$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/21f3ed27-5e0c-38dd-a8fa-3c0687f4d531.roa File: 21f3ed27-5e0c-38dd-a8fa-3c0687f4d531.roa (raw, json) Hash identifier: r+Lhxs4pQHG+bRaMId789EpmEl9v0nXZRImLLryGlbA= Subject key identifier: B8:A6:80:14:62:D0:D0:A4:B0:64:3F:3D:94:85:81:D9:BC:78:BE:D7 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D96ACD838FDB9089692220700 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/21f3ed27-5e0c-38dd-a8fa-3c0687f4d531.roa Signing time: Wed 22 Apr 2026 07:21:05 +0000 ROA not before: Wed 22 Apr 2026 07:21:05 +0000 ROA not after: Tue 21 Jul 2026 07:21:05 +0000 asID: 397630 IP address blocks: 64.16.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:96:ac:d8:38:fd:b9:08:96:92:22:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 22 07:21:05 2026 GMT Not After : Jul 21 07:21:05 2026 GMT Subject: CN=55bbef59-c24c-413c-b3bb-0f2b07593c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f7:e5:52:16:61:37:66:fa:27:aa:36:f5:83: d9:48:a8:ee:6f:8a:4e:f5:4f:42:03:76:d2:47:84: be:92:f1:be:af:2e:35:a2:1b:e5:c0:2e:4f:95:de: db:70:b9:fd:40:20:ee:11:1e:ad:5f:c5:63:09:c6: 07:92:d7:28:65:eb:67:8d:d9:f0:cc:31:79:57:c7: 89:f6:1f:cf:4b:41:c2:6f:2a:82:0c:9d:06:ec:98: c7:57:80:c7:d1:40:2a:98:8f:60:47:c1:18:5c:6b: 15:e7:c2:1d:fd:64:ac:5a:96:ec:56:87:f2:68:70: 4b:4e:76:35:e6:07:85:4e:c4:ca:7a:d1:29:66:62: 48:95:11:f4:b7:bb:fa:c8:60:50:26:82:6d:aa:11: dc:7c:fb:e1:73:72:fb:74:22:c0:59:41:3f:c0:cc: a7:99:98:0b:44:68:bc:cb:e8:d8:3a:ea:cb:03:cb: be:16:c8:0c:75:cf:a4:d0:41:46:59:54:20:28:b7: e3:2d:4a:b3:89:76:ef:27:91:ea:08:c2:07:bf:de: ce:9d:b9:3b:b6:02:81:2b:c6:00:9b:91:82:0c:ed: 27:e0:a8:99:05:7e:c1:72:8c:cb:92:39:40:84:dc: 89:c7:a3:dd:b2:8e:42:e3:ca:ea:49:2f:6d:68:1c: 7d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A6:80:14:62:D0:D0:A4:B0:64:3F:3D:94:85:81:D9:BC:78:BE:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/21f3ed27-5e0c-38dd-a8fa-3c0687f4d531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ff:31:9e:a4:13:da:b6:5b:68:ab:d9:ff:a0:c0:e0:5f:5b: ea:53:98:26:d5:05:df:ac:84:2d:13:90:9b:3a:d9:2e:32:08: b0:a1:8e:44:f1:2c:f2:5c:c9:40:06:2b:5e:60:47:6e:df:c4: ca:c0:03:7c:1b:92:87:fe:f3:1e:fd:9f:7f:4b:a6:a7:a9:d8: 4c:17:5f:b0:0f:9c:7c:3a:12:14:d2:01:8b:54:11:d6:b5:ee: df:64:26:1a:99:c1:69:7f:21:ad:7a:38:d9:ec:55:69:05:26: d4:91:e0:25:fa:b4:95:ae:9e:26:0a:9c:7a:ca:e5:6a:e0:32: c8:73:c3:5a:7f:5c:4b:fe:ff:4d:2e:cf:dd:ad:48:a3:34:83: 67:30:8e:61:ca:96:42:96:f6:7f:c3:5a:57:c2:27:f4:4e:6b: e7:b5:46:b1:58:75:01:0b:10:90:45:7f:c7:c6:2e:1d:27:15: 04:94:0e:49:d5:a3:b4:e0:13:85:f0:95:bb:fe:71:01:5b:be: 6f:a0:53:dc:2a:4f:13:c5:f8:2c:00:a3:c4:20:a3:35:d1:c9: cd:9c:31:c7:d2:39:07:f0:e4:b5:5d:1e:d8:6f:7a:e9:bd:8b: db:e8:4d:61:dc:2c:9f:de:c6:d8:01:40:92:f2:a2:d5:8f:a8: 26:cd:32:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2WrNg4/bkIlpIiBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyMjA3MjEwNVoXDTI2MDcyMTA3MjEwNVowLzEtMCsGA1UEAxMk NTViYmVmNTktYzI0Yy00MTNjLWIzYmItMGYyYjA3NTkzYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPflUhZhN2b6J6o29YPZSKjub4pO9U9CA3bS R4S+kvG+ry41ohvlwC5Pld7bcLn9QCDuER6tX8VjCcYHktcoZetnjdnwzDF5V8eJ 9h/PS0HCbyqCDJ0G7JjHV4DH0UAqmI9gR8EYXGsV58Id/WSsWpbsVofyaHBLTnY1 5geFTsTKetEpZmJIlRH0t7v6yGBQJoJtqhHcfPvhc3L7dCLAWUE/wMynmZgLRGi8 y+jYOurLA8u+FsgMdc+k0EFGWVQgKLfjLUqziXbvJ5HqCMIHv97Onbk7tgKBK8YA m5GCDO0n4KiZBX7BcozLkjlAhNyJx6Pdso5C48rqSS9taBx9kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLimgBRi0NCksGQ/PZSFgdm8eL7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMjFmM2VkMjctNWUwYy0z OGRkLWE4ZmEtM2MwNjg3ZjRkNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3/MZ6kE9q2W2ir2f+gwOBfW+pTmCbVBd+shC0TkJs62S4yCLChjkTx LPJcyUAGK15gR27fxMrAA3wbkof+8x79n39Lpqep2EwXX7APnHw6EhTSAYtUEda1 7t9kJhqZwWl/Ia16ONnsVWkFJtSR4CX6tJWuniYKnHrK5WrgMshzw1p/XEv+/00u z92tSKM0g2cwjmHKlkKW9n/DWlfCJ/ROa+e1RrFYdQELEJBFf8fGLh0nFQSUDknV o7TgE4Xwlbv+cQFbvm+gU9wqTxPF+CwAo8QgozXRyc2cMcfSOQfw5LVdHthveum9 i9voTWHcLJ/extgBQJLyotWPqCbNMhI= -----END CERTIFICATE-----Generated at Wed May 13 12:02:08 2026 by rpki-client