:5A:99:4E:E2:45:60:0C:FF:AC:EA:46:35:3B:BF:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d0d668aa-4ddb-3397-8c73-9d5ae9e9a42c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:0a:cb:8b:60:94:59:dd:02:11:e6:45:28:42:9e:a6:6c:64: 4a:1a:25:3d:d0:e7:d9:78:80:5c:b2:ab:36:78:1b:fa:ef:65: d5:ab:1b:dd:ed:4c:2e:38:3e:9b:5a:e3:6b:ea:18:e6:06:61: 60:0f:de:fa:bb:74:8b:7a:9d:d7:1b:93:eb:4c:c7:4f:2e:18: 7f:d0:8d:57:5e:c3:a8:43:d0:c5:b0:6d:ba:35:f7:eb:21:cb: e4:e7:db:d0:07:95:73:99:19:e7:3d:cf:14:64:46:d2:c8:66: 3e:0a:bd:b5:d2:44:73:06:b2:11:03:c5:18:83:30:4d:15:ce: 2c:a8:7b:dd:9e:24:e1:90:1a:b4:72:47:0e:ee:f5:d2:1c:31: be:15:1a:ae:4e:8c:9e:d0:03:32:ce:ed:41:80:a6:90:b4:58: fa:6b:67:6a:b5:11:01:98:cd:33:75:63:52:23:ed:e6:39:78: ab:04:fb:76:79:22:dd:20:e3:a8:13:07:f9:99:d0:ff:b1:ee: 90:ee:3a:79:9e:59:06:e2:6b:a1:37:31:d5:dd:b9:71:03:a9: 4b:c4:66:d4:2c:f4:b7:c2:4d:d9:b7:cc:b4:17:b0:26:8b:29: c6:8b:95:85:59:f1:f1:7f:a8:96:6a:35:f6:36:eb:39:20:4f: fa:07:6c:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNalMUFOjrktlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZGQzYjAyY2YtYTNmNi00ODlkLTg4NTgtZDk3Nzg2ZDY2N2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivk37hw0W+DA8PPkzZBoxMVLOEeqYLkjdqdn NhP+lmhkCGPfU1p6fIgmzNnRNM89N3rn/4BpzPlcYNTRnVpoojbXeIK1b9ybvJhz C1dZDqvYJpLtDiBn4HQQD5ryPr68Sm4yNsnG1bUxB73BDTSbDEwIA0N2/av2Jm6q PxPxvoA0igD9u8jMA4rTlYUrZy0fRutqAHfYi6DcTr6qhgSRfEn5p0bUZtyfbEhM 4yrbivGgRAn8FkguLGG3KxnffUCXapbVhQWYIZHZAne650w6mn1u5B7n2H0QA1JI m9Z0ETVdJFqyY1BRzNMg7TbC7oaZlv6rfprnet9w/aS0OViHgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQsDcnTWplO4kVgDP+s6kY1O78pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZDBkNjY4YWEtNGRkYi0z Mzk3LThjNzMtOWQ1YWU5ZTlhNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0Ky4tglFndAhHmRShCnqZsZEoaJT3Q59l4gFyyqzZ4G/rvZdWrG93t TC44Ppta42vqGOYGYWAP3vq7dIt6ndcbk+tMx08uGH/QjVdew6hD0MWwbbo19+sh y+Tn29AHlXOZGec9zxRkRtLIZj4KvbXSRHMGshEDxRiDME0Vziyoe92eJOGQGrRy Rw7u9dIcMb4VGq5OjJ7QAzLO7UGAppC0WPprZ2q1EQGYzTN1Y1Ij7eY5eKsE+3Z5 It0g46gTB/mZ0P+x7pDuOnmeWQbia6E3MdXduXEDqUvEZtQs9LfCTdm3zLQXsCaL KcaLlYVZ8fF/qJZqNfY26zkgT/oHbNQ= -----END CERTIFICATE-----Generated at Tue Jul 21 13:23:07 2026 by rpki-client