$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/18be8ce8-16d3-30eb-aec2-93d7db31e893.roa File: 18be8ce8-16d3-30eb-aec2-93d7db31e893.roa (raw, json) Hash identifier: 7gmDkTn40vic9wPMmYh6tD6+bjG4slaT3ABAsgC17qU= Subject key identifier: AF:51:1B:5C:2D:A0:1D:8C:5C:1C:E3:BE:7D:40:0D:C0:D0:DA:D9:99 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F9AFCA243E3E51D1FBA00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/18be8ce8-16d3-30eb-aec2-93d7db31e893.roa Signing time: Fri 24 Apr 2026 23:22:59 +0000 ROA not before: Fri 24 Apr 2026 23:22:59 +0000 ROA not after: Thu 23 Jul 2026 23:22:59 +0000 asID: 397630 IP address blocks: 64.16.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:9a:fc:a2:43:e3:e5:1d:1f:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:59 2026 GMT Not After : Jul 23 23:22:59 2026 GMT Subject: CN=db8e9ba8-afb7-4946-93b1-bcc277dd552e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:46:47:aa:73:6d:91:4f:23:02:01:54:e9: 7a:3b:c7:fa:58:97:9a:f5:8d:61:e1:de:cf:c7:59: 2d:3e:08:2d:e7:f0:0c:75:43:cf:3a:10:9f:d1:13: aa:50:e1:f8:93:ac:42:16:e0:f6:44:bd:e2:19:f6: c6:14:7b:96:c0:72:55:8f:06:ad:37:60:8c:e2:0b: a0:03:86:d1:00:94:c1:ca:96:a5:c2:4c:1c:1f:80: 50:f7:ad:f5:03:ae:d2:02:b7:fc:d8:c9:c3:dd:c7: f7:45:f4:40:17:b7:68:64:e0:5e:d4:06:08:4e:c0: ae:93:af:ae:f8:94:8c:aa:ab:57:d2:bc:79:1c:11: 57:28:b6:e7:c8:c0:73:57:79:10:da:cf:35:d3:8a: 01:a6:bd:62:84:f6:27:95:fb:d2:66:f4:cc:f6:c7: be:c1:fb:b4:f7:fe:d8:c9:8a:f5:60:0e:2b:58:b9: 8f:44:f0:85:2b:69:a6:f1:45:3f:bc:bb:fe:6a:ea: 1f:9d:87:79:e3:37:b4:93:cc:5c:d3:85:06:47:21: 55:34:9c:d1:06:48:df:07:53:25:8a:1f:ed:07:06: 57:d4:60:bb:ef:ca:4f:5c:18:be:00:1a:ac:5b:fa: b1:42:55:37:96:ae:27:be:97:4b:00:bb:40:a6:16: 66:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:51:1B:5C:2D:A0:1D:8C:5C:1C:E3:BE:7D:40:0D:C0:D0:DA:D9:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/18be8ce8-16d3-30eb-aec2-93d7db31e893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:88:e5:54:8d:dc:57:ad:b1:4b:27:3d:0e:c3:57:90:c6:fe: 4b:f3:26:12:d8:e6:51:8e:4e:60:48:a2:1b:11:f1:07:52:e2: 44:ea:b2:a3:f8:bf:94:35:62:54:c6:a4:b9:a2:f7:47:7a:07: a0:17:07:28:18:d8:70:6d:92:a1:a7:e1:ef:c1:b1:d2:2f:dc: dc:3b:6d:bb:17:f2:77:55:53:2c:f8:8d:18:4b:54:67:fc:20: 9e:07:48:92:88:c9:8e:2b:2a:f3:eb:49:7c:56:f4:ab:8a:34: 43:93:9c:a3:6b:0b:53:50:06:9e:2f:db:47:03:34:be:d2:15: d4:87:d0:07:76:6f:24:06:19:85:75:2c:85:45:7b:a7:9b:ee: b7:da:d8:f3:4d:e1:d0:36:70:ed:c3:01:07:05:5b:d7:d6:d5: 09:1d:88:21:2b:ed:f6:a8:ab:65:e0:1f:f4:33:be:cd:f2:f8: a5:ca:c1:a0:d0:36:86:7f:87:d2:86:da:9d:8e:1d:ec:bf:a5: 2a:22:6a:78:4d:80:89:b1:ec:9d:50:0c:b0:67:03:38:c1:7d: 04:2d:1e:77:bf:0b:85:17:4a:3a:1e:43:12:85:4c:42:9f:4b: c4:e2:d4:2b:ac:d4:f7:30:7e:8e:16:b9:ad:40:d1:8b:46:c7: fe:6c:73:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH5r8okPj5R0fugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjI1OVoXDTI2MDcyMzIzMjI1OVowLzEtMCsGA1UEAxMk ZGI4ZTliYTgtYWZiNy00OTQ2LTkzYjEtYmNjMjc3ZGQ1NTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu71GR6pzbZFPIwIBVOl6O8f6WJea9Y1h4d7P x1ktPggt5/AMdUPPOhCf0ROqUOH4k6xCFuD2RL3iGfbGFHuWwHJVjwatN2CM4gug A4bRAJTBypalwkwcH4BQ9631A67SArf82MnD3cf3RfRAF7doZOBe1AYITsCuk6+u +JSMqqtX0rx5HBFXKLbnyMBzV3kQ2s8104oBpr1ihPYnlfvSZvTM9se+wfu09/7Y yYr1YA4rWLmPRPCFK2mm8UU/vLv+auofnYd54ze0k8xc04UGRyFVNJzRBkjfB1Ml ih/tBwZX1GC778pPXBi+ABqsW/qxQlU3lq4nvpdLALtAphZmPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9RG1wtoB2MXBzjvn1ADcDQ2tmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMThiZThjZTgtMTZkMy0z MGViLWFlYzItOTNkN2RiMzFlODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqI5VSN3FetsUsnPQ7DV5DG/kvzJhLY5lGOTmBIohsR8QdS4kTqsqP4 v5Q1YlTGpLmi90d6B6AXBygY2HBtkqGn4e/BsdIv3Nw7bbsX8ndVUyz4jRhLVGf8 IJ4HSJKIyY4rKvPrSXxW9KuKNEOTnKNrC1NQBp4v20cDNL7SFdSH0Ad2byQGGYV1 LIVFe6eb7rfa2PNN4dA2cO3DAQcFW9fW1QkdiCEr7faoq2XgH/Qzvs3y+KXKwaDQ NoZ/h9KG2p2OHey/pSoianhNgImx7J1QDLBnAzjBfQQtHne/C4UXSjoeQxKFTEKf S8Ti1Cus1Pcwfo4Wua1A0YtGx/5sc90= -----END CERTIFICATE-----Generated at Wed May 13 06:56:13 2026 by rpki-client