$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e2c572f2-ba28-3d7b-9553-0b75fd75f47a.roa File: e2c572f2-ba28-3d7b-9553-0b75fd75f47a.roa (raw, json) Hash identifier: xkcNWISn64H3KNZk3b/Qo21jY/Bl/uVVq+O9lXGaJw4= Subject key identifier: 28:2C:CB:09:53:F6:EB:0F:B6:74:EF:55:47:A6:90:DC:57:2B:72:15 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D978E92C478026483180 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e2c572f2-ba28-3d7b-9553-0b75fd75f47a.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d9:78:e9:2c:47:80:26:48:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=f3207d8f-863f-4315-b536-4224fe326656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:8e:bb:aa:37:51:62:9f:b2:b8:64:ee:dc: 1b:57:d4:5c:7b:9b:19:2c:9a:e4:58:fe:52:b5:94: d8:b8:eb:80:7c:39:7a:84:57:8a:44:0f:17:45:37: c8:07:0d:d5:8f:26:47:c9:d2:3f:01:20:7d:f1:77: b2:42:c8:30:6b:2c:96:c7:33:f0:db:16:3a:74:ff: 4c:3c:22:b1:b9:64:13:db:8b:e7:15:54:00:7b:db: 66:c8:60:1d:65:9d:12:a5:ca:f1:12:fd:b6:e2:93: b7:ba:b1:c2:bb:1f:cb:58:e9:60:2f:7b:a9:d0:77: a2:5e:ae:f6:92:e3:7e:d2:28:1b:07:23:75:93:5b: 63:64:54:57:4c:20:6d:57:ef:5c:5c:dc:b7:66:d8: d1:a5:3c:1b:15:3e:1d:be:e2:35:31:0c:e7:f8:59: e0:c1:31:e0:8c:41:51:a6:32:96:4e:50:6a:a0:e4: c2:f7:da:57:37:92:27:1c:7a:46:9d:5d:86:e6:83: bd:21:80:e9:f6:62:2b:39:2b:91:70:56:07:b4:53: de:1f:45:48:2f:26:42:05:12:fe:a5:0c:33:8f:94: 0b:e7:41:0e:e7:fe:78:95:69:5e:de:d0:22:0e:73: 13:56:2b:e6:98:20:6e:ef:e8:d1:3e:96:5d:67:3f: 94:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2C:CB:09:53:F6:EB:0F:B6:74:EF:55:47:A6:90:DC:57:2B:72:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e2c572f2-ba28-3d7b-9553-0b75fd75f47a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:4d:1c:4c:39:00:c4:19:83:ed:3b:80:ea:6a:64:7f:ef:39: 24:2c:4f:94:52:bc:52:e2:de:df:08:ef:b6:63:68:82:bd:16: 3b:f5:4e:c1:f3:39:cc:0b:45:a0:75:6e:5b:ce:d8:a8:d7:bd: 19:33:d6:47:e0:fd:02:37:cd:00:0b:bc:12:f0:0c:a7:bc:df: 1c:ca:ab:87:f4:ab:0c:ca:f9:c1:9c:f4:14:a6:f5:56:ed:1d: d1:0c:1e:81:d1:33:42:ac:30:a3:a5:be:6c:9e:33:f1:f6:d3: 6f:70:e4:20:a0:46:26:66:00:e0:25:c7:80:01:65:40:f6:9a: ce:c8:dd:c3:8b:28:62:09:c0:c6:54:dc:32:49:75:20:83:8a: c5:de:09:f2:08:cf:b6:6d:29:a5:a1:a5:5c:4e:58:39:42:a5: 59:42:d5:aa:de:bf:a9:c3:74:cb:26:2a:46:c8:1f:b9:9b:f1: 86:0f:70:05:67:89:c5:de:7d:cf:67:f6:40:57:d4:7a:c2:28: 5c:a7:6a:bf:2c:51:4e:00:d9:18:0c:3e:e0:02:57:76:d4:c9: a5:08:19:85:9b:62:75:02:84:01:7c:ed:97:f0:a9:7f:9a:0f: 05:a3:17:b1:a9:c2:f0:fa:d3:24:e4:3a:ce:dd:78:c1:78:34: a2:f5:9f:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNl46SxHgCZIMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZjMyMDdkOGYtODYzZi00MzE1LWI1MzYtNDIyNGZlMzI2NjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqCOu6o3UWKfsrhk7twbV9Rce5sZLJrkWP5S tZTYuOuAfDl6hFeKRA8XRTfIBw3VjyZHydI/ASB98XeyQsgwayyWxzPw2xY6dP9M PCKxuWQT24vnFVQAe9tmyGAdZZ0SpcrxEv224pO3urHCux/LWOlgL3up0HeiXq72 kuN+0igbByN1k1tjZFRXTCBtV+9cXNy3ZtjRpTwbFT4dvuI1MQzn+FngwTHgjEFR pjKWTlBqoOTC99pXN5InHHpGnV2G5oO9IYDp9mIrOSuRcFYHtFPeH0VILyZCBRL+ pQwzj5QL50EO5/54lWle3tAiDnMTVivmmCBu7+jRPpZdZz+UfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgsywlT9usPtnTvVUemkNxXK3IVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZTJjNTcyZjItYmEyOC0z ZDdiLTk1NTMtMGI3NWZkNzVmNDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRNHEw5AMQZg+07gOpqZH/vOSQsT5RSvFLi3t8I77ZjaIK9Fjv1TsHz OcwLRaB1blvO2KjXvRkz1kfg/QI3zQALvBLwDKe83xzKq4f0qwzK+cGc9BSm9Vbt HdEMHoHRM0KsMKOlvmyeM/H2029w5CCgRiZmAOAlx4ABZUD2ms7I3cOLKGIJwMZU 3DJJdSCDisXeCfIIz7ZtKaWhpVxOWDlCpVlC1arev6nDdMsmKkbIH7mb8YYPcAVn icXefc9n9kBX1HrCKFynar8sUU4A2RgMPuACV3bUyaUIGYWbYnUChAF87ZfwqX+a DwWjF7GpwvD60yTkOs7deMF4NKL1nzs= -----END CERTIFICATE-----Generated at Tue Jul 21 01:40:49 2026 by rpki-client