$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d5b25144-3ed7-39de-a799-9a8d9b1938a6.roa File: d5b25144-3ed7-39de-a799-9a8d9b1938a6.roa (raw, json) Hash identifier: kUCrlqudwydF0BHFdSInAbCyNgDwWbyYSulBzDdeRhA= Subject key identifier: E9:5B:B9:8C:E8:DA:06:4F:1E:DC:CD:64:18:97:B9:96:C9:97:D2:69 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D4927E12B19AC7E12600 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d5b25144-3ed7-39de-a799-9a8d9b1938a6.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 64.16.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d4:92:7e:12:b1:9a:c7:e1:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=d96340f9-1641-4cfb-92a1-b78215a6b3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c6:0d:00:28:2c:c8:ac:12:5f:24:89:12:d6: 5e:5d:f6:f5:5d:b0:2f:15:0d:b0:97:f5:4a:23:84: 4f:18:56:f5:f9:2b:5b:c2:c4:90:8e:22:26:43:6a: 8a:28:de:6c:2f:02:4c:bb:e5:a6:c1:53:8f:0b:65: 87:0d:49:9c:36:f0:ae:92:d9:5d:d9:0d:77:9e:66: e5:85:7d:18:44:27:f9:69:61:9f:38:7a:d9:5a:4a: 46:bc:b0:d9:ee:be:47:a4:57:25:7c:27:55:1a:d8: eb:50:72:6f:1b:f9:e5:2e:46:92:9b:c8:0d:8d:6d: c6:76:6c:af:91:30:24:c2:29:ff:a0:a0:6e:b2:57: 5c:59:e4:fa:27:2b:96:fe:97:74:b7:6e:24:4c:c8: 0d:d5:f2:1c:d2:76:b3:a1:df:92:54:ba:be:a3:cc: 48:4d:c5:40:81:d5:d0:8c:27:ce:11:d8:a6:63:5e: af:ce:ff:51:e2:91:71:95:93:6d:d3:e1:f4:15:e6: 6a:d2:8d:ff:47:1e:2a:8a:5f:07:8a:5b:46:be:76: f5:65:a9:50:1f:f5:73:66:5d:34:c2:4f:d5:5d:83: fb:ce:a3:ad:5c:c9:2f:69:b7:48:32:20:ff:e0:13: fa:89:24:f6:d2:e4:c5:c9:a8:96:73:f8:bb:9f:17: 14:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5B:B9:8C:E8:DA:06:4F:1E:DC:CD:64:18:97:B9:96:C9:97:D2:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d5b25144-3ed7-39de-a799-9a8d9b1938a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:26:b8:4b:a5:53:1e:35:49:a1:7b:5d:9e:b1:40:94:3d:a2: 44:27:b7:db:0d:da:45:cf:d3:29:2c:d3:35:3a:5e:0f:55:76: f7:41:11:f9:b4:17:05:5b:58:42:75:eb:99:c9:77:5c:23:0b: d0:a7:8c:7b:32:ea:8c:be:40:26:f4:9b:eb:19:a1:2c:56:cb: 9b:e6:72:fa:62:ac:d4:01:36:df:df:ca:ed:a4:8e:39:00:fa: 7a:1d:7e:81:40:16:35:be:7d:52:cd:9a:1a:c0:ee:de:07:1e: fc:94:c3:dc:f5:aa:c3:55:33:de:66:12:fb:44:4b:fb:03:90: 5d:3c:9a:32:57:78:43:fd:d9:88:dd:a4:ed:27:5e:b0:8a:b4: 78:94:76:d5:21:32:01:e9:d8:c3:f0:ca:fb:e1:e6:d4:08:33: 7c:b2:69:ac:ff:f1:33:23:96:ed:e0:24:65:82:45:c9:33:55: 10:b2:c2:dd:82:e2:06:ef:71:b4:de:e0:55:79:d9:dd:9e:aa: 59:48:b3:d8:17:39:d1:af:89:cd:b5:9a:8b:81:6a:a1:8e:ed: 93:f4:a6:64:78:25:2f:9e:17:1f:47:8d:40:5b:36:27:71:41: 1f:e7:e0:b8:be:36:74:0e:dd:df:4e:c1:d5:b1:7f:ed:66:0a: 20:65:a0:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNSSfhKxmsfhJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZDk2MzQwZjktMTY0MS00Y2ZiLTkyYTEtYjc4MjE1YTZiM2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8YNACgsyKwSXySJEtZeXfb1XbAvFQ2wl/VK I4RPGFb1+StbwsSQjiImQ2qKKN5sLwJMu+WmwVOPC2WHDUmcNvCuktld2Q13nmbl hX0YRCf5aWGfOHrZWkpGvLDZ7r5HpFclfCdVGtjrUHJvG/nlLkaSm8gNjW3Gdmyv kTAkwin/oKBusldcWeT6JyuW/pd0t24kTMgN1fIc0nazod+SVLq+o8xITcVAgdXQ jCfOEdimY16vzv9R4pFxlZNt0+H0FeZq0o3/Rx4qil8HiltGvnb1ZalQH/VzZl00 wk/VXYP7zqOtXMkvabdIMiD/4BP6iST20uTFyaiWc/i7nxcUNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlbuYzo2gZPHtzNZBiXuZbJl9JpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZDViMjUxNDQtM2VkNy0z OWRlLWE3OTktOWE4ZDliMTkzOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwmuEulUx41SaF7XZ6xQJQ9okQnt9sN2kXP0yks0zU6Xg9VdvdBEfm0 FwVbWEJ165nJd1wjC9CnjHsy6oy+QCb0m+sZoSxWy5vmcvpirNQBNt/fyu2kjjkA +nodfoFAFjW+fVLNmhrA7t4HHvyUw9z1qsNVM95mEvtES/sDkF08mjJXeEP92Yjd pO0nXrCKtHiUdtUhMgHp2MPwyvvh5tQIM3yyaaz/8TMjlu3gJGWCRckzVRCywt2C 4gbvcbTe4FV52d2eqllIs9gXOdGvic21mouBaqGO7ZP0pmR4JS+eFx9HjUBbNidx QR/n4Li+NnQO3d9OwdWxf+1mCiBloBY= -----END CERTIFICATE-----Generated at Sat Jul 18 01:19:37 2026 by rpki-client