$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f5b5ce85-a122-3960-bf82-2862379f9923.roa File: f5b5ce85-a122-3960-bf82-2862379f9923.roa (raw, json) Hash identifier: xdDMI838Q4vbkxADOVCg3enBG4WoiiNbq7wqHYpFzxE= Subject key identifier: A7:5D:A7:4A:AF:CB:94:1B:D4:43:8E:9E:73:CD:0E:0B:07:8D:F6:4B Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D6875D0D0E95860E5D80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f5b5ce85-a122-3960-bf82-2862379f9923.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d6:87:5d:0d:0e:95:86:0e:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=27e23731-5621-4958-ae70-c16fcfc117f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:63:83:77:c4:99:3e:59:45:37:cd:41:7b:13: b3:78:fd:88:9e:9c:1c:76:e9:50:3e:98:19:9f:2e: 56:ab:e8:5c:62:59:81:41:0e:a2:55:9b:fa:ab:15: 7f:d0:44:ee:f4:1d:3e:13:9b:6e:73:86:11:35:de: 4d:c7:0d:88:44:46:c5:45:42:72:c7:ef:e7:cf:ba: 72:a3:ff:b3:57:5a:4c:9c:8a:17:c0:d9:d0:ae:2f: ea:a5:b4:ad:86:d8:7b:1a:fd:36:9d:a6:db:8c:54: 99:d7:0a:fe:1d:87:6c:ca:a9:f2:b2:df:e2:35:84: 55:88:df:88:51:26:0c:3a:d4:eb:ce:6a:cc:af:c8: 9f:8d:cf:06:a0:ad:89:ef:fd:3b:06:1b:c8:18:63: 38:07:33:e4:9d:24:4b:46:ae:50:91:67:ed:e7:78: 5c:c9:6f:a5:2c:b9:d0:72:41:c9:28:8d:04:c4:c1: c6:1c:b2:8e:e5:e2:12:f7:2c:e9:73:39:24:b5:34: ed:ea:c4:1d:a6:11:0b:28:38:b3:81:9f:58:af:ea: 95:ec:77:a3:75:d5:d0:e2:f7:e4:a0:ca:04:1f:df: b6:49:3f:35:1a:35:e4:b0:0d:0c:05:d5:2a:06:ec: 5f:37:01:06:6b:0a:21:6a:77:6f:7b:b8:1c:54:99: 36:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5D:A7:4A:AF:CB:94:1B:D4:43:8E:9E:73:CD:0E:0B:07:8D:F6:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f5b5ce85-a122-3960-bf82-2862379f9923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d3:10:f5:b2:ac:57:b5:31:bf:69:8f:24:77:43:24:e2:9a: dc:37:96:47:23:e3:0a:9b:ff:f5:30:4a:06:12:b0:e9:c0:3a: 40:f8:a3:98:83:6d:99:fb:05:bb:54:2b:da:92:72:8b:0c:ef: 51:6c:af:d7:5f:d2:9b:61:74:44:6c:1d:e7:81:02:c7:b8:11: 6e:15:ac:48:90:b9:23:23:3d:74:d0:2a:fd:a6:86:bb:ae:22: 01:26:29:37:a3:ad:69:f8:a6:82:92:ad:46:6b:be:0f:3b:5a: 24:3e:a0:cc:5f:e6:1a:47:51:e5:8c:7c:e1:e5:4d:66:30:fb: 48:d1:8a:59:65:7e:ac:9e:9d:2a:fa:b6:8e:12:cc:a3:3a:fc: 2d:03:61:f9:6f:ce:bc:8f:54:10:02:ba:bd:ff:dd:78:77:da: f4:f6:f3:7c:59:d3:a3:3a:dc:f1:68:b8:26:27:0f:49:1a:c4: e2:cb:e8:ba:45:6f:4f:6c:30:5d:f8:e3:91:a1:62:0c:00:b7: 75:c1:89:d6:be:16:85:4e:db:72:a8:ef:01:4e:77:e1:6e:df: eb:a0:e3:dd:df:cc:c2:11:c2:12:fd:db:bb:27:31:40:ff:6d: 36:64:7d:8d:8a:5d:a6:21:f4:a1:a5:0c:94:4a:b3:91:31:a5: 2d:84:bb:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNaHXQ0OlYYOXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MjdlMjM3MzEtNTYyMS00OTU4LWFlNzAtYzE2ZmNmYzExN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGODd8SZPllFN81BexOzeP2InpwcdulQPpgZ ny5Wq+hcYlmBQQ6iVZv6qxV/0ETu9B0+E5tuc4YRNd5Nxw2IREbFRUJyx+/nz7py o/+zV1pMnIoXwNnQri/qpbSthth7Gv02nabbjFSZ1wr+HYdsyqnyst/iNYRViN+I USYMOtTrzmrMr8ifjc8GoK2J7/07BhvIGGM4BzPknSRLRq5QkWft53hcyW+lLLnQ ckHJKI0ExMHGHLKO5eIS9yzpczkktTTt6sQdphELKDizgZ9Yr+qV7HejddXQ4vfk oMoEH9+2ST81GjXksA0MBdUqBuxfNwEGawohandve7gcVJk29QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKddp0qvy5Qb1EOOnnPNDgsHjfZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZjViNWNlODUtYTEyMi0z OTYwLWJmODItMjg2MjM3OWY5OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzTEPWyrFe1Mb9pjyR3QyTimtw3lkcj4wqb//UwSgYSsOnAOkD4o5iD bZn7BbtUK9qScosM71Fsr9df0pthdERsHeeBAse4EW4VrEiQuSMjPXTQKv2mhruu IgEmKTejrWn4poKSrUZrvg87WiQ+oMxf5hpHUeWMfOHlTWYw+0jRilllfqyenSr6 to4SzKM6/C0DYflvzryPVBACur3/3Xh32vT283xZ06M63PFouCYnD0kaxOLL6LpF b09sMF3445GhYgwAt3XBida+FoVO23Ko7wFOd+Fu3+ug493fzMIRwhL927snMUD/ bTZkfY2KXaYh9KGlDJRKs5ExpS2Eu6w= -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:10 2026 by rpki-client