$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1652fed3-32ae-39b3-ba12-292f985309b0.roa File: 1652fed3-32ae-39b3-ba12-292f985309b0.roa (raw, json) Hash identifier: jTGDj9D7y+YxJxgtGBf+NEPGnOwpGwafdaK4XSR/CB4= Subject key identifier: 2B:57:87:A2:FE:69:83:19:B8:FF:7B:8F:8F:3D:E2:23:47:53:16:4E Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F0E0C0790CAB382E40900 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1652fed3-32ae-39b3-ba12-292f985309b0.roa Signing time: Fri 24 Apr 2026 23:21:52 +0000 ROA not before: Fri 24 Apr 2026 23:21:52 +0000 ROA not after: Thu 23 Jul 2026 23:21:52 +0000 asID: 20001 IP address blocks: 64.16.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:0e:0c:07:90:ca:b3:82:e4:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:52 2026 GMT Not After : Jul 23 23:21:52 2026 GMT Subject: CN=fdc3ccb6-74ab-456c-8d56-57ffd16c516b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2d:a5:3f:98:06:7e:d0:16:89:8a:30:63:a9: 69:d9:e5:41:65:9c:a2:3f:9b:b5:45:ce:9a:6c:c7: 79:37:e4:28:a7:8b:e9:9a:d2:3c:14:ee:4c:14:d2: 34:87:35:c0:a5:51:d9:55:9a:62:bc:a4:96:af:aa: 67:5d:35:35:c8:a6:e1:e1:51:07:01:f6:c8:45:fe: f2:f6:6d:3c:ff:a0:3b:dd:c0:5e:69:c9:6d:bf:bd: e6:d2:1d:ce:0c:65:4b:35:f5:23:f3:59:98:bd:cd: 1b:c7:e4:79:72:72:df:ec:fa:4c:51:bb:bb:7d:57: 4e:4b:ae:7a:34:a8:31:44:bf:8b:73:88:23:34:0b: 35:7a:a1:4a:ed:b1:56:92:ed:64:fd:e9:54:dd:35: 46:0c:81:b7:20:7b:dc:ac:63:07:86:0f:8a:8b:b0: 0f:c2:6a:29:d1:1d:bb:2b:67:52:75:0b:b2:7b:6f: 87:68:9c:08:ac:d3:85:45:52:12:7d:aa:c7:e0:77: 33:df:4e:50:62:1e:7e:90:0e:8d:f5:76:12:2a:5e: 6e:fe:6d:8a:a8:c0:3a:b7:ce:c5:75:3d:05:f2:fe: 79:1f:12:93:f3:37:22:b2:fa:32:07:78:93:d7:b7: 48:5e:41:c1:d1:cc:09:2d:86:2c:7a:c1:33:6a:70: b6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:57:87:A2:FE:69:83:19:B8:FF:7B:8F:8F:3D:E2:23:47:53:16:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1652fed3-32ae-39b3-ba12-292f985309b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b7:f9:82:3a:16:e1:cd:f1:f2:27:4a:88:e8:52:c9:5e:83: 09:7f:a4:47:50:47:f2:c8:11:dc:0e:8d:98:71:1f:f0:57:51: 1d:4d:84:98:29:6d:cb:bf:f4:8b:81:5e:b8:74:ac:a0:18:d4: 1e:55:68:ec:15:ac:40:bd:b4:50:d3:8d:89:52:58:d9:67:2e: bc:91:9f:36:05:a4:f5:c4:22:c5:50:74:ce:b0:0b:2f:9a:3c: 3a:33:6a:cb:fd:c0:7b:ea:77:72:b2:34:4b:6b:d7:24:0d:1f: 78:51:fb:cb:6a:95:c5:54:97:b7:6a:2b:c6:bf:4a:36:b4:77: 88:d5:3e:36:5c:86:be:20:c6:85:26:09:9e:17:3d:23:09:0f: e9:e1:32:92:81:5a:35:04:d0:57:f1:fa:d7:af:04:a7:11:ff: 4a:45:e2:a2:f7:20:d1:06:34:b2:7f:1d:ce:b5:ca:91:cd:24: 88:98:6d:32:2c:58:6a:91:91:92:e3:f8:b6:cc:6f:df:c3:7c: e5:b2:5b:eb:06:5b:b7:70:3e:37:70:49:ad:7c:87:72:8a:cd: 13:f5:2a:a1:f2:44:9d:bd:d0:68:9c:16:9d:dd:3f:0f:35:f1: 2f:1f:70:f0:ec:6b:1c:9a:df:f7:7f:3f:50:fd:c8:43:80:dc: 1e:3c:6e:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHw4MB5DKs4LkCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjE1MloXDTI2MDcyMzIzMjE1MlowLzEtMCsGA1UEAxMk ZmRjM2NjYjYtNzRhYi00NTZjLThkNTYtNTdmZmQxNmM1MTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC2lP5gGftAWiYowY6lp2eVBZZyiP5u1Rc6a bMd5N+Qop4vpmtI8FO5MFNI0hzXApVHZVZpivKSWr6pnXTU1yKbh4VEHAfbIRf7y 9m08/6A73cBeacltv73m0h3ODGVLNfUj81mYvc0bx+R5cnLf7PpMUbu7fVdOS656 NKgxRL+Lc4gjNAs1eqFK7bFWku1k/elU3TVGDIG3IHvcrGMHhg+Ki7APwmop0R27 K2dSdQuye2+HaJwIrNOFRVISfarH4Hcz305QYh5+kA6N9XYSKl5u/m2KqMA6t87F dT0F8v55HxKT8zcisvoyB3iT17dIXkHB0cwJLYYsesEzanC2LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtXh6L+aYMZuP97j4894iNHUxZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMTY1MmZlZDMtMzJhZS0z OWIzLWJhMTItMjkyZjk4NTMwOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB63+YI6FuHN8fInSojoUslegwl/pEdQR/LIEdwOjZhxH/BXUR1NhJgp bcu/9IuBXrh0rKAY1B5VaOwVrEC9tFDTjYlSWNlnLryRnzYFpPXEIsVQdM6wCy+a PDozasv9wHvqd3KyNEtr1yQNH3hR+8tqlcVUl7dqK8a/Sja0d4jVPjZchr4gxoUm CZ4XPSMJD+nhMpKBWjUE0Ffx+tevBKcR/0pF4qL3INEGNLJ/Hc61ypHNJIiYbTIs WGqRkZLj+LbMb9/DfOWyW+sGW7dwPjdwSa18h3KKzRP1KqHyRJ290GicFp3dPw81 8S8fcPDsaxya3/d/P1D9yEOA3B48bk8= -----END CERTIFICATE-----Generated at Wed May 13 13:57:37 2026 by rpki-client