$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f80284b9-8291-302b-a728-5aaf1f6a8da7.roa File: f80284b9-8291-302b-a728-5aaf1f6a8da7.roa (raw, json) Hash identifier: ggs+lsBly2vfz8e3iMQb3X6hrPzKtqZ9sjcYpJCCAjo= Subject key identifier: 54:11:3F:F2:F6:1E:BD:7D:82:FB:FF:E7:7B:1F:0F:A8:F6:EA:D1:A5 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7E94D72A8D6BDA479D7645C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f80284b9-8291-302b-a728-5aaf1f6a8da7.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:d7:2a:8d:6b:da:47:9d:76:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=23e7e910-6638-4843-9cf4-ce547e95064d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:57:a8:3d:71:7a:60:f3:04:c7:ea:17:60: ca:79:c2:80:4c:00:8a:04:d9:b8:d9:3b:76:20:6f: 1e:e2:ce:1e:9e:a5:6a:11:76:bd:11:ea:06:6c:6c: 14:f8:91:cd:f3:aa:f5:b0:26:de:00:d8:12:e6:8c: 31:fd:2a:09:00:3c:0c:43:e3:45:a7:71:b7:14:9f: e5:33:ad:89:f1:69:93:aa:9f:40:11:96:2c:5e:68: 33:c8:4f:fe:a2:fe:9d:50:b7:dc:44:4c:7d:cc:3e: c0:93:bc:b9:92:ab:d1:59:28:18:da:3b:fb:f2:39: 0c:7e:3e:d8:83:da:c0:a9:68:28:45:57:8d:4b:61: 90:9f:fb:ff:5f:2d:04:21:41:9d:95:c9:7e:ba:5a: 24:17:29:75:fe:aa:8d:d9:6f:2d:cb:6f:34:7b:d2: 3e:9a:41:12:65:9d:d9:1c:bc:87:34:4d:02:64:96: 5b:16:f0:65:6e:c5:18:c6:d8:a8:7d:08:df:f6:56: 44:9f:f7:75:7b:e5:00:41:75:89:8f:b7:2b:fc:82: 9d:6e:69:89:a1:21:75:4f:19:75:a1:a0:2f:86:df: 18:ce:0f:e9:4d:27:ff:2b:ff:00:25:16:bb:f8:11: 49:a5:a5:cc:0d:6a:73:01:ed:1b:38:6e:4d:f5:2a: 98:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:11:3F:F2:F6:1E:BD:7D:82:FB:FF:E7:7B:1F:0F:A8:F6:EA:D1:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f80284b9-8291-302b-a728-5aaf1f6a8da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:db:50:7b:10:fa:cb:b1:d3:1a:13:39:80:d7:f1:13:35:0b: f6:a6:f4:b5:a4:c1:0b:bc:c6:5b:80:6e:ec:a7:14:3a:cb:4a: 0b:1e:e6:ba:0b:f0:6a:f7:7f:f4:77:22:02:0f:d6:96:b9:24: ec:de:10:86:2f:08:28:ac:5c:cb:41:6f:4e:51:7d:87:a0:17: fd:3f:70:a9:8b:90:c9:02:f9:a7:cb:b6:97:69:db:7a:41:ba: 2b:25:2a:38:d0:77:31:69:7b:21:65:5c:64:01:84:25:e2:e9: ec:8e:dc:fc:2c:d3:a5:3e:a8:6f:a3:60:ce:1d:82:66:45:28: 5e:36:20:d0:e5:cd:c4:6a:74:58:e3:c8:2a:9c:f3:d5:b5:44: be:2a:6c:98:0f:dc:6e:f2:14:33:38:84:a0:ce:77:68:da:f6: 81:ad:5e:c5:b0:00:bd:77:18:8e:ef:56:51:97:3f:42:a4:53: 63:49:27:c9:c6:f5:e7:64:5c:c2:da:a3:11:5c:5c:bf:b1:29: c1:67:d9:db:5b:46:1f:e8:72:7c:87:2a:c7:71:86:57:5d:17: e9:c7:a8:8b:75:68:6b:0d:60:3e:c2:02:44:d1:67:f7:eb:1a: 4a:84:a4:7f:af:27:7d:3e:18:80:ff:ed:aa:2a:23:42:1f:14: c6:b7:8e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNcqjWvaR512RcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MjNlN2U5MTAtNjYzOC00ODQzLTljZjQtY2U1NDdlOTUwNjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA9XqD1xemDzBMfqF2DKecKATACKBNm42Tt2 IG8e4s4enqVqEXa9EeoGbGwU+JHN86r1sCbeANgS5owx/SoJADwMQ+NFp3G3FJ/l M62J8WmTqp9AEZYsXmgzyE/+ov6dULfcREx9zD7Ak7y5kqvRWSgY2jv78jkMfj7Y g9rAqWgoRVeNS2GQn/v/Xy0EIUGdlcl+ulokFyl1/qqN2W8ty280e9I+mkESZZ3Z HLyHNE0CZJZbFvBlbsUYxtiofQjf9lZEn/d1e+UAQXWJj7cr/IKdbmmJoSF1Txl1 oaAvht8Yzg/pTSf/K/8AJRa7+BFJpaXMDWpzAe0bOG5N9SqYzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQRP/L2Hr19gvv/53sfD6j26tGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZjgwMjg0YjktODI5MS0z MDJiLWE3MjgtNWFhZjFmNmE4ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHbUHsQ+sux0xoTOYDX8RM1C/am9LWkwQu8xluAbuynFDrLSgse5roL 8Gr3f/R3IgIP1pa5JOzeEIYvCCisXMtBb05RfYegF/0/cKmLkMkC+afLtpdp23pB uislKjjQdzFpeyFlXGQBhCXi6eyO3Pws06U+qG+jYM4dgmZFKF42INDlzcRqdFjj yCqc89W1RL4qbJgP3G7yFDM4hKDOd2ja9oGtXsWwAL13GI7vVlGXP0KkU2NJJ8nG 9edkXMLaoxFcXL+xKcFn2dtbRh/ocnyHKsdxhlddF+nHqIt1aGsNYD7CAkTRZ/fr GkqEpH+vJ30+GID/7aoqI0IfFMa3jng= -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:40 2026 by rpki-client