$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ee337bec-1416-3f18-a9d5-4e91fec244c1.roa File: ee337bec-1416-3f18-a9d5-4e91fec244c1.roa (raw, json) Hash identifier: suEpVdpw2kyDycnM29gPO1RyCCoCly+6tXem9avwgBs= Subject key identifier: 23:FB:25:FE:24:A0:41:33:A9:B2:FC:FB:6B:ED:92:4D:81:DC:54:90 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D53EE33CCD718D351A80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ee337bec-1416-3f18-a9d5-4e91fec244c1.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d5:3e:e3:3c:cd:71:8d:35:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=12661253-eb9f-4fd2-bfef-1bf6fe3b9ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3e:20:84:27:07:45:0f:2e:79:2b:5a:de:d0: f6:49:51:f2:2b:de:f7:31:57:17:7c:b6:3c:cf:50: 11:e1:31:10:f5:8f:ca:31:fc:9b:1c:93:14:b2:42: cd:13:6f:ee:7d:35:5b:51:1e:e6:a2:49:c6:43:5a: 40:89:9a:93:f0:37:6d:1b:f9:16:0a:2b:28:56:f8: fd:c1:96:fd:0f:dc:b6:88:4d:cc:44:fa:11:5b:76: 78:d2:e4:d4:bb:da:d8:b1:09:26:67:79:59:f8:16: 63:01:73:3f:0d:60:ce:70:95:00:c7:a9:50:ec:6b: 48:7e:7d:d6:b7:69:b9:58:c7:e0:ea:f7:2a:29:4a: bb:35:e3:97:41:97:e8:92:b5:8e:84:f2:a1:e0:fb: c2:3e:65:e4:1c:2c:ae:0b:df:3d:3c:12:a7:5a:d4: 4d:34:0d:6f:e7:f1:a2:b1:06:ac:83:45:ec:1e:6b: b0:45:b3:0b:7c:dd:ba:3e:8a:90:4f:d0:fa:02:a5: b9:70:4c:46:ca:28:7d:ce:91:53:56:1f:e5:bf:93: c0:37:43:94:b4:f5:af:d8:0f:2d:98:86:ba:72:a2: b0:50:5d:8f:bd:6f:e2:33:37:e4:b8:be:c6:14:61: 9b:dd:5f:f8:e0:3a:d7:d5:1f:a3:ba:f1:e0:1c:08: c2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FB:25:FE:24:A0:41:33:A9:B2:FC:FB:6B:ED:92:4D:81:DC:54:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ee337bec-1416-3f18-a9d5-4e91fec244c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:25:7a:86:b3:77:6c:e5:96:56:8d:8a:d3:79:18:69:b4:dd: dd:df:3f:d5:ea:af:b0:1c:dc:f9:f2:06:30:bb:6c:3d:46:3e: e2:20:92:da:33:0c:9d:ee:37:7a:fd:3f:b7:ef:1e:e2:eb:f9: c7:77:63:c4:bf:e4:68:10:18:f6:73:8a:3a:e7:5c:01:a3:e6: f3:58:a7:86:09:54:3a:07:f8:ae:81:fa:39:5d:f3:2b:66:49: 4f:d2:96:83:c3:ec:6c:bd:c9:b8:71:c7:9d:6a:72:fd:4c:2a: ff:40:c4:05:48:8c:bd:e4:11:7b:c5:c2:7d:2c:4a:db:b7:27: 9d:6f:f9:82:9c:85:d9:89:32:41:cd:09:ed:06:74:f3:69:95: 4c:d6:3b:9f:25:ff:15:a4:d9:68:15:e2:87:ea:26:b4:a9:6b: 75:4b:56:4a:58:37:54:df:7d:aa:60:24:f7:8d:c4:1e:1d:3b: bc:bc:0c:2e:0e:19:4c:27:82:c4:81:35:75:62:1e:64:32:3f: a8:5d:72:c3:ce:c0:3e:09:40:47:c7:6e:ce:a3:ee:0a:7c:97: 7f:eb:d8:c1:69:aa:cb:32:c7:a2:36:d1:54:02:6d:95:2b:69: 9a:d6:8d:fd:dd:9d:5e:6d:47:d6:6d:3c:12:df:c6:a7:b5:6f: 0b:f9:55:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNU+4zzNcY01GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MTI2NjEyNTMtZWI5Zi00ZmQyLWJmZWYtMWJmNmZlM2I5ZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD4ghCcHRQ8ueSta3tD2SVHyK973MVcXfLY8 z1AR4TEQ9Y/KMfybHJMUskLNE2/ufTVbUR7moknGQ1pAiZqT8DdtG/kWCisoVvj9 wZb9D9y2iE3MRPoRW3Z40uTUu9rYsQkmZ3lZ+BZjAXM/DWDOcJUAx6lQ7GtIfn3W t2m5WMfg6vcqKUq7NeOXQZfokrWOhPKh4PvCPmXkHCyuC989PBKnWtRNNA1v5/Gi sQasg0XsHmuwRbMLfN26PoqQT9D6AqW5cExGyih9zpFTVh/lv5PAN0OUtPWv2A8t mIa6cqKwUF2PvW/iMzfkuL7GFGGb3V/44DrX1R+juvHgHAjC3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCP7Jf4koEEzqbL8+2vtkk2B3FSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWUzMzdiZWMtMTQxNi0z ZjE4LWE5ZDUtNGU5MWZlYzI0NGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIleoazd2zlllaNitN5GGm03d3fP9Xqr7Ac3PnyBjC7bD1GPuIgktoz DJ3uN3r9P7fvHuLr+cd3Y8S/5GgQGPZzijrnXAGj5vNYp4YJVDoH+K6B+jld8ytm SU/SloPD7Gy9ybhxx51qcv1MKv9AxAVIjL3kEXvFwn0sStu3J51v+YKchdmJMkHN Ce0GdPNplUzWO58l/xWk2WgV4ofqJrSpa3VLVkpYN1TffapgJPeNxB4dO7y8DC4O GUwngsSBNXViHmQyP6hdcsPOwD4JQEfHbs6j7gp8l3/r2MFpqssyx6I20VQCbZUr aZrWjf3dnV5tR9ZtPBLfxqe1bwv5VbE= -----END CERTIFICATE-----Generated at Tue Jul 21 13:23:13 2026 by rpki-client