$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/167b126e-59fd-37ab-9b05-869540ca4067.roa File: 167b126e-59fd-37ab-9b05-869540ca4067.roa (raw, json) Hash identifier: mUAh71h/qK+YfsCg9KY1tRsDaGjyGdTyfjGzXol2XA4= Subject key identifier: 66:2D:EA:DA:EF:BC:08:5C:B1:1C:64:B7:19:C3:49:90:77:00:16:E6 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F984B0FC0E39DC75A26A0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/167b126e-59fd-37ab-9b05-869540ca4067.roa Signing time: Fri 24 Apr 2026 23:22:57 +0000 ROA not before: Fri 24 Apr 2026 23:22:57 +0000 ROA not after: Thu 23 Jul 2026 23:22:57 +0000 asID: 397630 IP address blocks: 64.16.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:98:4b:0f:c0:e3:9d:c7:5a:26:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:57 2026 GMT Not After : Jul 23 23:22:57 2026 GMT Subject: CN=5ce692ef-73fb-4b78-9d5d-15ee3e5e6292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:73:3b:e0:63:71:cf:82:0c:97:3b:15:c3:f9: 21:51:d6:cb:84:4d:46:c4:c7:42:6a:90:80:60:ad: dc:3a:9e:54:8c:52:7d:f9:21:02:58:54:ff:6e:18: f9:f2:97:c4:c5:6f:a8:88:b3:04:77:cb:11:9f:93: 1b:0b:61:8f:10:d0:9f:07:03:3f:7d:2f:de:b6:d3: f3:57:a0:65:ca:a2:6b:16:a0:36:28:51:df:e0:da: c3:e2:41:04:01:55:b9:9f:e7:71:4d:7e:6e:17:b8: d6:83:87:f6:54:11:52:43:ce:e8:b3:6e:31:0f:b4: 04:bd:8a:37:12:1d:1c:72:b4:9c:79:93:4f:91:f6: 5f:8a:5f:ee:3a:66:9e:f0:3b:6a:31:06:8c:40:45: d9:f2:68:e5:a5:23:e8:2b:e6:44:54:e5:8c:a3:2b: b0:b8:88:a0:7a:cd:39:30:a9:28:31:d4:95:07:25: 54:c7:db:c7:ab:9f:a9:f1:8b:6a:e3:8d:84:f8:6c: 1b:c2:13:7c:32:73:dd:23:84:db:4f:cc:6a:91:8d: 0b:5a:74:86:d7:00:68:3b:14:4c:4c:63:48:6b:7e: 4a:21:37:22:86:d7:27:b8:7c:d7:c2:c4:d3:b5:1b: 6a:03:18:6d:b0:b9:20:45:27:c5:ed:78:0f:24:54: 73:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2D:EA:DA:EF:BC:08:5C:B1:1C:64:B7:19:C3:49:90:77:00:16:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/167b126e-59fd-37ab-9b05-869540ca4067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:06:f7:e7:c9:f1:d2:5b:1c:e5:56:e0:a7:34:70:75:33:0a: 03:8b:31:9c:7d:3f:e7:ef:7e:57:1b:5e:38:17:63:e5:83:63: 2d:ad:00:f2:2a:70:ee:d5:62:a6:20:4f:4f:94:10:25:8b:0d: da:d3:fd:6e:a7:db:56:c3:1a:a9:c3:ce:54:ea:79:16:8f:f5: 07:df:d1:07:44:5c:ea:5e:43:c6:be:f6:04:20:d5:15:c7:5d: 26:d2:e6:64:1a:25:82:1c:64:0a:7c:66:5f:b3:60:db:a8:ad: cd:8e:7d:1c:e5:21:6b:a7:12:65:56:45:ad:8e:93:18:3f:a6: 64:9d:85:70:84:ec:2d:57:d1:6d:5b:07:93:82:b3:85:dc:c9: 50:b4:38:bb:e8:ba:3d:dc:88:4e:c2:65:2a:5e:04:fb:df:97: e5:fd:d3:da:1c:df:54:b3:30:9a:da:b7:fc:f2:00:9b:db:33: 60:81:ae:82:8f:64:9c:41:e1:c4:e0:87:cc:c1:4b:d1:25:2d: 52:23:4c:17:30:52:ce:c5:ec:81:01:82:74:7d:b7:23:77:92: 93:43:37:d4:b7:fa:f7:70:ed:a0:ed:59:f0:c5:ac:9d:9f:c0: 52:b2:e2:51:58:0a:d9:db:8f:6b:92:a9:48:9f:4c:af:87:0e: 44:7b:c4:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH5hLD8DjncdaJqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjI1N1oXDTI2MDcyMzIzMjI1N1owLzEtMCsGA1UEAxMk NWNlNjkyZWYtNzNmYi00Yjc4LTlkNWQtMTVlZTNlNWU2MjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHM74GNxz4IMlzsVw/khUdbLhE1GxMdCapCA YK3cOp5UjFJ9+SECWFT/bhj58pfExW+oiLMEd8sRn5MbC2GPENCfBwM/fS/ettPz V6BlyqJrFqA2KFHf4NrD4kEEAVW5n+dxTX5uF7jWg4f2VBFSQ87os24xD7QEvYo3 Eh0ccrSceZNPkfZfil/uOmae8DtqMQaMQEXZ8mjlpSPoK+ZEVOWMoyuwuIiges05 MKkoMdSVByVUx9vHq5+p8Ytq442E+GwbwhN8MnPdI4TbT8xqkY0LWnSG1wBoOxRM TGNIa35KITcihtcnuHzXwsTTtRtqAxhtsLkgRSfF7XgPJFRzcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYt6trvvAhcsRxktxnDSZB3ABbmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMTY3YjEyNmUtNTlmZC0z N2FiLTliMDUtODY5NTQwY2E0MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoG9+fJ8dJbHOVW4Kc0cHUzCgOLMZx9P+fvflcbXjgXY+WDYy2tAPIq cO7VYqYgT0+UECWLDdrT/W6n21bDGqnDzlTqeRaP9Qff0QdEXOpeQ8a+9gQg1RXH XSbS5mQaJYIcZAp8Zl+zYNuorc2OfRzlIWunEmVWRa2Okxg/pmSdhXCE7C1X0W1b B5OCs4XcyVC0OLvouj3ciE7CZSpeBPvfl+X909oc31SzMJrat/zyAJvbM2CBroKP ZJxB4cTgh8zBS9ElLVIjTBcwUs7F7IEBgnR9tyN3kpNDN9S3+vdw7aDtWfDFrJ2f wFKy4lFYCtnbj2uSqUifTK+HDkR7xJY= -----END CERTIFICATE-----Generated at Wed May 13 13:03:26 2026 by rpki-client