$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1c9c670d-5980-362f-a2d3-ff14ca26595a.roa File: 1c9c670d-5980-362f-a2d3-ff14ca26595a.roa (raw, json) Hash identifier: axAOHWIl5MOABDeOzlWCUAt9BocrqtfyqReGmJCb2kQ= Subject key identifier: F2:31:14:31:CA:9D:A1:FC:C6:46:79:A9:AB:83:F5:4A:74:E9:71:36 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E20280B0D59E5A60E8054E0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1c9c670d-5980-362f-a2d3-ff14ca26595a.roa Signing time: Fri 24 Apr 2026 23:24:05 +0000 ROA not before: Fri 24 Apr 2026 23:24:05 +0000 ROA not after: Thu 23 Jul 2026 23:24:05 +0000 asID: 397630 IP address blocks: 64.16.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:20:28:0b:0d:59:e5:a6:0e:80:54:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:24:05 2026 GMT Not After : Jul 23 23:24:05 2026 GMT Subject: CN=f733903c-de08-4317-a27b-b46bae1140d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c1:ed:28:76:d8:7f:ff:53:fd:4b:30:22:44: 55:09:1b:2d:d5:a3:a1:1c:8d:6a:7f:4f:49:f5:36: 7f:ca:53:4e:61:f1:b6:68:b2:d6:8e:79:45:61:83: 4e:d9:80:77:9f:d8:cb:98:0f:78:3a:5a:ee:f8:a8: ca:09:60:5d:5d:82:7d:6e:30:86:d5:e6:e7:18:e4: 05:10:89:2b:35:f0:5b:3e:63:25:34:7a:85:e0:60: ae:87:d1:15:b2:a5:39:6d:18:be:1b:ea:ad:be:30: b3:b0:62:c6:8b:36:77:fe:51:e1:95:f4:46:e5:f3: 2e:8c:b4:38:da:9d:3c:80:af:7c:c0:20:98:31:13: ec:f1:61:80:f3:a4:eb:b9:fb:26:c6:15:6d:48:fa: cb:e8:dc:d2:04:7b:d4:54:17:ea:ac:ab:e1:41:ad: a0:93:25:9c:d7:bb:d8:a8:16:be:a9:c9:52:f9:8c: 7b:df:ca:04:c5:61:89:74:6d:54:e9:5a:46:93:fe: 29:4c:38:25:49:16:dd:4c:a6:0f:2e:7c:b0:e6:cf: ed:db:f3:ac:a8:a2:fc:9b:d8:59:7b:9c:b1:db:31: 8f:3a:d1:4a:47:83:3a:e0:3a:50:ed:94:97:df:7a: 03:d5:5f:de:f4:5c:f0:d6:af:9a:4a:d7:6f:37:25: 1d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:31:14:31:CA:9D:A1:FC:C6:46:79:A9:AB:83:F5:4A:74:E9:71:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1c9c670d-5980-362f-a2d3-ff14ca26595a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:71:c9:41:d8:d3:29:30:fd:20:fa:62:c8:57:18:1d:d6:c3: d0:9f:a5:b6:36:8f:59:8e:1e:08:de:fe:d2:96:2e:43:ef:4f: c6:77:88:5d:a1:80:40:3b:10:34:e0:19:5e:e1:10:9d:11:84: 32:39:af:fc:0e:ad:f2:fc:50:5c:4f:25:3c:85:fd:a7:9f:90: 33:14:9e:85:8b:2f:79:b9:1a:30:b1:87:19:a9:f2:d8:53:c7: 9c:44:73:82:e8:8d:9e:d0:3e:27:e9:07:b4:7c:25:cd:57:25: 2c:22:ca:c9:cd:dd:40:96:bc:87:83:dc:30:bd:f0:25:ca:49: f0:3f:93:63:c7:0e:50:ad:23:e4:14:7a:3c:3a:73:ff:48:8b: c3:4b:a2:a7:18:6b:34:6b:f1:d9:fe:dc:39:da:e1:58:f4:ae: 55:c1:2b:9e:8b:f8:fa:4f:cc:3f:7d:cd:c2:34:3c:ab:75:a0: 20:d0:4b:47:7d:f7:ef:7e:ff:30:64:e7:94:aa:6c:12:32:42: 0b:24:2f:4b:b1:b9:ee:67:6a:56:e4:66:4f:f1:91:7f:62:dc: 4e:91:46:cb:50:34:84:bd:45:22:ba:a5:7f:55:3d:1a:29:48: 8d:44:ad:6c:58:9b:66:30:8e:88:ee:11:cd:4f:f1:ef:b8:9b: 4e:33:f1:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eICgLDVnlpg6AVOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjQwNVoXDTI2MDcyMzIzMjQwNVowLzEtMCsGA1UEAxMk ZjczMzkwM2MtZGUwOC00MzE3LWEyN2ItYjQ2YmFlMTE0MGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMHtKHbYf/9T/UswIkRVCRst1aOhHI1qf09J 9TZ/ylNOYfG2aLLWjnlFYYNO2YB3n9jLmA94Olru+KjKCWBdXYJ9bjCG1ebnGOQF EIkrNfBbPmMlNHqF4GCuh9EVsqU5bRi+G+qtvjCzsGLGizZ3/lHhlfRG5fMujLQ4 2p08gK98wCCYMRPs8WGA86TrufsmxhVtSPrL6NzSBHvUVBfqrKvhQa2gkyWc17vY qBa+qclS+Yx738oExWGJdG1U6VpGk/4pTDglSRbdTKYPLnyw5s/t2/OsqKL8m9hZ e5yx2zGPOtFKR4M64DpQ7ZSX33oD1V/e9Fzw1q+aStdvNyUdDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIxFDHKnaH8xkZ5qauD9Up06XE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMWM5YzY3MGQtNTk4MC0z NjJmLWEyZDMtZmYxNGNhMjY1OTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhxyUHY0ykw/SD6YshXGB3Ww9CfpbY2j1mOHgje/tKWLkPvT8Z3iF2h gEA7EDTgGV7hEJ0RhDI5r/wOrfL8UFxPJTyF/aefkDMUnoWLL3m5GjCxhxmp8thT x5xEc4LojZ7QPifpB7R8Jc1XJSwiysnN3UCWvIeD3DC98CXKSfA/k2PHDlCtI+QU ejw6c/9Ii8NLoqcYazRr8dn+3Dna4Vj0rlXBK56L+PpPzD99zcI0PKt1oCDQS0d9 9+9+/zBk55SqbBIyQgskL0uxue5nalbkZk/xkX9i3E6RRstQNIS9RSK6pX9VPRop SI1ErWxYm2YwjojuEc1P8e+4m04z8W0= -----END CERTIFICATE-----Generated at Wed May 13 11:35:06 2026 by rpki-client