$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/efdcf1ad-61ec-3c33-817a-5c271a7e7441.roa File: efdcf1ad-61ec-3c33-817a-5c271a7e7441.roa (raw, json) Hash identifier: wyu+BNOzRTRIVVmBcXCh1J6+qrBg3uTMYi1699zgjt8= Subject key identifier: 7D:32:B4:86:33:4D:A2:BE:55:C5:D2:9F:41:0A:20:C1:9C:A7:3A:C0 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D90AD8D8604AD5403C80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/efdcf1ad-61ec-3c33-817a-5c271a7e7441.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 397630 IP address blocks: 64.16.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d9:0a:d8:d8:60:4a:d5:40:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=74f2df7c-5ecb-4511-855c-d747df11ab8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8c:d7:e6:74:92:4c:e8:e2:4a:6a:11:a5:2e: e5:96:80:80:56:ac:36:f9:3c:46:e4:c9:2e:52:d3: d9:29:38:75:9d:7a:52:f8:6e:38:18:66:f4:dc:1f: a6:d7:02:78:cd:d6:8e:e7:fb:c6:99:22:08:29:7f: d0:61:7b:98:be:c0:1d:ba:08:ac:a1:ac:9a:97:0b: a0:a5:e5:91:b7:84:8b:c2:79:f2:60:a6:8e:5b:65: 53:95:dd:0f:d8:10:f1:11:74:92:f1:b7:23:c3:0c: 3b:47:df:9a:ab:1f:9b:13:6a:ef:ae:a2:85:4c:d4: 2d:11:5b:f1:9a:02:eb:00:05:7f:60:e5:89:f7:df: 57:a8:21:23:1a:bc:f1:0d:05:41:72:87:ca:0d:74: fc:7d:a0:b4:c7:f3:4e:f7:3d:80:e7:79:54:78:8a: 68:6a:f0:60:56:37:a9:39:81:bb:71:3e:6b:2b:71: 87:67:4a:18:86:70:b4:a9:e4:00:a3:ed:b1:c8:2b: bc:15:81:38:ce:d4:0f:ec:9f:98:b2:98:a8:97:7b: 30:4f:0b:2a:8a:54:6d:16:0e:58:cc:07:9f:6c:e8: 43:b3:ca:5d:73:5d:9b:63:33:86:96:2c:60:f9:b1: 4c:03:a1:08:80:4d:17:4b:7c:f7:f3:e6:ff:9c:d4: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:32:B4:86:33:4D:A2:BE:55:C5:D2:9F:41:0A:20:C1:9C:A7:3A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/efdcf1ad-61ec-3c33-817a-5c271a7e7441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:eb:ef:d5:d4:63:bd:33:b6:5a:72:0a:f0:fa:cc:00:3f:db: ff:77:17:a9:2a:f4:6e:fd:db:40:2a:62:c5:0a:f9:61:98:80: 41:51:1f:68:b7:c5:af:d9:2d:fb:86:e9:e7:98:d9:d2:e6:0a: 9a:55:62:b7:74:5f:21:dd:72:46:fb:93:78:44:78:70:38:a5: 19:e4:9b:1e:7d:6e:19:2e:42:3e:b7:b5:43:42:d3:65:c1:4d: 5f:73:8b:5b:f5:fb:2b:15:77:37:ba:f2:3b:95:1c:5e:b8:b8: e8:92:5c:fe:e3:51:64:62:e4:18:a8:a9:e2:7a:b1:58:0d:1b: 9c:c0:03:b6:05:de:4f:95:f6:bd:86:95:46:53:83:e2:c8:31: 12:27:1a:1c:0f:63:6f:cd:b0:01:3e:d6:24:4d:1c:50:d7:80: cb:09:72:6e:62:18:0f:a8:a5:a2:73:db:6e:69:df:49:85:f4: ab:7a:02:71:9f:d9:dd:cb:08:2f:44:93:ea:97:b6:cc:c4:d5: 82:cc:c2:0a:96:de:e8:c5:04:a5:4d:a6:2b:b3:af:94:c8:02: 4f:70:83:3e:4e:2f:4a:fd:6b:0b:b8:e6:91:0c:5f:2f:70:44: d3:8a:b1:3b:05:ac:a1:06:f9:44:37:da:c4:50:a9:a1:69:bf: cd:40:ff:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNkK2NhgStVAPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NzRmMmRmN2MtNWVjYi00NTExLTg1NWMtZDc0N2RmMTFhYjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIzX5nSSTOjiSmoRpS7lloCAVqw2+TxG5Mku UtPZKTh1nXpS+G44GGb03B+m1wJ4zdaO5/vGmSIIKX/QYXuYvsAdugisoayalwug peWRt4SLwnnyYKaOW2VTld0P2BDxEXSS8bcjwww7R9+aqx+bE2rvrqKFTNQtEVvx mgLrAAV/YOWJ999XqCEjGrzxDQVBcofKDXT8faC0x/NO9z2A53lUeIpoavBgVjep OYG7cT5rK3GHZ0oYhnC0qeQAo+2xyCu8FYE4ztQP7J+Yspiol3swTwsqilRtFg5Y zAefbOhDs8pdc12bYzOGlixg+bFMA6EIgE0XS3z38+b/nNTPmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0ytIYzTaK+VcXSn0EKIMGcpzrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWZkY2YxYWQtNjFlYy0z YzMzLTgxN2EtNWMyNzFhN2U3NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITr79XUY70ztlpyCvD6zAA/2/93F6kq9G7920AqYsUK+WGYgEFRH2i3 xa/ZLfuG6eeY2dLmCppVYrd0XyHdckb7k3hEeHA4pRnkmx59bhkuQj63tUNC02XB TV9zi1v1+ysVdze68juVHF64uOiSXP7jUWRi5BioqeJ6sVgNG5zAA7YF3k+V9r2G lUZTg+LIMRInGhwPY2/NsAE+1iRNHFDXgMsJcm5iGA+opaJz225p30mF9Kt6AnGf 2d3LCC9Ek+qXtszE1YLMwgqW3ujFBKVNpiuzr5TIAk9wgz5OL0r9awu45pEMXy9w RNOKsTsFrKEG+UQ32sRQqaFpv81A/9Q= -----END CERTIFICATE-----Generated at Tue Jul 21 01:40:07 2026 by rpki-client