$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1351aab4-c24b-3671-9b9f-9fe1e5982c34.roa File: 1351aab4-c24b-3671-9b9f-9fe1e5982c34.roa (raw, json) Hash identifier: Ij/NFefU7pYLiGWcoLWVdsuP0+tGCHz1PSUGTP9xLDU= Subject key identifier: DF:AA:0F:BB:A2:9B:93:C2:E7:43:81:6F:E9:32:ED:19:0E:2B:C2:BB Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1EF588158D1536E9286740 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1351aab4-c24b-3671-9b9f-9fe1e5982c34.roa Signing time: Fri 24 Apr 2026 23:21:40 +0000 ROA not before: Fri 24 Apr 2026 23:21:40 +0000 ROA not after: Thu 23 Jul 2026 23:21:40 +0000 asID: 20001 IP address blocks: 64.16.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:f5:88:15:8d:15:36:e9:28:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:40 2026 GMT Not After : Jul 23 23:21:40 2026 GMT Subject: CN=35996f4d-1025-404c-8e88-b295306c184d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:39:c4:5f:65:ca:05:83:c5:d3:e9:0a:1e:7c: 5c:3d:16:65:02:0b:17:b0:a4:96:bc:a7:8a:23:aa: af:7d:5e:e0:7b:2a:bb:7f:33:30:df:dc:f8:73:81: cc:dc:07:44:2b:b3:d9:44:46:33:ae:99:a6:7a:ea: e2:41:49:c5:dc:d9:4c:8c:41:98:b3:2d:8a:e9:86: e5:43:c6:b0:7f:8c:72:f0:e8:81:4a:8e:68:b0:ed: b0:bb:fd:76:6d:fc:9f:ec:4f:73:56:96:94:75:f4: 64:98:3c:24:bd:a6:7a:ab:73:d8:be:dc:bf:0c:81: ab:e8:f6:6a:ce:2a:f4:32:45:9a:8f:76:4a:ab:12: 78:74:f9:37:52:ca:00:47:de:b8:08:6e:e7:3f:5f: 99:5e:ad:1b:c9:bc:61:54:42:03:ca:66:e8:71:a1: 60:b2:8c:2a:27:8d:00:38:32:2b:f0:63:d7:b2:4b: 38:7b:a5:84:53:cc:9a:8d:1a:01:a3:b9:93:05:45: 95:d8:e8:19:48:b2:c2:66:80:a3:f3:5b:50:72:b7: cb:f3:09:e4:0c:b6:bb:31:88:ef:f4:30:90:6d:3e: d7:fe:b2:e4:28:2b:8c:0a:b6:ca:14:7b:a0:fb:67: a0:5d:f5:9c:5b:a2:f3:c9:07:12:20:08:fe:c8:e3: bc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AA:0F:BB:A2:9B:93:C2:E7:43:81:6F:E9:32:ED:19:0E:2B:C2:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1351aab4-c24b-3671-9b9f-9fe1e5982c34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6b:01:00:4c:53:f6:8c:24:38:14:a8:0e:f0:34:1c:64:51: 02:2c:f9:0a:77:31:b5:d8:4c:39:ed:41:bc:ed:15:43:17:05: cc:07:3d:21:c4:71:02:d8:17:27:a3:4e:26:7f:f4:02:88:fb: 61:87:00:b6:28:63:73:ef:02:21:ea:a4:ca:5c:40:53:fe:09: ec:5c:84:8e:c3:1f:85:24:64:a6:3a:b1:5c:1c:ed:63:7d:0c: c9:08:f6:19:a4:70:56:25:dd:04:cc:9b:46:67:93:22:95:1d: 9b:63:97:bb:0c:6a:07:0d:4a:72:f0:72:46:93:e5:fa:7e:2d: 5b:38:73:e0:bc:35:aa:45:1c:09:b3:72:81:fc:d2:83:0c:05: f0:09:73:58:f9:be:07:0c:c3:4c:c4:51:74:94:fc:49:25:3f: cf:48:26:40:12:ed:e8:71:86:65:3e:fe:f1:14:10:d9:f2:8e: 89:8c:53:4e:a7:34:dd:90:49:12:0b:8f:cf:fd:d0:42:4b:d1: db:01:07:9e:c7:be:9c:98:22:46:b2:77:2d:05:36:8f:49:8d: 29:03:73:1d:a6:85:99:4f:b0:e5:43:19:71:58:15:13:63:62: 67:63:6f:b2:bc:f3:6e:70:df:e9:84:0d:7d:72:30:06:ea:a5: af:e1:8f:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHvWIFY0VNukoZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjE0MFoXDTI2MDcyMzIzMjE0MFowLzEtMCsGA1UEAxMk MzU5OTZmNGQtMTAyNS00MDRjLThlODgtYjI5NTMwNmMxODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TnEX2XKBYPF0+kKHnxcPRZlAgsXsKSWvKeK I6qvfV7geyq7fzMw39z4c4HM3AdEK7PZREYzrpmmeuriQUnF3NlMjEGYsy2K6Ybl Q8awf4xy8OiBSo5osO2wu/12bfyf7E9zVpaUdfRkmDwkvaZ6q3PYvty/DIGr6PZq zir0MkWaj3ZKqxJ4dPk3UsoAR964CG7nP1+ZXq0bybxhVEIDymbocaFgsowqJ40A ODIr8GPXsks4e6WEU8yajRoBo7mTBUWV2OgZSLLCZoCj81tQcrfL8wnkDLa7MYjv 9DCQbT7X/rLkKCuMCrbKFHug+2egXfWcW6LzyQcSIAj+yOO86QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+qD7uim5PC50OBb+ky7RkOK8K7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMTM1MWFhYjQtYzI0Yi0z NjcxLTliOWYtOWZlMWU1OTgyYzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJrAQBMU/aMJDgUqA7wNBxkUQIs+Qp3MbXYTDntQbztFUMXBcwHPSHE cQLYFyejTiZ/9AKI+2GHALYoY3PvAiHqpMpcQFP+CexchI7DH4UkZKY6sVwc7WN9 DMkI9hmkcFYl3QTMm0ZnkyKVHZtjl7sMagcNSnLwckaT5fp+LVs4c+C8NapFHAmz coH80oMMBfAJc1j5vgcMw0zEUXSU/EklP89IJkAS7ehxhmU+/vEUENnyjomMU06n NN2QSRILj8/90EJL0dsBB57HvpyYIkaydy0FNo9JjSkDcx2mhZlPsOVDGXFYFRNj Ymdjb7K8825w3+mEDX1yMAbqpa/hj3k= -----END CERTIFICATE-----Generated at Wed May 13 13:02:51 2026 by rpki-client