$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d76c7540-47d3-3727-8b51-14804d7b742d.roa File: d76c7540-47d3-3727-8b51-14804d7b742d.roa (raw, json) Hash identifier: WxaraOzskQ0atY3BWvG5g2lNH6t134LOha7jpbaZOBs= Subject key identifier: A3:B6:DD:EA:F1:1C:28:0C:4B:D1:F7:33:7D:80:E4:78:08:BB:3A:1E Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D8EEA7064FC80BA3D0C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d76c7540-47d3-3727-8b51-14804d7b742d.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d8:ee:a7:06:4f:c8:0b:a3:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=78355c48-fac7-4e42-b896-a23b6ca27237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7e:8a:ed:7a:85:9b:28:2e:80:ec:08:56:e6: 0b:ee:10:21:64:aa:ad:b5:c2:56:12:7a:70:ae:a3: a2:9e:93:55:c6:cc:fd:d6:fc:c2:f0:d8:0f:e3:7a: e2:50:42:2e:c5:b7:32:24:7a:44:aa:6f:31:2c:f9: 3e:01:98:42:f3:2d:b2:79:23:76:c2:a6:8e:91:88: b4:85:98:3f:88:01:8a:fd:fe:d7:12:9b:f3:d7:fd: 56:3d:dc:81:16:2a:8c:1f:25:d5:77:ba:b3:84:60: e1:7e:ee:41:79:0c:5d:dc:51:1d:06:c3:8d:3b:7f: 7c:39:c5:9a:de:70:2a:77:71:cf:e0:6a:c6:88:1c: fd:4e:57:7b:11:cf:a4:cf:2e:40:6c:04:3a:3f:89: c7:08:20:10:03:81:94:11:02:c7:bb:d4:96:c6:4d: 29:c0:d2:84:2e:70:bd:58:0b:aa:6e:bb:e6:0d:39: ed:78:50:43:92:53:3c:dd:b6:ba:1f:7d:18:6c:6a: 58:26:34:18:70:39:ad:e0:6c:42:9c:35:2a:87:c1: a9:ad:fe:eb:c5:8e:82:29:b7:61:55:5e:e4:c1:c3: f3:2c:75:2a:70:b2:fc:4c:31:fc:1a:21:01:04:fb: 92:33:05:1d:c7:7d:8f:91:cd:48:3c:4c:18:4e:43: 8a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B6:DD:EA:F1:1C:28:0C:4B:D1:F7:33:7D:80:E4:78:08:BB:3A:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d76c7540-47d3-3727-8b51-14804d7b742d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8c:fa:da:a1:ea:81:73:da:75:fc:71:80:cc:77:03:c3:24: 46:ec:9c:18:d9:06:85:1e:61:f3:36:9f:2d:44:16:31:5b:0e: 99:5e:e8:68:f0:a9:e6:a1:8f:0f:2e:92:43:5e:71:74:45:93: f8:08:49:81:15:8e:82:ac:7e:47:bc:41:c5:69:18:7b:0c:bc: 22:65:bb:90:e4:7b:f2:af:01:24:ac:c1:3a:46:a4:ad:e0:72: 77:af:b4:b7:7d:3a:44:d4:eb:1a:76:0a:b7:00:5a:60:c1:2c: 7e:72:bb:4c:69:83:a5:e0:bd:87:4d:5f:b2:a6:20:78:a7:76: 2a:70:82:c7:f7:cd:cc:0e:6a:c5:09:cc:91:de:36:f1:4e:5a: 3c:57:a8:fd:90:05:4f:51:00:17:32:e7:92:f1:41:4d:25:bf: a4:64:76:b2:b3:b1:13:79:83:8c:46:d0:4d:56:c4:cd:fd:2a: f7:ac:be:5e:6c:c2:a2:77:aa:cf:5e:b6:e8:5e:6e:36:ff:bf: bc:1f:c7:e7:15:cf:af:04:d7:f1:57:80:36:3e:a9:8e:de:be: 73:08:fe:9c:a7:e9:9b:3b:a0:9b:7b:c4:7c:64:ec:fe:e8:a1: 25:3f:6f:9c:cc:11:8d:bc:72:b1:7b:1b:a6:98:36:1a:bf:25: d9:28:2d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNjupwZPyAuj0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NzgzNTVjNDgtZmFjNy00ZTQyLWI4OTYtYTIzYjZjYTI3MjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH6K7XqFmygugOwIVuYL7hAhZKqttcJWEnpw rqOinpNVxsz91vzC8NgP43riUEIuxbcyJHpEqm8xLPk+AZhC8y2yeSN2wqaOkYi0 hZg/iAGK/f7XEpvz1/1WPdyBFiqMHyXVd7qzhGDhfu5BeQxd3FEdBsONO398OcWa 3nAqd3HP4GrGiBz9Tld7Ec+kzy5AbAQ6P4nHCCAQA4GUEQLHu9SWxk0pwNKELnC9 WAuqbrvmDTnteFBDklM83ba6H30YbGpYJjQYcDmt4GxCnDUqh8Gprf7rxY6CKbdh VV7kwcPzLHUqcLL8TDH8GiEBBPuSMwUdx32Pkc1IPEwYTkOKNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO23erxHCgMS9H3M32A5HgIuzoeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZDc2Yzc1NDAtNDdkMy0z NzI3LThiNTEtMTQ4MDRkN2I3NDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuM+tqh6oFz2nX8cYDMdwPDJEbsnBjZBoUeYfM2ny1EFjFbDple6Gjw qeahjw8ukkNecXRFk/gISYEVjoKsfke8QcVpGHsMvCJlu5Dke/KvASSswTpGpK3g cnevtLd9OkTU6xp2CrcAWmDBLH5yu0xpg6XgvYdNX7KmIHindipwgsf3zcwOasUJ zJHeNvFOWjxXqP2QBU9RABcy55LxQU0lv6RkdrKzsRN5g4xG0E1WxM39Kvesvl5s wqJ3qs9etuhebjb/v7wfx+cVz68E1/FXgDY+qY7evnMI/pyn6Zs7oJt7xHxk7P7o oSU/b5zMEY28crF7G6aYNhq/JdkoLaU= -----END CERTIFICATE-----Generated at Tue Jul 21 01:41:15 2026 by rpki-client