$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/017b2e45-d61e-3596-b55b-cf0ea74f303f.roa File: 017b2e45-d61e-3596-b55b-cf0ea74f303f.roa (raw, json) Hash identifier: WvXIou1y15A05bd8E2sRIJVEuTvYH3RgtZjvOqNAuKY= Subject key identifier: 2C:12:7D:F0:2F:7A:84:66:34:5B:A2:87:9D:4B:74:EC:51:3B:E5:F8 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F4483E74F7420EB1B1350 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/017b2e45-d61e-3596-b55b-cf0ea74f303f.roa Signing time: Fri 24 Apr 2026 23:22:18 +0000 ROA not before: Fri 24 Apr 2026 23:22:18 +0000 ROA not after: Thu 23 Jul 2026 23:22:18 +0000 asID: 20001 IP address blocks: 64.16.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:44:83:e7:4f:74:20:eb:1b:13:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:18 2026 GMT Not After : Jul 23 23:22:18 2026 GMT Subject: CN=623c335c-f474-48cd-9ad7-d69eafbbc62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:79:7c:fe:3c:72:bb:0b:3f:00:23:6d:01:5a: 76:42:07:dd:6a:b3:a0:9d:50:e7:a3:64:2f:e1:db: a2:05:60:c2:89:47:46:bd:78:ad:97:1e:c3:eb:34: b1:3f:a3:27:8d:39:6e:f5:fa:12:3d:5f:47:90:7f: 67:21:05:25:0e:60:24:fd:a2:77:aa:03:ad:36:da: 2f:ed:ef:42:e9:3e:76:60:71:99:27:63:c9:1a:dc: 1f:98:f7:bf:77:96:1f:8b:ea:11:3f:94:bd:06:86: f9:37:0b:f0:37:2a:98:3c:16:94:d0:82:48:26:08: 0c:24:f5:85:43:c4:80:c2:3b:df:f2:53:43:5f:fa: e7:b1:4e:03:7a:ed:81:ca:13:23:ce:9c:29:04:74: df:71:36:a7:3f:bc:ad:c7:34:a5:6c:fe:a2:7d:6f: ed:c5:2d:8d:b9:88:6a:69:c9:28:34:6d:47:b8:7c: ca:37:5c:0b:14:2e:a6:77:d5:84:f2:44:19:84:22: 5d:aa:21:24:7f:2b:37:5d:22:79:ad:51:07:26:f0: f4:05:24:36:ba:9b:f4:b4:87:bf:e4:2f:d6:b5:8a: 2e:a7:1a:65:5c:88:38:f3:26:e1:71:59:18:f6:66: 0e:e7:de:7b:6a:f1:21:bc:46:02:a2:16:e0:e4:b4: e8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:12:7D:F0:2F:7A:84:66:34:5B:A2:87:9D:4B:74:EC:51:3B:E5:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/017b2e45-d61e-3596-b55b-cf0ea74f303f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:70:62:76:ae:3a:7c:d5:1d:e2:cf:16:87:95:ab:42:59:53: 6b:83:b2:58:24:20:b3:66:c8:34:3c:cd:94:b5:ec:97:df:5c: 16:90:a3:53:1b:b7:fb:0a:69:94:06:d9:46:2f:54:2a:7e:e0: 2b:5c:f2:6c:4d:77:fb:ca:fe:92:85:d1:64:1d:4b:99:c4:b1: b0:fe:c1:4f:40:8c:3d:a8:a6:b9:e6:d0:c3:ef:00:46:a4:ee: 80:80:6a:dd:63:f7:c5:e6:a8:13:28:45:21:8f:28:01:9f:be: 98:65:d7:59:2e:a1:86:b6:59:08:26:4b:f3:06:c8:9a:2b:f2: c8:32:d3:9d:da:ab:1f:ef:11:73:b3:64:b2:3f:d6:69:2f:7e: b8:5f:b1:49:e0:f2:91:0a:c5:d7:b3:b8:b5:31:73:82:d2:d0: bf:57:09:09:7b:01:10:c0:e3:32:e6:f7:cc:95:0d:e4:a9:55: 5a:2c:18:71:9b:82:6f:50:8b:47:84:8e:7b:9c:ca:19:a3:0e: f0:bb:b2:c1:64:e1:04:4e:e3:eb:b4:4c:d5:f6:5c:db:5a:d7: 5a:ae:f7:8b:06:7e:fe:8c:d8:f8:3b:d4:b5:78:9a:8f:91:17: db:96:07:9c:37:e6:50:d9:18:15:82:a5:07:6b:a4:cb:c7:f9: e4:d9:05:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH0SD5090IOsbE1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIxOFoXDTI2MDcyMzIzMjIxOFowLzEtMCsGA1UEAxMk NjIzYzMzNWMtZjQ3NC00OGNkLTlhZDctZDY5ZWFmYmJjNjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHl8/jxyuws/ACNtAVp2QgfdarOgnVDno2Qv 4duiBWDCiUdGvXitlx7D6zSxP6MnjTlu9foSPV9HkH9nIQUlDmAk/aJ3qgOtNtov 7e9C6T52YHGZJ2PJGtwfmPe/d5Yfi+oRP5S9Bob5NwvwNyqYPBaU0IJIJggMJPWF Q8SAwjvf8lNDX/rnsU4Deu2ByhMjzpwpBHTfcTanP7ytxzSlbP6ifW/txS2NuYhq ackoNG1HuHzKN1wLFC6md9WE8kQZhCJdqiEkfys3XSJ5rVEHJvD0BSQ2upv0tIe/ 5C/WtYoupxplXIg48ybhcVkY9mYO5957avEhvEYCohbg5LToEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwSffAveoRmNFuih51LdOxRO+X4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMDE3YjJlNDUtZDYxZS0z NTk2LWI1NWItY2YwZWE3NGYzMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZwYnauOnzVHeLPFoeVq0JZU2uDslgkILNmyDQ8zZS17JffXBaQo1Mb t/sKaZQG2UYvVCp+4Ctc8mxNd/vK/pKF0WQdS5nEsbD+wU9AjD2oprnm0MPvAEak 7oCAat1j98XmqBMoRSGPKAGfvphl11kuoYa2WQgmS/MGyJor8sgy053aqx/vEXOz ZLI/1mkvfrhfsUng8pEKxdezuLUxc4LS0L9XCQl7ARDA4zLm98yVDeSpVVosGHGb gm9Qi0eEjnucyhmjDvC7ssFk4QRO4+u0TNX2XNta11qu94sGfv6M2Pg71LV4mo+R F9uWB5w35lDZGBWCpQdrpMvH+eTZBas= -----END CERTIFICATE-----Generated at Wed May 13 13:30:13 2026 by rpki-client