$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ecf86511-9992-31dd-8747-d6fa58099e49.roa File: ecf86511-9992-31dd-8747-d6fa58099e49.roa (raw, json) Hash identifier: wsy9EuTz0Z9PBfq6hGN9HG5N5Vyx2zYGlcItKbyEUso= Subject key identifier: 7C:B8:E5:BD:13:A7:68:FE:7B:14:0C:85:7A:F9:E1:C6:58:02:74:F5 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D5D251D529E0662F1C80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ecf86511-9992-31dd-8747-d6fa58099e49.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d5:d2:51:d5:29:e0:66:2f:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=0cc94282-65bb-44b1-8e13-77e4d6675779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:15:10:76:bd:9e:cc:1f:5e:89:28:86:12: 3c:30:69:63:cc:f5:c0:f7:15:da:af:0f:c0:4e:80: 75:28:bc:e1:50:51:bc:55:d7:a6:0b:9c:3a:9a:f5: d2:02:c7:5c:0b:77:39:cb:46:a8:8e:8f:18:bc:be: d0:61:40:c1:cf:2f:a2:9f:8e:e0:4e:fd:d2:1b:44: 10:54:3f:09:75:8c:f1:20:28:f0:58:f8:bb:1b:49: c5:32:05:60:6d:a7:87:24:80:e4:1e:0f:7f:bb:fb: fa:de:b6:b9:54:e5:11:17:d0:cb:ae:80:95:16:66: 4d:96:a9:e9:bc:6d:7d:c7:de:9a:90:66:48:8c:05: 84:bf:8e:2a:b5:48:c6:d9:3b:22:4f:95:65:19:bc: a0:9f:f3:e8:25:97:0e:52:62:41:a2:0b:d8:04:2c: 5d:3d:f9:e5:0b:05:f4:45:7f:9f:7a:c2:8a:9d:52: e8:42:b1:4c:0b:6b:83:c2:e0:de:9a:41:7d:75:6b: 0c:4f:45:76:24:c6:f5:f6:76:b9:95:10:0d:13:50: ae:53:2b:3f:0e:b4:d1:24:53:89:bf:ba:59:74:9d: 58:d7:c7:69:53:c2:e9:e2:79:c8:9f:1c:15:71:42: 06:28:c7:14:ea:9a:d9:82:cc:f0:0b:36:c5:32:08: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B8:E5:BD:13:A7:68:FE:7B:14:0C:85:7A:F9:E1:C6:58:02:74:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ecf86511-9992-31dd-8747-d6fa58099e49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b5:15:26:ac:ed:24:7d:90:9d:a0:37:4b:8c:49:6b:4f:a6: 6c:c5:c2:5f:12:1f:54:e2:3f:1c:b9:df:59:e5:1d:de:1b:9a: 00:d2:45:8a:14:99:42:4e:f0:81:cb:0a:6a:2c:a9:98:e1:bd: 81:bb:16:5b:e1:02:4f:a2:9c:92:c6:14:31:f7:e4:93:46:b4: 6d:d6:50:2c:35:7d:e1:03:35:8d:f0:9d:bb:4e:90:d2:2e:25: 88:a3:88:d7:96:cf:b8:42:7c:f4:b2:b7:10:e1:9a:d0:0c:40: 5c:13:46:6e:55:6e:df:f5:12:7d:74:c2:15:d3:18:c0:f5:83: 1e:b7:51:ed:e6:4f:ac:8b:4e:e5:7c:0a:d3:68:79:61:eb:ad: db:4a:22:0a:d7:67:1b:e5:1d:4d:8b:f3:8c:44:bd:2a:e3:c0: 94:30:6f:b1:e5:cf:9b:04:c8:14:a9:43:7e:d3:d4:f1:21:45: 73:40:37:d9:2d:09:f7:93:48:d5:17:08:fd:52:27:fe:41:11: ec:13:4d:0f:5c:ce:a7:09:d5:af:69:65:55:17:d4:05:eb:0b: 37:a2:13:3c:88:d9:1d:4c:f1:77:2e:a6:f2:81:4d:ad:14:a6: d9:63:08:b7:1e:73:be:cf:b8:c7:a7:c3:aa:f6:34:03:9c:80: ad:bf:38:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNXSUdUp4GYvHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MGNjOTQyODItNjViYi00NGIxLThlMTMtNzdlNGQ2Njc1Nzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmsVEHa9nswfXokohhI8MGljzPXA9xXarw/A ToB1KLzhUFG8VdemC5w6mvXSAsdcC3c5y0aojo8YvL7QYUDBzy+in47gTv3SG0QQ VD8JdYzxICjwWPi7G0nFMgVgbaeHJIDkHg9/u/v63ra5VOURF9DLroCVFmZNlqnp vG19x96akGZIjAWEv44qtUjG2TsiT5VlGbygn/PoJZcOUmJBogvYBCxdPfnlCwX0 RX+fesKKnVLoQrFMC2uDwuDemkF9dWsMT0V2JMb19na5lRANE1CuUys/DrTRJFOJ v7pZdJ1Y18dpU8Lp4nnInxwVcUIGKMcU6prZgszwCzbFMggPlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHy45b0Tp2j+exQMhXr54cZYAnT1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWNmODY1MTEtOTk5Mi0z MWRkLTg3NDctZDZmYTU4MDk5ZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC1FSas7SR9kJ2gN0uMSWtPpmzFwl8SH1TiPxy531nlHd4bmgDSRYoU mUJO8IHLCmosqZjhvYG7FlvhAk+inJLGFDH35JNGtG3WUCw1feEDNY3wnbtOkNIu JYijiNeWz7hCfPSytxDhmtAMQFwTRm5Vbt/1En10whXTGMD1gx63Ue3mT6yLTuV8 CtNoeWHrrdtKIgrXZxvlHU2L84xEvSrjwJQwb7Hlz5sEyBSpQ37T1PEhRXNAN9kt CfeTSNUXCP1SJ/5BEewTTQ9czqcJ1a9pZVUX1AXrCzeiEzyI2R1M8XcupvKBTa0U ptljCLcec77PuMenw6r2NAOcgK2/OGw= -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:16 2026 by rpki-client