$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1fb96ef9-75fc-391b-953a-855085ac3d0e.roa File: 1fb96ef9-75fc-391b-953a-855085ac3d0e.roa (raw, json) Hash identifier: HiRLZCVGGTbMczWkuywYHOsPIxXII/d7VXfNDVcWt/U= Subject key identifier: 41:30:65:81:7B:2E:2B:59:10:88:D2:02:BB:9B:27:BB:97:FB:AF:74 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1EA04AE2DB3E8BAB696AE0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1fb96ef9-75fc-391b-953a-855085ac3d0e.roa Signing time: Fri 24 Apr 2026 23:21:00 +0000 ROA not before: Fri 24 Apr 2026 23:21:00 +0000 ROA not after: Thu 23 Jul 2026 23:21:00 +0000 asID: 7029 IP address blocks: 64.16.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:a0:4a:e2:db:3e:8b:ab:69:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:00 2026 GMT Not After : Jul 23 23:21:00 2026 GMT Subject: CN=cd5f9585-40e8-4ee9-be15-d571598ab963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:22:89:c5:8b:a5:f4:41:0e:91:b4:8b:2a:4b: 1a:10:b6:53:05:65:10:fd:3d:45:38:f8:a5:27:39: 2d:9c:e9:96:5e:29:3a:55:4e:e8:6e:02:1d:d4:16: dd:e6:58:2b:fd:62:9c:66:30:ea:1c:8a:e7:cd:b2: 2a:e4:1a:0d:aa:a4:ce:63:c4:fa:41:1d:f2:06:9c: be:38:5a:96:ec:1c:fc:2c:bc:22:ab:c7:71:7e:d8: b3:b7:a9:3a:b4:5c:c4:4f:fa:07:57:49:64:ad:9b: 87:d3:dc:7a:d3:ca:83:d1:84:81:aa:5c:b4:1f:dd: 7b:26:01:5e:3b:35:dd:58:05:5d:d5:7f:1c:6e:62: 23:57:f9:bb:2a:b8:ac:43:85:51:bd:b3:b6:36:a9: d7:55:8f:98:7c:10:2d:58:da:8a:f7:26:88:17:65: 06:77:fc:b2:59:61:e3:e2:d3:55:56:a4:d2:88:2f: 34:fb:fc:ef:9d:cd:2f:43:7f:3e:ab:11:f5:4d:1f: 44:8a:a4:0b:13:b7:ca:45:53:f9:0a:14:7b:89:3c: dc:3d:2f:53:d7:41:4a:17:cc:e6:7f:60:80:ed:b5: 0d:91:48:7e:c8:cb:a1:06:f6:73:1c:55:fd:ef:b5: d9:63:11:36:36:6b:bb:dd:5d:aa:c7:c2:f6:2c:c0: f0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:30:65:81:7B:2E:2B:59:10:88:D2:02:BB:9B:27:BB:97:FB:AF:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1fb96ef9-75fc-391b-953a-855085ac3d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:e2:9b:a9:6b:84:a4:e8:30:52:7b:86:d0:c9:fb:24:18:a4: 0e:68:dd:bf:8d:e8:ce:01:da:84:e1:2e:e5:84:a2:b1:35:42: 6b:15:7e:ad:d6:4c:86:c6:45:49:b9:db:3e:15:a6:88:10:68: d5:3b:1b:79:64:56:71:86:a1:80:68:54:18:2d:b7:d6:0b:c5: d2:bb:e5:92:d0:b0:87:b4:74:96:c6:57:a9:f6:f5:e2:cc:8f: 48:0a:11:e6:f9:c5:7d:1e:50:fc:7a:75:8a:41:38:61:e3:f7: 06:77:c7:b1:09:bd:eb:7f:53:65:13:0f:4d:6a:2a:ec:dc:7c: 69:87:1d:a5:49:3a:3a:c4:93:c4:7f:62:07:90:bf:66:1b:ca: 63:83:01:64:07:16:34:3d:75:6a:8d:b6:cd:1d:ad:24:a2:3d: 0e:99:f8:f8:3b:14:5d:d7:99:22:55:10:cb:f0:db:64:aa:63: ba:a7:e1:8d:9d:e6:83:06:c4:03:a7:76:89:39:bc:9c:24:2d: c4:48:d1:b6:c3:5f:d2:1c:88:13:dc:89:cd:36:59:86:3b:ac: 90:8d:7a:b2:bf:0a:7e:73:55:3d:70:da:25:b0:b5:67:49:e7: e1:d0:c4:8d:89:96:ab:b7:7b:21:4d:09:74:ad:88:2d:60:38: 74:9a:b2:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHqBK4ts+i6tpauAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjEwMFoXDTI2MDcyMzIzMjEwMFowLzEtMCsGA1UEAxMk Y2Q1Zjk1ODUtNDBlOC00ZWU5LWJlMTUtZDU3MTU5OGFiOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCKJxYul9EEOkbSLKksaELZTBWUQ/T1FOPil JzktnOmWXik6VU7obgId1Bbd5lgr/WKcZjDqHIrnzbIq5BoNqqTOY8T6QR3yBpy+ OFqW7Bz8LLwiq8dxftizt6k6tFzET/oHV0lkrZuH09x608qD0YSBqly0H917JgFe OzXdWAVd1X8cbmIjV/m7KrisQ4VRvbO2NqnXVY+YfBAtWNqK9yaIF2UGd/yyWWHj 4tNVVqTSiC80+/zvnc0vQ38+qxH1TR9EiqQLE7fKRVP5ChR7iTzcPS9T10FKF8zm f2CA7bUNkUh+yMuhBvZzHFX977XZYxE2Nmu73V2qx8L2LMDwiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEwZYF7LitZEIjSArubJ7uX+690MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMWZiOTZlZjktNzVmYy0z OTFiLTk1M2EtODU1MDg1YWMzZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7im6lrhKToMFJ7htDJ+yQYpA5o3b+N6M4B2oThLuWEorE1QmsVfq3W TIbGRUm52z4VpogQaNU7G3lkVnGGoYBoVBgtt9YLxdK75ZLQsIe0dJbGV6n29eLM j0gKEeb5xX0eUPx6dYpBOGHj9wZ3x7EJvet/U2UTD01qKuzcfGmHHaVJOjrEk8R/ YgeQv2YbymODAWQHFjQ9dWqNts0drSSiPQ6Z+Pg7FF3XmSJVEMvw22SqY7qn4Y2d 5oMGxAOndok5vJwkLcRI0bbDX9IciBPcic02WYY7rJCNerK/Cn5zVT1w2iWwtWdJ 5+HQxI2Jlqu3eyFNCXStiC1gOHSasgU= -----END CERTIFICATE-----Generated at Wed May 13 11:47:18 2026 by rpki-client