$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/023faff8-2743-302d-a9b7-559f261a706f.roa File: 023faff8-2743-302d-a9b7-559f261a706f.roa (raw, json) Hash identifier: CscUzpy+vlXspcZch7EN9EiiE4nnY0rvmdHtpyviMLY= Subject key identifier: DC:E4:38:7A:1E:1E:98:37:A5:56:A7:29:F4:A7:9B:D7:B6:0D:1A:00 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1FFF5DDEC1F455E5E85000 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/023faff8-2743-302d-a9b7-559f261a706f.roa Signing time: Fri 24 Apr 2026 23:23:46 +0000 ROA not before: Fri 24 Apr 2026 23:23:46 +0000 ROA not after: Thu 23 Jul 2026 23:23:46 +0000 asID: 397630 IP address blocks: 64.16.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:ff:5d:de:c1:f4:55:e5:e8:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:46 2026 GMT Not After : Jul 23 23:23:46 2026 GMT Subject: CN=b06cb722-78d0-4356-969b-95494da958dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:01:d4:c7:d6:4e:ef:dc:b1:e9:e0:4f:59:b1: 91:fb:aa:f2:f8:84:ef:2a:b6:38:5b:af:70:f9:f3: de:ea:17:bd:ac:9f:43:af:15:87:0f:3d:d1:cd:44: 4a:90:f4:62:3c:2d:3e:f0:71:0c:2b:d8:a4:84:d7: cd:51:77:13:12:0e:24:f9:de:f2:1c:a2:4d:ec:ff: 84:c5:4d:15:ba:e2:1a:0e:11:12:22:22:c9:ed:96: 96:2a:ce:f1:1c:f4:d4:bc:b1:c3:7e:c0:43:d2:7a: c8:4d:c2:6a:3e:9c:15:99:48:3a:6b:f0:c4:d0:7e: cc:9c:a2:18:a9:86:d2:2c:95:07:24:98:c2:35:d4: 3f:d6:4c:67:71:3c:97:16:5a:47:08:c2:3d:e2:c4: 83:51:57:07:f7:92:dd:5b:03:c2:b0:c3:d6:e2:28: d0:7b:12:61:43:ec:1a:7e:5a:04:8c:3c:70:34:2a: 32:e3:45:6e:42:4c:2a:fe:4f:58:00:b4:d2:2e:99: d7:82:07:53:5a:83:19:d6:30:b5:49:3c:10:12:2f: 05:d5:db:57:54:be:3d:7d:8b:59:41:f8:41:57:6e: 94:e1:2c:2e:0f:74:fd:ac:f3:fa:20:37:10:e4:27: 3e:02:4b:27:f1:87:85:9a:66:fb:6d:8b:d5:2c:1b: 46:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E4:38:7A:1E:1E:98:37:A5:56:A7:29:F4:A7:9B:D7:B6:0D:1A:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/023faff8-2743-302d-a9b7-559f261a706f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:51:10:99:e1:18:f4:e3:ed:cb:13:88:41:80:5d:d1:d4:0d: 35:23:eb:b1:7d:c9:da:58:63:6e:ec:c7:de:d3:9f:a4:0f:a2: 44:08:63:8e:3a:ab:89:55:46:bd:18:46:14:f3:fd:97:04:70: 24:d6:dd:ed:f4:27:64:0a:e2:12:14:e5:46:e5:80:9e:82:9c: 9a:bd:57:4e:54:57:0f:4f:5d:f8:a8:24:e2:8c:de:e9:eb:f0: ee:66:42:7d:e7:44:55:68:e1:c0:e1:88:ba:81:6c:06:83:11: 1f:30:d7:50:b6:1e:99:41:a0:e5:a6:2c:09:35:3c:82:46:35: 98:4e:9a:5e:da:80:e4:a4:6c:65:51:95:b0:c8:0a:4a:d2:bb: 71:f9:a5:d5:f5:d6:03:72:91:2a:61:38:15:98:d9:cd:ca:bb: eb:4c:22:3e:b3:4b:ef:95:94:66:02:14:51:b8:83:d0:53:54: 3c:d8:20:bb:c5:e2:7d:38:b0:21:50:59:28:a6:86:25:98:9d: 2f:da:2f:cc:66:85:71:c9:a3:79:5a:c6:9a:c0:cb:cb:58:40: a9:55:5c:e1:78:0c:63:d1:70:e3:1c:f4:e9:1d:9f:1d:87:1f: 67:1f:36:4d:d9:32:b3:77:3c:72:61:2c:27:f6:43:6c:24:06: ce:78:13:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH/9d3sH0VeXoUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjM0NloXDTI2MDcyMzIzMjM0NlowLzEtMCsGA1UEAxMk YjA2Y2I3MjItNzhkMC00MzU2LTk2OWItOTU0OTRkYTk1OGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wHUx9ZO79yx6eBPWbGR+6ry+ITvKrY4W69w +fPe6he9rJ9DrxWHDz3RzURKkPRiPC0+8HEMK9ikhNfNUXcTEg4k+d7yHKJN7P+E xU0VuuIaDhESIiLJ7ZaWKs7xHPTUvLHDfsBD0nrITcJqPpwVmUg6a/DE0H7MnKIY qYbSLJUHJJjCNdQ/1kxncTyXFlpHCMI94sSDUVcH95LdWwPCsMPW4ijQexJhQ+wa floEjDxwNCoy40VuQkwq/k9YALTSLpnXggdTWoMZ1jC1STwQEi8F1dtXVL49fYtZ QfhBV26U4SwuD3T9rPP6IDcQ5Cc+Aksn8YeFmmb7bYvVLBtGpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzkOHoeHpg3pVanKfSnm9e2DRoAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMDIzZmFmZjgtMjc0My0z MDJkLWE5YjctNTU5ZjI2MWE3MDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9REJnhGPTj7csTiEGAXdHUDTUj67F9ydpYY27sx97Tn6QPokQIY446 q4lVRr0YRhTz/ZcEcCTW3e30J2QK4hIU5UblgJ6CnJq9V05UVw9PXfioJOKM3unr 8O5mQn3nRFVo4cDhiLqBbAaDER8w11C2HplBoOWmLAk1PIJGNZhOml7agOSkbGVR lbDICkrSu3H5pdX11gNykSphOBWY2c3Ku+tMIj6zS++VlGYCFFG4g9BTVDzYILvF 4n04sCFQWSimhiWYnS/aL8xmhXHJo3laxprAy8tYQKlVXOF4DGPRcOMc9Okdnx2H H2cfNk3ZMrN3PHJhLCf2Q2wkBs54E1Y= -----END CERTIFICATE-----Generated at Wed May 13 14:53:40 2026 by rpki-client