$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/22f8749e-b069-355b-adf5-a87418a49dd7.roa File: 22f8749e-b069-355b-adf5-a87418a49dd7.roa (raw, json) Hash identifier: ilg4IDaKJ5zjkM3STzUxYh1G9XWHUNCBiSp01QJiqWU= Subject key identifier: 5E:CC:B8:EB:27:CC:DE:1D:77:09:F7:E5:A5:CA:6B:34:82:6B:70:1D Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E20255C3BAE588C9C975400 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/22f8749e-b069-355b-adf5-a87418a49dd7.roa Signing time: Fri 24 Apr 2026 23:24:04 +0000 ROA not before: Fri 24 Apr 2026 23:24:04 +0000 ROA not after: Thu 23 Jul 2026 23:24:04 +0000 asID: 397630 IP address blocks: 64.16.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:20:25:5c:3b:ae:58:8c:9c:97:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:24:04 2026 GMT Not After : Jul 23 23:24:04 2026 GMT Subject: CN=933bf7e6-be9c-42ec-8f91-21f4c5c00c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:27:0a:92:e9:28:41:b8:72:84:d3:50:e2: 6d:70:3c:f9:16:51:7b:92:b3:e0:a1:fb:97:bd:0e: 73:4d:4b:56:ff:9a:04:6d:db:6b:7a:fd:3f:01:a4: 8a:1d:b1:bf:91:14:b4:e7:79:eb:56:ed:36:8d:cf: 1a:be:1e:b2:0a:e8:49:f0:53:f8:cb:e5:d7:3f:ea: b8:1e:6a:41:e1:61:0d:71:a4:16:34:83:72:b0:e4: 8d:c3:11:5f:b6:e4:68:f7:d9:7a:38:d4:97:37:bc: 3c:9f:6b:35:5a:04:53:95:19:0b:88:26:2c:40:e2: 79:b1:59:dd:93:45:2f:9e:f0:24:35:f5:14:63:4b: b8:47:9c:34:fc:14:e5:25:ca:94:4f:2f:62:ac:13: d6:3e:b4:e5:df:2e:a5:8c:1c:79:0e:54:5b:e8:90: 9c:d1:43:9f:36:fa:f6:84:e2:1e:71:be:5a:63:b2: f8:40:15:4f:9a:22:a5:24:37:34:75:00:c7:e1:3b: 01:c6:37:cb:13:4a:ef:07:3e:7c:f9:d6:15:dc:01: 4f:21:5b:8c:a2:cc:74:e1:b9:c0:8f:6f:8c:85:77: e8:1f:cb:b5:ab:21:d3:9c:4a:e8:fe:7c:a5:e6:31: d4:87:20:00:71:1b:34:29:83:7f:36:df:0f:c2:66: 24:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CC:B8:EB:27:CC:DE:1D:77:09:F7:E5:A5:CA:6B:34:82:6B:70:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/22f8749e-b069-355b-adf5-a87418a49dd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:35:cf:12:4c:00:28:3c:dd:62:71:f3:a9:c6:c3:2b:5a:11: 55:0b:18:d4:f7:3c:12:8a:92:8b:11:84:fd:09:c4:d9:5c:e4: c2:79:c2:1b:1e:b8:72:a1:a8:05:84:cf:8c:c2:24:d2:28:1d: c5:57:e7:ff:90:d5:e9:74:01:d7:d7:f7:b4:48:b4:58:69:c2: 4a:58:81:96:9c:af:81:04:eb:98:25:b7:1c:92:a1:b5:e4:5d: 6e:1f:e2:3e:e2:ad:0d:2c:25:ff:32:39:4a:20:58:01:6a:a1: 0d:6a:bf:0a:a6:f9:ec:f7:72:e1:45:4e:99:64:46:c1:ee:8b: c2:18:e3:43:19:44:1b:31:6f:9c:f2:ec:15:2f:cd:d8:c1:3b: 34:74:dd:d3:e2:49:af:b0:c9:a4:00:a3:63:80:45:10:cc:04: 35:ad:cc:e6:1b:f3:83:10:ff:fa:c7:4a:c7:20:da:f4:d1:f9: 82:7d:56:ee:b5:27:d0:15:ba:08:9e:1e:9f:a8:4b:0a:de:79: 51:f7:0d:d3:1b:65:c0:6e:4f:f4:8f:57:27:09:19:04:73:30: f2:f5:7d:84:00:a7:c8:0f:fe:f0:57:e4:de:27:16:56:6b:37: 3d:d9:2a:5a:6e:d4:49:bb:97:14:c1:25:ed:d3:13:dc:0a:5f: 21:d4:25:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eICVcO65YjJyXVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjQwNFoXDTI2MDcyMzIzMjQwNFowLzEtMCsGA1UEAxMk OTMzYmY3ZTYtYmU5Yy00MmVjLThmOTEtMjFmNGM1YzAwYzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zknCpLpKEG4coTTUOJtcDz5FlF7krPgofuX vQ5zTUtW/5oEbdtrev0/AaSKHbG/kRS053nrVu02jc8avh6yCuhJ8FP4y+XXP+q4 HmpB4WENcaQWNINysOSNwxFftuRo99l6ONSXN7w8n2s1WgRTlRkLiCYsQOJ5sVnd k0UvnvAkNfUUY0u4R5w0/BTlJcqUTy9irBPWPrTl3y6ljBx5DlRb6JCc0UOfNvr2 hOIecb5aY7L4QBVPmiKlJDc0dQDH4TsBxjfLE0rvBz58+dYV3AFPIVuMosx04bnA j2+MhXfoH8u1qyHTnEro/nyl5jHUhyAAcRs0KYN/Nt8PwmYk9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7MuOsnzN4ddwn35aXKazSCa3AdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMjJmODc0OWUtYjA2OS0z NTViLWFkZjUtYTg3NDE4YTQ5ZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALk1zxJMACg83WJx86nGwytaEVULGNT3PBKKkosRhP0JxNlc5MJ5whse uHKhqAWEz4zCJNIoHcVX5/+Q1el0AdfX97RItFhpwkpYgZacr4EE65gltxySobXk XW4f4j7irQ0sJf8yOUogWAFqoQ1qvwqm+ez3cuFFTplkRsHui8IY40MZRBsxb5zy 7BUvzdjBOzR03dPiSa+wyaQAo2OARRDMBDWtzOYb84MQ//rHSscg2vTR+YJ9Vu61 J9AVugieHp+oSwreeVH3DdMbZcBuT/SPVycJGQRzMPL1fYQAp8gP/vBX5N4nFlZr Nz3ZKlpu1Em7lxTBJe3TE9wKXyHUJTo= -----END CERTIFICATE-----Generated at Wed May 13 14:08:04 2026 by rpki-client