$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d6815317-1068-3438-a4a6-f31789b0ba3a.roa File: d6815317-1068-3438-a4a6-f31789b0ba3a.roa (raw, json) Hash identifier: ymHDiozfRSH1qatm63v0wFhjORziajL0K25SjrpFyy4= Subject key identifier: 73:2D:07:00:9D:66:87:C9:B0:07:93:C2:E6:8A:75:36:12:05:F5:73 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D5B47CB1E0508714F6C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d6815317-1068-3438-a4a6-f31789b0ba3a.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d5:b4:7c:b1:e0:50:87:14:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=307a2348-6413-4227-a386-1e39e665977f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:98:e9:92:99:ec:cb:5b:ac:e1:81:4c:b2: 6f:2f:89:5a:09:0f:a8:88:fb:e2:ea:47:a7:d3:95: 2d:fd:bb:81:e8:7e:28:20:9c:cf:b4:b9:49:ad:b8: 8b:fe:50:53:dc:1b:39:37:ae:fd:61:db:7e:b3:73: f7:f1:5c:6f:b5:cb:14:41:15:19:4a:b8:8d:dc:44: 0d:5d:90:a2:d6:6b:01:04:9b:c8:75:ea:1d:bf:ee: d8:44:dc:a4:85:06:b5:c0:54:ab:7a:a8:de:0d:36: dc:47:cb:4d:66:54:5d:7b:61:79:4c:e0:9e:14:d9: ec:f2:9b:92:a1:0a:30:14:c9:e6:6b:69:e0:3a:db: 84:cc:e4:3d:16:6a:6e:b7:dc:3b:66:fd:f9:d3:2d: b2:88:11:32:b5:4d:62:58:41:ba:33:1b:7a:44:f8: 6f:70:fd:19:cd:7c:a0:1d:59:da:a9:63:9a:56:6e: 3e:f0:4e:6c:84:e0:4a:25:d4:d0:62:b3:05:82:78: 0b:30:79:7a:64:4f:dd:2f:1d:d1:bf:21:89:b6:43: 37:ac:69:2d:42:d7:c6:55:42:7c:a7:c5:54:b7:53: 17:cf:e8:56:80:67:3f:45:fd:46:49:2e:5e:0e:ad: 23:39:f6:5c:92:80:78:b8:91:55:d4:71:84:2a:20: 41:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2D:07:00:9D:66:87:C9:B0:07:93:C2:E6:8A:75:36:12:05:F5:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d6815317-1068-3438-a4a6-f31789b0ba3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:1f:48:fa:64:bc:12:4d:e1:b1:b8:c3:38:62:d6:a6:40:a1: a3:fe:2a:17:fa:fb:69:b6:60:e4:a9:34:39:e5:09:2e:d1:52: c8:49:5c:5f:ed:51:3a:4a:f7:32:77:ef:89:a0:cf:91:5c:18: 96:2f:8a:7b:a3:65:6d:1b:27:10:ae:c1:17:b5:a7:9f:25:38: d7:06:c3:77:fe:34:34:b3:bb:69:a2:ae:1a:a4:46:1c:b4:36: cd:a7:04:81:b1:c9:89:7c:55:29:fb:89:27:39:b9:de:eb:c1: 98:b3:55:42:cd:f9:05:c4:56:a7:cc:10:76:13:98:c8:7a:bc: 07:90:af:81:d6:7d:6d:5b:99:3b:69:71:28:0c:11:29:7a:bb: 39:c2:ca:0c:13:92:98:c3:05:36:5f:df:c5:3b:db:78:85:3c: 09:bf:75:be:3b:0d:df:41:be:db:47:60:01:81:c5:e6:89:5c: db:52:dc:15:c1:1a:ff:4c:b0:15:bb:0c:e0:7a:a9:b2:ed:64: 15:e0:b1:72:89:00:88:69:d4:38:45:f0:52:e8:19:0e:d9:9b: 91:48:63:c5:83:2e:1c:7f:77:05:98:1b:e6:5d:fe:bd:2e:00: 40:58:fd:1d:a9:38:8a:a4:00:8d:1e:8e:a3:a8:76:8f:02:ac: db:e7:b1:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNW0fLHgUIcU9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MzA3YTIzNDgtNjQxMy00MjI3LWEzODYtMWUzOWU2NjU5NzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOOY6ZKZ7MtbrOGBTLJvL4laCQ+oiPvi6ken 05Ut/buB6H4oIJzPtLlJrbiL/lBT3Bs5N679Ydt+s3P38VxvtcsUQRUZSriN3EQN XZCi1msBBJvIdeodv+7YRNykhQa1wFSreqjeDTbcR8tNZlRde2F5TOCeFNns8puS oQowFMnma2ngOtuEzOQ9Fmput9w7Zv350y2yiBEytU1iWEG6Mxt6RPhvcP0ZzXyg HVnaqWOaVm4+8E5shOBKJdTQYrMFgngLMHl6ZE/dLx3RvyGJtkM3rGktQtfGVUJ8 p8VUt1MXz+hWgGc/Rf1GSS5eDq0jOfZckoB4uJFV1HGEKiBBIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMtBwCdZofJsAeTwuaKdTYSBfVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZDY4MTUzMTctMTA2OC0z NDM4LWE0YTYtZjMxNzg5YjBiYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUfSPpkvBJN4bG4wzhi1qZAoaP+Khf6+2m2YOSpNDnlCS7RUshJXF/t UTpK9zJ374mgz5FcGJYvinujZW0bJxCuwRe1p58lONcGw3f+NDSzu2mirhqkRhy0 Ns2nBIGxyYl8VSn7iSc5ud7rwZizVULN+QXEVqfMEHYTmMh6vAeQr4HWfW1bmTtp cSgMESl6uznCygwTkpjDBTZf38U723iFPAm/db47Dd9BvttHYAGBxeaJXNtS3BXB Gv9MsBW7DOB6qbLtZBXgsXKJAIhp1DhF8FLoGQ7Zm5FIY8WDLhx/dwWYG+Zd/r0u AEBY/R2pOIqkAI0ejqOodo8CrNvnsaw= -----END CERTIFICATE-----Generated at Tue Jul 21 13:26:09 2026 by rpki-client