$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e71b461c-c62f-3492-8d21-0225f4009126.roa File: e71b461c-c62f-3492-8d21-0225f4009126.roa (raw, json) Hash identifier: RfKLnHeSOZJStRv0I2kibX+QaOF9eoHesmTrElE5moY= Subject key identifier: 87:17:1A:79:1B:06:BB:66:FD:E0:2A:4E:9E:30:50:F8:E5:0C:A5:C8 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7634F58F28F4E5B9CC8298C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e71b461c-c62f-3492-8d21-0225f4009126.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 64.16.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:f5:8f:28:f4:e5:b9:cc:82:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=02358b86-b442-45fc-a1dd-917054a1d92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:66:f8:16:67:f3:4d:ac:53:8e:fd:ab:06:09: 8b:47:28:85:c5:21:eb:a1:19:65:9d:85:72:00:a4: 81:99:06:56:05:ff:76:38:e5:93:da:9b:57:d2:94: 5c:fa:7c:dc:8b:2e:64:b2:f1:5e:94:0e:02:68:bb: 30:00:bb:4f:88:f7:3a:58:f3:9d:f7:bd:41:a3:0f: 6e:42:83:d3:21:ce:b0:89:00:2c:25:b2:0a:68:b5: ef:19:f8:c4:0d:b7:ff:4d:73:77:af:62:1a:ce:89: 7b:3c:7d:a2:24:13:39:61:e7:3a:1a:10:62:46:54: b2:cf:7b:85:2d:48:74:3f:6b:3f:5f:2d:70:91:90: a7:00:a1:9a:f3:e1:93:1d:d7:e9:72:b6:e6:e6:05: ca:0b:49:ae:c9:0f:00:3c:71:b0:e1:f5:af:7a:07: 76:fb:a6:ae:c8:43:d1:15:f7:32:b7:e9:16:ec:7b: 0e:61:c3:4a:bb:4b:0b:66:5d:94:d2:37:a8:3f:4f: 5b:4c:f2:48:ea:12:5c:bb:93:60:be:de:0d:24:51: 33:68:00:e5:42:ff:ad:d5:68:51:26:e5:11:1e:af: 29:94:69:3f:b0:4e:88:16:db:6d:0e:4f:00:04:03: 6a:ca:39:cf:61:80:9e:a5:31:8b:f5:88:17:7b:2c: 46:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:17:1A:79:1B:06:BB:66:FD:E0:2A:4E:9E:30:50:F8:E5:0C:A5:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e71b461c-c62f-3492-8d21-0225f4009126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:70:7f:e2:86:27:ce:66:17:02:ce:2d:73:ea:e9:19:1e:ee: 29:54:56:2a:be:42:a9:ba:c6:43:30:66:46:a4:d8:24:6a:e8: 72:58:64:6d:63:85:ad:af:4a:2c:b3:0a:06:ba:b9:48:75:40: c4:11:92:48:e6:d0:db:d4:29:e8:b2:4d:f6:72:42:a9:88:a8: 99:c5:f3:fa:d2:b7:63:9b:fd:19:34:5e:f7:9e:2b:4d:24:c1: a2:ec:df:da:45:cb:9e:b6:a2:19:a7:6f:4f:16:86:5d:11:c0: b8:93:2f:9a:1a:05:26:1f:aa:27:b3:be:6c:83:f5:cb:db:e8: 0b:e7:92:f2:1b:3a:ba:94:7b:b7:12:aa:d6:d4:ba:91:9c:2f: 61:99:3c:81:1f:c3:49:53:13:27:40:aa:f6:23:bd:f2:c8:f7: e7:6c:fe:55:75:69:59:f5:af:36:60:13:ad:4c:83:31:6b:fc: 46:44:b4:da:7b:5f:73:a5:fc:17:b8:4e:5c:0b:22:7c:f4:e7: 3c:6e:dc:87:7e:74:fd:d2:e2:7e:d2:70:4f:7a:7a:89:b1:f6: d9:53:83:3e:73:fd:55:0a:f4:8b:3e:af:37:af:13:b8:a4:a1: 3f:78:aa:3b:79:c3:fd:b6:b5:c7:70:fa:4f:ba:96:e0:de:61: b6:7d:18:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NPWPKPTlucyCmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk MDIzNThiODYtYjQ0Mi00NWZjLWExZGQtOTE3MDU0YTFkOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGb4FmfzTaxTjv2rBgmLRyiFxSHroRllnYVy AKSBmQZWBf92OOWT2ptX0pRc+nzciy5ksvFelA4CaLswALtPiPc6WPOd971Bow9u QoPTIc6wiQAsJbIKaLXvGfjEDbf/TXN3r2Iazol7PH2iJBM5Yec6GhBiRlSyz3uF LUh0P2s/Xy1wkZCnAKGa8+GTHdfpcrbm5gXKC0muyQ8APHGw4fWvegd2+6auyEPR Ffcyt+kW7HsOYcNKu0sLZl2U0jeoP09bTPJI6hJcu5Ngvt4NJFEzaADlQv+t1WhR JuURHq8plGk/sE6IFtttDk8ABANqyjnPYYCepTGL9YgXeyxGsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcXGnkbBrtm/eAqTp4wUPjlDKXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZTcxYjQ2MWMtYzYyZi0z NDkyLThkMjEtMDIyNWY0MDA5MTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxwf+KGJ85mFwLOLXPq6Rke7ilUViq+Qqm6xkMwZkak2CRq6HJYZG1j ha2vSiyzCga6uUh1QMQRkkjm0NvUKeiyTfZyQqmIqJnF8/rSt2Ob/Rk0XveeK00k waLs39pFy562ohmnb08Whl0RwLiTL5oaBSYfqiezvmyD9cvb6AvnkvIbOrqUe7cS qtbUupGcL2GZPIEfw0lTEydAqvYjvfLI9+ds/lV1aVn1rzZgE61MgzFr/EZEtNp7 X3Ol/Be4TlwLInz05zxu3Id+dP3S4n7ScE96eomx9tlTgz5z/VUK9Is+rzevE7ik oT94qjt5w/22tcdw+k+6luDeYbZ9GLg= -----END CERTIFICATE-----Generated at Sat Jul 18 01:19:34 2026 by rpki-client