$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e6d42ce8-b111-30a1-90be-ed51efa22d6a.roa File: e6d42ce8-b111-30a1-90be-ed51efa22d6a.roa (raw, json) Hash identifier: t0DKC8OrH04kgWtX87RTCcsnFoxUPRiaJVC1QUiiyUQ= Subject key identifier: 81:85:3C:DA:15:38:28:58:8D:FD:A3:79:BE:D7:98:40:88:C1:2A:35 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D678342DB742F1A58900 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e6d42ce8-b111-30a1-90be-ed51efa22d6a.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d6:78:34:2d:b7:42:f1:a5:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=3a1f225a-4409-4e6b-95e8-4b9089d843c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:81:06:71:ef:55:a1:30:e8:e9:e3:72:82:82: 55:32:47:b4:95:24:2b:5b:c1:fd:5f:d0:e6:83:80: ca:36:09:e8:7d:c9:c4:09:e8:b4:82:30:c9:c4:49: 45:1f:c5:fe:8c:47:21:bc:cf:b3:38:ff:ea:3c:c1: 69:57:8a:4f:02:df:8a:35:3c:65:fa:ef:b4:5b:c9: 04:b6:c1:4f:d8:f1:48:9f:d8:d0:79:46:c4:3b:b1: cd:31:a4:74:79:9f:a5:82:07:a2:8f:7d:06:ab:fc: db:e6:7c:4e:60:b9:c8:c8:ab:8c:5b:74:15:f8:0b: fc:62:78:b0:eb:50:3c:9e:4a:a9:74:ec:95:bb:ed: 06:42:01:e2:5d:01:d3:26:6a:01:78:3c:2c:04:aa: 47:17:b9:fe:f2:6d:a8:a4:bc:51:ba:cf:d5:96:e0: b6:47:7d:33:b3:c8:cd:ce:66:20:ad:a3:ee:36:1b: e8:05:ce:b6:d2:90:49:ff:99:30:1e:14:55:73:11: 18:25:15:96:fa:44:0d:44:41:3c:5b:4a:86:66:7d: 78:25:51:75:de:ae:3e:2c:b2:ff:b2:91:57:31:0f: 07:ac:5c:49:36:ae:b4:31:d4:8d:c7:84:be:d9:33: 30:34:cb:2d:1a:92:54:81:56:32:f3:b3:f4:fa:ef: 0a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:85:3C:DA:15:38:28:58:8D:FD:A3:79:BE:D7:98:40:88:C1:2A:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e6d42ce8-b111-30a1-90be-ed51efa22d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:57:b1:95:e2:80:43:a4:85:09:88:8d:a1:ae:01:c0:0b:78: 0a:67:b9:44:06:d5:33:d1:f5:a8:a8:15:b5:33:97:02:a5:46: 41:e5:57:a0:23:c4:f9:a9:6c:19:01:9a:15:d8:26:55:e1:6d: 1a:47:98:64:c1:b8:17:e7:cb:05:1a:d5:d3:55:e7:31:9b:a2: f9:83:f8:6e:c7:8e:49:c2:ca:c6:2f:09:30:d1:7f:4d:d9:89: 5b:3d:82:7c:85:b2:0a:16:6e:e4:34:63:59:84:5f:f3:34:eb: 4c:80:8c:64:78:1f:4a:60:9c:85:17:a1:28:c0:2d:aa:3b:ee: 00:e9:d2:8f:79:d3:70:08:38:16:9a:6b:c3:31:c5:fa:91:0f: 2f:fd:1f:f8:74:ca:2c:12:4d:0c:17:c2:2c:90:4b:4b:65:e7: ad:81:7d:b8:06:66:34:ab:5e:eb:32:61:23:75:3b:3e:41:61: 26:e7:78:2f:88:8d:68:3c:75:a1:88:fd:c7:94:2a:d1:89:b3: 91:51:a1:47:f2:b5:ad:c7:84:58:87:86:b1:42:80:f3:c7:2a: 36:d4:69:0e:bd:7c:50:1f:9e:f2:72:6a:9d:0b:01:d5:30:10: 51:6d:02:97:1d:bd:c0:f8:18:ed:10:ad:ef:06:40:1c:0e:ed: 4a:28:4e:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNZ4NC23QvGliQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk M2ExZjIyNWEtNDQwOS00ZTZiLTk1ZTgtNGI5MDg5ZDg0M2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIEGce9VoTDo6eNygoJVMke0lSQrW8H9X9Dm g4DKNgnofcnECei0gjDJxElFH8X+jEchvM+zOP/qPMFpV4pPAt+KNTxl+u+0W8kE tsFP2PFIn9jQeUbEO7HNMaR0eZ+lggeij30Gq/zb5nxOYLnIyKuMW3QV+Av8Yniw 61A8nkqpdOyVu+0GQgHiXQHTJmoBeDwsBKpHF7n+8m2opLxRus/VluC2R30zs8jN zmYgraPuNhvoBc620pBJ/5kwHhRVcxEYJRWW+kQNREE8W0qGZn14JVF13q4+LLL/ spFXMQ8HrFxJNq60MdSNx4S+2TMwNMstGpJUgVYy87P0+u8KswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGFPNoVOChYjf2jeb7XmECIwSo1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZTZkNDJjZTgtYjExMS0z MGExLTkwYmUtZWQ1MWVmYTIyZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRXsZXigEOkhQmIjaGuAcALeApnuUQG1TPR9aioFbUzlwKlRkHlV6Aj xPmpbBkBmhXYJlXhbRpHmGTBuBfnywUa1dNV5zGbovmD+G7HjknCysYvCTDRf03Z iVs9gnyFsgoWbuQ0Y1mEX/M060yAjGR4H0pgnIUXoSjALao77gDp0o9503AIOBaa a8MxxfqRDy/9H/h0yiwSTQwXwiyQS0tl562BfbgGZjSrXusyYSN1Oz5BYSbneC+I jWg8daGI/ceUKtGJs5FRoUfyta3HhFiHhrFCgPPHKjbUaQ69fFAfnvJyap0LAdUw EFFtApcdvcD4GO0Qre8GQBwO7UooTt4= -----END CERTIFICATE-----Generated at Tue Jul 21 13:23:57 2026 by rpki-client