$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fc0adb68-765d-3a3a-969a-b290502baa77.roa File: fc0adb68-765d-3a3a-969a-b290502baa77.roa (raw, json) Hash identifier: 4JGb6IONd5cvldl3VbE9KkZm7UGuOLnEcAaNskCjPjU= Subject key identifier: 32:4A:23:68:DC:01:E7:6F:13:CE:B8:78:EF:D3:D3:70:4A:5B:25:99 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584E7634F5BB9BA6588828B11250 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fc0adb68-765d-3a3a-969a-b290502baa77.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 20001 IP address blocks: 64.16.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:f5:bb:9b:a6:58:88:28:b1:12:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=d6aa5067-792b-47ac-a686-2a9b2e3e8260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8a:66:78:2b:4f:16:72:e6:3f:82:26:60:4e: 03:af:77:05:1f:c1:b7:11:4d:45:bb:65:aa:5e:a5: 3b:32:8e:ee:68:0b:46:87:74:64:c1:2c:23:e5:71: c2:4d:38:68:dd:21:99:e3:7d:41:a4:b1:ae:69:85: 93:37:95:a8:d3:ea:64:5e:69:41:07:32:c4:7f:55: 9e:0a:49:2f:8b:ab:11:e6:e5:a7:e3:66:2b:07:58: 0a:23:84:cc:46:8d:6d:e0:da:07:31:d0:77:6d:e4: 0e:1f:e9:6c:9c:1e:8e:95:60:03:0c:19:4a:88:76: 4d:12:16:42:17:57:e5:f7:44:58:8a:ce:29:b3:e3: 4a:41:49:6d:ff:c7:64:1c:a1:1f:f4:aa:2a:6e:16: df:1a:40:a6:ca:22:51:c4:63:1f:14:d7:b5:d3:55: 45:46:aa:ad:cf:94:07:60:f9:7d:2e:0f:14:4a:da: 91:22:1e:eb:27:18:fe:75:c7:fc:72:27:15:48:42: 10:4f:2d:d5:7c:d2:48:e6:60:b3:1d:0b:04:cf:35: 26:7f:1e:5f:3e:22:cd:24:ab:58:cb:d5:e2:15:e0: b7:f8:12:9c:45:b0:81:44:df:62:f6:0c:0a:83:03: c4:b6:b7:4f:b9:3c:7c:68:a0:48:98:5c:58:6c:f6: 3f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4A:23:68:DC:01:E7:6F:13:CE:B8:78:EF:D3:D3:70:4A:5B:25:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fc0adb68-765d-3a3a-969a-b290502baa77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e0:0b:2f:95:04:de:59:9b:ba:e3:42:ad:99:88:b1:6b:7d: 3d:ee:45:44:74:c0:64:e0:6c:1e:67:b7:23:a0:6f:dd:f7:da: d0:8e:9f:21:3e:23:65:5d:59:30:74:02:6c:11:03:4a:0f:20: 75:73:89:03:53:b9:d8:a7:d6:16:22:b9:71:9a:b9:dc:a0:c5: aa:17:0a:85:10:8b:2b:ba:3b:42:e6:78:12:04:a0:9e:86:f9: 8b:36:47:76:84:1f:81:53:a3:5d:61:c6:50:b9:46:7d:6c:76: 99:44:53:20:76:4e:d6:91:08:35:bb:d6:74:04:27:9f:60:9b: 02:98:e2:76:e9:6b:12:2f:d4:21:cb:68:55:55:4c:aa:85:d2: fd:bc:26:83:23:e2:65:66:cc:19:56:4f:4b:3e:19:08:14:da: 7c:53:03:10:92:f4:cc:3c:86:93:6e:6d:5b:e1:d1:f6:e1:d1: 2c:00:94:e8:ca:58:85:45:0d:bc:70:27:2a:98:84:a6:ec:e9: 2a:3b:ee:2d:01:81:5a:9b:28:61:d4:0e:5a:da:aa:d5:a6:aa: ab:e8:52:f4:cf:de:d1:a1:13:10:f3:80:b3:63:d5:c0:ac:07: 4e:57:d2:3a:26:64:38:03:eb:2e:d9:a8:b4:82:ba:c2:6e:be: 5a:e1:f2:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NPW7m6ZYiCixElAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk ZDZhYTUwNjctNzkyYi00N2FjLWE2ODYtMmE5YjJlM2U4MjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIpmeCtPFnLmP4ImYE4Dr3cFH8G3EU1Fu2Wq XqU7Mo7uaAtGh3RkwSwj5XHCTTho3SGZ431BpLGuaYWTN5Wo0+pkXmlBBzLEf1We Ckkvi6sR5uWn42YrB1gKI4TMRo1t4NoHMdB3beQOH+lsnB6OlWADDBlKiHZNEhZC F1fl90RYis4ps+NKQUlt/8dkHKEf9KoqbhbfGkCmyiJRxGMfFNe101VFRqqtz5QH YPl9Lg8UStqRIh7rJxj+dcf8cicVSEIQTy3VfNJI5mCzHQsEzzUmfx5fPiLNJKtY y9XiFeC3+BKcRbCBRN9i9gwKgwPEtrdPuTx8aKBImFxYbPY/AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJKI2jcAedvE864eO/T03BKWyWZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZmMwYWRiNjgtNzY1ZC0z YTNhLTk2OWEtYjI5MDUwMmJhYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfgCy+VBN5Zm7rjQq2ZiLFrfT3uRUR0wGTgbB5ntyOgb9332tCOnyE+ I2VdWTB0AmwRA0oPIHVziQNTudin1hYiuXGaudygxaoXCoUQiyu6O0LmeBIEoJ6G +Ys2R3aEH4FTo11hxlC5Rn1sdplEUyB2TtaRCDW71nQEJ59gmwKY4nbpaxIv1CHL aFVVTKqF0v28JoMj4mVmzBlWT0s+GQgU2nxTAxCS9Mw8hpNubVvh0fbh0SwAlOjK WIVFDbxwJyqYhKbs6So77i0BgVqbKGHUDlraqtWmqqvoUvTP3tGhExDzgLNj1cCs B05X0jomZDgD6y7ZqLSCusJuvlrh8pU= -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:09 2026 by rpki-client