$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ee2c99d5-ca51-3b30-95b3-c3b791e0c9f0.roa File: ee2c99d5-ca51-3b30-95b3-c3b791e0c9f0.roa (raw, json) Hash identifier: krEoTWySr8Qw0fw1fn5JGOxPVo9BW22aDF4Ki7KwfbY= Subject key identifier: BC:70:AD:8C:27:B6:74:CC:DF:CD:1F:39:86:BF:5E:4E:7F:AF:32:E2 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D5F0B1F7603D00777D00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ee2c99d5-ca51-3b30-95b3-c3b791e0c9f0.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d5:f0:b1:f7:60:3d:00:77:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=776bc022-cb7c-4a9a-b0ef-d25603117695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9e:51:3b:a4:8b:ec:9d:43:c6:7c:c0:8f:79: 3b:1c:38:bc:74:66:aa:c3:1a:b5:bd:55:53:4e:68: 93:f0:eb:e9:eb:ba:31:a7:4c:6d:82:30:e7:19:49: d8:29:d7:c6:ca:89:a2:ec:29:63:73:05:4e:dd:20: b1:12:1b:15:a8:f0:8a:7a:e7:fb:88:0a:91:a0:2c: a6:b2:f3:a6:af:2e:63:a4:bc:85:23:2b:44:f6:93: 7a:02:f2:54:91:8d:32:96:be:fc:fa:2c:8d:53:a4: 3f:41:57:45:a6:09:73:05:80:ac:6c:04:c9:2a:f4: aa:f9:10:92:d8:38:d4:08:8e:da:62:30:25:b5:62: d2:12:b6:d3:2e:21:4a:e5:9e:3f:1e:cf:1e:22:30: ef:b8:91:ae:a7:96:78:08:3d:88:e9:73:90:97:1e: fb:c2:0e:f6:b0:0f:36:6c:46:9b:6d:68:08:fe:9c: d7:fd:d2:cc:3a:f9:86:9c:69:96:a8:25:3e:6c:f5: db:b1:04:cd:6f:ad:9d:60:1d:d4:5f:ff:9b:e6:84: 01:2f:ab:95:b3:91:7c:31:64:5c:80:ea:1f:cc:6e: 53:75:c0:fb:53:5f:ec:a3:ab:1a:63:a9:81:05:67: 56:be:ba:19:4d:1f:f7:e0:de:5e:e6:e9:31:b1:b2: f7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:70:AD:8C:27:B6:74:CC:DF:CD:1F:39:86:BF:5E:4E:7F:AF:32:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ee2c99d5-ca51-3b30-95b3-c3b791e0c9f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:00:da:ca:9d:15:af:13:e5:0a:1a:84:53:bb:1d:37:01:a5: 98:db:64:b8:dc:79:36:f6:44:f3:7e:fa:49:05:a9:91:4b:c7: 20:29:18:f0:15:14:2c:d6:fa:c9:da:43:58:ac:00:07:8c:41: d5:80:4a:99:2a:00:ab:ae:a9:18:07:cc:4f:0e:86:aa:f4:bb: 54:dd:ae:e5:54:f3:37:34:59:bd:d4:53:7d:79:62:03:0d:b0: 27:f1:21:68:af:2b:c1:18:99:15:d7:df:fc:b0:9f:fb:d9:59: 24:be:d7:47:92:59:35:de:a5:75:7e:e1:47:76:66:04:24:ea: 43:60:6f:71:60:53:d5:09:42:ec:2e:85:9a:18:57:83:b0:d0: e9:99:e7:7d:44:16:32:ef:8a:5f:f1:6f:94:32:d5:e2:68:f7: ca:11:f9:ef:de:6f:1b:b2:dc:08:8e:d6:85:73:5c:2f:c9:60: 0a:0b:17:1b:94:c2:74:0d:58:3a:4e:8e:3d:7d:55:b2:fd:e8: f0:3f:9c:2d:bd:ec:fc:c6:6b:4d:4b:54:8b:db:87:35:30:e4: 99:4b:be:af:28:f7:14:ad:86:8f:d5:be:a3:b3:76:94:0c:82: 9e:43:ab:26:37:f9:61:df:82:5c:13:9d:27:42:d4:3a:d3:0c: 72:10:a5:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNXwsfdgPQB3fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk Nzc2YmMwMjItY2I3Yy00YTlhLWIwZWYtZDI1NjAzMTE3Njk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ5RO6SL7J1DxnzAj3k7HDi8dGaqwxq1vVVT TmiT8Ovp67oxp0xtgjDnGUnYKdfGyomi7CljcwVO3SCxEhsVqPCKeuf7iAqRoCym svOmry5jpLyFIytE9pN6AvJUkY0ylr78+iyNU6Q/QVdFpglzBYCsbATJKvSq+RCS 2DjUCI7aYjAltWLSErbTLiFK5Z4/Hs8eIjDvuJGup5Z4CD2I6XOQlx77wg72sA82 bEabbWgI/pzX/dLMOvmGnGmWqCU+bPXbsQTNb62dYB3UX/+b5oQBL6uVs5F8MWRc gOofzG5TdcD7U1/so6saY6mBBWdWvroZTR/34N5e5ukxsbL3swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxwrYwntnTM380fOYa/Xk5/rzLiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWUyYzk5ZDUtY2E1MS0z YjMwLTk1YjMtYzNiNzkxZTBjOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkA2sqdFa8T5QoahFO7HTcBpZjbZLjceTb2RPN++kkFqZFLxyApGPAV FCzW+snaQ1isAAeMQdWASpkqAKuuqRgHzE8Ohqr0u1TdruVU8zc0Wb3UU315YgMN sCfxIWivK8EYmRXX3/ywn/vZWSS+10eSWTXepXV+4Ud2ZgQk6kNgb3FgU9UJQuwu hZoYV4Ow0OmZ531EFjLvil/xb5Qy1eJo98oR+e/ebxuy3AiO1oVzXC/JYAoLFxuU wnQNWDpOjj19VbL96PA/nC297PzGa01LVIvbhzUw5JlLvq8o9xStho/VvqOzdpQM gp5DqyY3+WHfglwTnSdC1DrTDHIQpaQ= -----END CERTIFICATE-----Generated at Tue Jul 21 13:23:11 2026 by rpki-client