$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ef34cb72-5ce5-3fe8-8d3f-58b5af53442e.roa File: ef34cb72-5ce5-3fe8-8d3f-58b5af53442e.roa (raw, json) Hash identifier: o344ZZibKNF9FGLetZ3GL7m7wN/xwKjPjGS6e/DnT/M= Subject key identifier: 0A:78:A8:37:99:8D:69:7A:E9:FD:C5:2D:F1:F8:FE:1E:3A:89:94:55 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D56BD621261D49494F70 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ef34cb72-5ce5-3fe8-8d3f-58b5af53442e.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d5:6b:d6:21:26:1d:49:49:4f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=9ee3d9c8-c41f-4a3c-b39e-e628a268bfa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:45:61:3d:ec:02:e7:11:f8:d8:3f:0b:1e: 34:45:14:3f:c7:3c:f2:eb:fc:98:ba:75:ee:75:ad: 7b:e2:35:50:ff:53:78:10:e6:2f:89:d4:39:f8:cf: 74:ec:e4:24:31:ed:57:8b:49:99:9d:10:68:5d:3f: d3:33:c7:96:1a:e5:0e:ce:27:9e:32:8e:16:0a:96: eb:89:88:be:2d:3b:ff:aa:a7:31:57:7a:10:8d:9e: 63:74:80:f6:5b:26:a7:f3:99:b4:34:9d:03:86:b5: 75:07:3c:89:ad:b9:77:59:6b:89:5c:33:08:36:cd: a8:44:a9:a5:05:b7:fd:87:42:57:d8:58:f5:13:c4: 6b:cc:11:18:6e:f3:26:f1:e3:1a:8b:dd:59:5a:49: cd:88:57:25:41:7e:8e:7d:07:6c:5a:8e:72:ef:61: bf:7e:53:12:94:d8:78:4f:e6:42:d6:52:ab:bf:0a: 06:e1:7a:36:54:c0:46:ed:d2:9b:14:bb:02:fa:0f: 69:53:5f:0d:78:0a:e0:af:b8:89:99:77:27:1d:49: d2:4a:16:3c:12:2c:7f:15:c4:e4:24:ac:94:6d:ab: b0:68:4f:dc:a2:65:f2:f7:94:bb:2e:81:71:b1:33: e6:1a:c7:54:2e:64:9c:9f:c8:9d:1d:0f:94:20:81: 2b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:78:A8:37:99:8D:69:7A:E9:FD:C5:2D:F1:F8:FE:1E:3A:89:94:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ef34cb72-5ce5-3fe8-8d3f-58b5af53442e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a3:d2:f9:be:8a:44:84:d4:fe:2f:8e:54:fe:33:35:72:5f: 13:f0:36:ab:0e:46:b2:d3:20:9c:31:12:57:21:0e:d4:b3:51: ed:1e:ec:68:41:64:94:21:ce:13:b5:4e:9d:f3:fb:dc:d7:0b: 7a:f6:0b:dd:cf:06:c9:9e:b4:69:39:57:3e:f0:a3:a5:90:fa: a0:2f:d2:58:8c:44:96:ed:17:c7:72:6e:ea:73:ab:10:12:96: 14:c3:1e:e1:04:ed:65:09:3f:a6:a8:a3:48:2e:81:ff:2d:73: 76:10:f4:5d:4d:4d:e9:8e:18:e4:bb:68:b3:3a:e5:9b:71:2a: 68:e0:d7:d7:88:ae:3b:c2:9f:56:57:ef:be:91:09:9d:a1:5b: 52:02:68:03:4f:71:50:3e:5e:9f:f1:2c:db:f4:cc:b5:b5:1a: 9e:0a:72:72:97:c0:06:bf:f8:c7:ac:d5:c1:36:64:bc:99:21: ca:23:c4:d9:1b:91:ae:e8:42:ed:b3:58:34:9b:15:7e:a5:90: 08:79:f5:0f:a5:b6:c8:4b:74:c9:31:56:45:7d:c3:17:30:84: 73:62:5d:14:dc:5e:2e:3d:53:35:78:2a:a3:cb:b3:1a:c0:04: bb:30:ab:37:bd:7e:7e:5d:24:d5:c6:a2:cc:0e:12:df:3a:cb: d6:e6:bb:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNVr1iEmHUlJT3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk OWVlM2Q5YzgtYzQxZi00YTNjLWIzOWUtZTYyOGEyNjhiZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXxFYT3sAucR+Ng/Cx40RRQ/xzzy6/yYunXu da174jVQ/1N4EOYvidQ5+M907OQkMe1Xi0mZnRBoXT/TM8eWGuUOzieeMo4WCpbr iYi+LTv/qqcxV3oQjZ5jdID2Wyan85m0NJ0DhrV1BzyJrbl3WWuJXDMINs2oRKml Bbf9h0JX2Fj1E8RrzBEYbvMm8eMai91ZWknNiFclQX6OfQdsWo5y72G/flMSlNh4 T+ZC1lKrvwoG4Xo2VMBG7dKbFLsC+g9pU18NeArgr7iJmXcnHUnSShY8Eix/FcTk JKyUbauwaE/comXy95S7LoFxsTPmGsdULmScn8idHQ+UIIErewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAp4qDeZjWl66f3FLfH4/h46iZRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWYzNGNiNzItNWNlNS0z ZmU4LThkM2YtNThiNWFmNTM0NDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSj0vm+ikSE1P4vjlT+MzVyXxPwNqsORrLTIJwxElchDtSzUe0e7GhB ZJQhzhO1Tp3z+9zXC3r2C93PBsmetGk5Vz7wo6WQ+qAv0liMRJbtF8dybupzqxAS lhTDHuEE7WUJP6aoo0gugf8tc3YQ9F1NTemOGOS7aLM65ZtxKmjg19eIrjvCn1ZX 776RCZ2hW1ICaANPcVA+Xp/xLNv0zLW1Gp4KcnKXwAa/+Mes1cE2ZLyZIcojxNkb ka7oQu2zWDSbFX6lkAh59Q+ltshLdMkxVkV9wxcwhHNiXRTcXi49UzV4KqPLsxrA BLswqze9fn5dJNXGoswOEt86y9bmu8M= -----END CERTIFICATE-----Generated at Tue Jul 21 13:23:08 2026 by rpki-client