$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1e30ad90-6de1-3e20-b795-8fbb8f15dc86.roa File: 1e30ad90-6de1-3e20-b795-8fbb8f15dc86.roa (raw, json) Hash identifier: OfJQlbygtXLWUgHRHxn7e8Z0QKBBRCR1koJHWCST6GM= Subject key identifier: A7:D8:7F:F9:25:A4:C6:25:C2:61:66:89:DB:1E:8C:45:D9:57:56:3D Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F007071B31CADD2A65B00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1e30ad90-6de1-3e20-b795-8fbb8f15dc86.roa Signing time: Fri 24 Apr 2026 23:21:46 +0000 ROA not before: Fri 24 Apr 2026 23:21:46 +0000 ROA not after: Thu 23 Jul 2026 23:21:46 +0000 asID: 20001 IP address blocks: 64.16.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:00:70:71:b3:1c:ad:d2:a6:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:46 2026 GMT Not After : Jul 23 23:21:46 2026 GMT Subject: CN=727341ba-ba45-4eff-809e-91d660e38a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d9:f3:68:97:65:43:4d:5d:e2:32:7c:a3:cc: 1f:4c:b7:70:84:21:65:d0:7f:be:11:c0:39:7f:ef: 5b:54:5a:85:eb:0e:cd:b1:cf:fb:27:18:f9:6f:96: 91:ba:d4:6e:07:fb:5c:e8:95:80:35:e0:63:25:58: 4f:cd:55:e6:f8:bf:e7:7d:f7:d6:bc:73:3f:f9:88: 27:c5:76:32:01:fb:e7:6b:e3:6d:8a:68:fb:8d:d6: bc:3b:eb:42:2b:dd:d7:c9:5b:d3:d9:ab:70:14:c1: d3:39:91:df:3c:c9:a2:02:03:c8:bc:43:ef:3e:c2: c1:34:1d:20:41:55:73:ba:ed:7d:95:d4:1d:0e:b3: 05:f7:f9:f4:ac:a9:e7:52:ae:ee:78:92:75:f5:07: ce:d3:38:2d:7a:f4:63:8d:f6:33:6e:0d:e3:08:7f: e5:23:a4:d8:6b:6c:21:96:ff:3d:8f:f8:2f:10:db: 80:99:ba:77:ad:9a:b1:9d:eb:b4:07:5b:8f:c9:01: 85:c2:c3:6c:31:6a:02:6d:c3:f6:87:46:be:db:91: 8c:22:63:1a:17:74:7c:6a:7b:12:02:ad:c9:6e:de: 66:d4:d2:d9:24:e2:9a:85:d3:10:36:66:f1:ce:39: 2c:03:80:4d:34:4b:4b:db:d2:63:2d:8c:ce:64:06: 9f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D8:7F:F9:25:A4:C6:25:C2:61:66:89:DB:1E:8C:45:D9:57:56:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1e30ad90-6de1-3e20-b795-8fbb8f15dc86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:67:ef:67:c7:de:42:5f:07:73:67:ef:49:e9:21:e9:a0:4e: 2d:1b:fb:99:73:6d:9a:69:d3:d7:da:6b:50:70:32:e7:18:09: 9a:00:0d:84:1b:19:34:26:37:23:a9:18:f7:74:8d:25:91:0b: 69:b6:2f:a2:92:5e:5b:57:d9:01:90:6f:d9:0a:30:53:77:17: 1c:70:1c:fc:f9:f7:09:0d:d2:04:e0:71:46:f1:a0:5c:cd:1f: cd:b5:99:b1:e5:26:05:a2:a6:8b:f6:20:a6:1b:08:39:0b:48: 84:d2:eb:27:a1:fd:3a:b1:7f:4f:b9:15:e3:87:71:53:f7:ae: e6:42:02:ab:41:52:bf:d8:94:b8:2f:3f:30:66:98:8d:e9:f6: a9:4e:38:76:2f:f8:d6:ed:bf:06:de:e7:d4:da:a1:ca:53:fb: 0e:a3:01:dc:45:fe:5e:28:2e:59:4a:4c:db:e1:5e:44:8f:02: d2:d6:0b:59:f9:91:5e:ba:cc:11:a8:a6:5e:89:0b:82:cb:21: 53:cc:18:05:67:0a:03:a6:0b:77:e5:58:eb:6e:04:6b:26:a4: 10:1d:b7:7b:e4:38:d2:65:b8:84:36:f5:60:b2:70:be:bb:e9: af:28:56:ed:44:38:e1:6f:68:f5:ab:fe:f3:c3:d0:b8:02:5d: b0:ef:ce:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHwBwcbMcrdKmWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjE0NloXDTI2MDcyMzIzMjE0NlowLzEtMCsGA1UEAxMk NzI3MzQxYmEtYmE0NS00ZWZmLTgwOWUtOTFkNjYwZTM4YTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNnzaJdlQ01d4jJ8o8wfTLdwhCFl0H++EcA5 f+9bVFqF6w7Nsc/7Jxj5b5aRutRuB/tc6JWANeBjJVhPzVXm+L/nfffWvHM/+Ygn xXYyAfvna+Ntimj7jda8O+tCK93XyVvT2atwFMHTOZHfPMmiAgPIvEPvPsLBNB0g QVVzuu19ldQdDrMF9/n0rKnnUq7ueJJ19QfO0zgtevRjjfYzbg3jCH/lI6TYa2wh lv89j/gvENuAmbp3rZqxneu0B1uPyQGFwsNsMWoCbcP2h0a+25GMImMaF3R8ansS Aq3Jbt5m1NLZJOKahdMQNmbxzjksA4BNNEtL29JjLYzOZAaf5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfYf/klpMYlwmFmidsejEXZV1Y9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMWUzMGFkOTAtNmRlMS0z ZTIwLWI3OTUtOGZiYjhmMTVkYzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZn72fH3kJfB3Nn70npIemgTi0b+5lzbZpp09faa1BwMucYCZoADYQb GTQmNyOpGPd0jSWRC2m2L6KSXltX2QGQb9kKMFN3FxxwHPz59wkN0gTgcUbxoFzN H821mbHlJgWipov2IKYbCDkLSITS6yeh/Tqxf0+5FeOHcVP3ruZCAqtBUr/YlLgv PzBmmI3p9qlOOHYv+Nbtvwbe59TaocpT+w6jAdxF/l4oLllKTNvhXkSPAtLWC1n5 kV66zBGopl6JC4LLIVPMGAVnCgOmC3flWOtuBGsmpBAdt3vkONJluIQ29WCycL67 6a8oVu1EOOFvaPWr/vPD0LgCXbDvzhA= -----END CERTIFICATE-----Generated at Wed May 13 13:44:33 2026 by rpki-client