$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/00344ee4-c036-3a65-84db-9184ba4ec639.roa File: 00344ee4-c036-3a65-84db-9184ba4ec639.roa (raw, json) Hash identifier: eDMFyby+bOI8WrrXituPnaNqSD/qI8/i2FtydB2Pv8A= Subject key identifier: 71:B2:9E:89:6A:BD:FE:00:94:52:80:B0:9D:C5:6B:E8:19:F7:75:E3 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1EB61F738A2EDFC97BB200 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/00344ee4-c036-3a65-84db-9184ba4ec639.roa Signing time: Fri 24 Apr 2026 23:21:10 +0000 ROA not before: Fri 24 Apr 2026 23:21:10 +0000 ROA not after: Thu 23 Jul 2026 23:21:10 +0000 asID: 7029 IP address blocks: 64.16.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:b6:1f:73:8a:2e:df:c9:7b:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:10 2026 GMT Not After : Jul 23 23:21:10 2026 GMT Subject: CN=3ac83d83-e799-4369-bdcc-3751ccb55f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d8:09:bb:36:88:2d:40:c5:a8:48:ce:dd:a9: b7:cf:2e:28:e7:b8:32:ed:86:f7:bc:da:7a:06:5e: 59:fa:0d:d6:8c:29:87:c8:4b:10:54:77:bc:b9:61: 91:6c:93:3c:29:88:b5:53:3e:d2:cc:da:02:84:fe: 72:91:7c:e0:76:00:bb:86:22:07:5c:e6:74:36:8a: 99:9a:ba:d9:92:c8:b6:7e:c8:45:67:b7:31:e2:3a: d1:6c:85:e9:b9:0b:e2:40:d1:46:14:44:04:d4:fb: 22:ae:ed:b2:11:2a:6a:2a:35:38:24:61:6d:bb:ef: 2e:d7:96:4a:40:0f:b0:ba:be:6e:4c:63:c8:f9:d0: e9:05:35:fa:a4:26:d4:4a:b3:e3:d7:bb:c4:e2:64: 7a:b0:67:8a:04:86:c1:fd:4f:14:70:be:9f:ca:f2: cd:21:14:7e:da:3d:72:9a:e4:c6:89:bf:eb:66:bf: 90:c8:92:d2:c1:2c:32:0e:dc:97:c0:91:0a:e4:c2: bc:f8:9a:b8:ae:f2:59:a5:2e:5a:31:6f:08:88:90: 63:e0:f1:0e:7b:a7:d7:38:b4:10:79:63:ab:6f:df: 46:df:3a:b2:6c:d7:83:3c:58:ab:7e:83:7d:25:49: 9f:cf:ff:db:d1:12:ee:b9:85:28:ad:f3:d8:3d:ce: c0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B2:9E:89:6A:BD:FE:00:94:52:80:B0:9D:C5:6B:E8:19:F7:75:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/00344ee4-c036-3a65-84db-9184ba4ec639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:e6:6f:5b:4b:1d:19:b8:aa:9d:67:27:2d:de:d8:c9:9c:1f: 50:f1:e3:b4:ce:5a:82:3a:5e:09:c8:34:5a:1f:bc:42:b7:95: 46:ec:44:79:f5:d2:69:d2:51:31:b4:fd:17:1e:41:69:be:4b: 63:bc:8e:93:dd:0b:fa:3f:c8:88:7e:3d:5c:c3:c1:c5:7c:25: 48:9a:03:a3:b4:84:72:1c:1f:35:83:55:df:56:ce:84:af:e1: bc:b5:17:46:7d:f0:b2:b5:cb:45:cf:d7:c6:af:4a:a8:c4:7e: c6:38:61:72:ff:6c:19:da:48:0b:35:58:25:f2:db:64:ac:d2: aa:9b:19:d8:72:53:eb:18:72:0e:7c:f6:08:c8:5e:fb:76:cb: f5:71:98:f1:49:83:e8:b4:4f:15:ea:1d:be:40:5a:1e:84:e1: 56:f4:d8:71:12:a9:90:eb:7a:c3:b7:31:bb:a9:ef:11:92:2a: b9:ad:8e:b8:37:2f:80:7b:34:cc:6a:46:5c:06:5a:00:b1:a4: da:d1:cf:83:96:01:9f:c1:7e:2a:ab:8d:ae:26:86:a0:fa:06: 36:49:da:c3:b7:a8:40:7b:e6:3c:f6:cb:0b:51:09:5e:31:01: c0:02:eb:de:42:57:6f:62:e0:b8:82:62:09:70:a1:5f:c0:22: f1:db:bf:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHrYfc4ou38l7sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjExMFoXDTI2MDcyMzIzMjExMFowLzEtMCsGA1UEAxMk M2FjODNkODMtZTc5OS00MzY5LWJkY2MtMzc1MWNjYjU1ZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdgJuzaILUDFqEjO3am3zy4o57gy7Yb3vNp6 Bl5Z+g3WjCmHyEsQVHe8uWGRbJM8KYi1Uz7SzNoChP5ykXzgdgC7hiIHXOZ0NoqZ mrrZksi2fshFZ7cx4jrRbIXpuQviQNFGFEQE1Psiru2yESpqKjU4JGFtu+8u15ZK QA+wur5uTGPI+dDpBTX6pCbUSrPj17vE4mR6sGeKBIbB/U8UcL6fyvLNIRR+2j1y muTGib/rZr+QyJLSwSwyDtyXwJEK5MK8+Jq4rvJZpS5aMW8IiJBj4PEOe6fXOLQQ eWOrb99G3zqybNeDPFirfoN9JUmfz//b0RLuuYUorfPYPc7AQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGynolqvf4AlFKAsJ3Fa+gZ93XjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMDAzNDRlZTQtYzAzNi0z YTY1LTg0ZGItOTE4NGJhNGVjNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTmb1tLHRm4qp1nJy3e2MmcH1Dx47TOWoI6XgnINFofvEK3lUbsRHn1 0mnSUTG0/RceQWm+S2O8jpPdC/o/yIh+PVzDwcV8JUiaA6O0hHIcHzWDVd9WzoSv 4by1F0Z98LK1y0XP18avSqjEfsY4YXL/bBnaSAs1WCXy22Ss0qqbGdhyU+sYcg58 9gjIXvt2y/VxmPFJg+i0TxXqHb5AWh6E4Vb02HESqZDresO3Mbup7xGSKrmtjrg3 L4B7NMxqRlwGWgCxpNrRz4OWAZ/Bfiqrja4mhqD6BjZJ2sO3qEB75jz2ywtRCV4x AcAC695CV29i4LiCYglwoV/AIvHbv90= -----END CERTIFICATE-----Generated at Wed May 13 14:56:55 2026 by rpki-client