$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24e4c407-a03f-3eab-8604-1bfe885d988e.roa File: 24e4c407-a03f-3eab-8604-1bfe885d988e.roa (raw, json) Hash identifier: 8n/s1LLq7+nQlyMoJhIrdeNILgH40CXPQexN0OaYFKs= Subject key identifier: 42:7C:97:C8:3B:9D:1E:B1:5F:C1:2C:3A:1B:27:D2:A6:FA:DD:C8:CD Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1FC3860FE979A1856DEA00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24e4c407-a03f-3eab-8604-1bfe885d988e.roa Signing time: Fri 24 Apr 2026 23:23:18 +0000 ROA not before: Fri 24 Apr 2026 23:23:18 +0000 ROA not after: Thu 23 Jul 2026 23:23:18 +0000 asID: 397630 IP address blocks: 64.16.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:c3:86:0f:e9:79:a1:85:6d:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:18 2026 GMT Not After : Jul 23 23:23:18 2026 GMT Subject: CN=08359683-8492-48a9-ab37-5b4efaf18bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:78:41:f8:e8:1f:6b:ef:e3:2a:82:2e:00: 64:7f:ea:49:6b:2b:39:e4:90:ad:7b:37:23:4a:6f: 20:b9:87:33:67:65:a2:94:66:05:fa:61:ad:88:fd: 1f:29:d4:38:d6:c0:d1:7e:9a:06:8f:58:bf:77:35: 15:ea:37:1e:be:74:9f:d5:8a:76:02:bb:db:a8:fc: 4f:7c:30:57:1d:0a:1c:16:d7:f5:b3:50:f1:88:35: a7:0a:0e:99:4f:42:c4:ed:8b:99:7b:31:db:85:b4: bb:8c:21:18:6f:a3:e9:6f:87:ce:94:bc:07:f4:0d: 0a:12:35:7d:0d:57:c0:72:de:aa:e4:8b:a3:80:89: a7:ee:04:bb:32:bc:19:ae:cb:35:dc:a1:fb:b6:ab: 50:25:6f:56:17:2d:42:e8:13:95:39:fb:bc:e1:e4: b6:31:30:da:cf:78:ea:48:1a:d6:5d:c4:2d:a0:7c: 6e:25:f4:12:ea:0c:7a:ef:5a:cc:8b:7b:22:25:3f: 58:ea:4f:86:62:37:fb:98:81:c3:19:ec:dd:de:2c: af:be:28:70:0d:1c:8a:98:fc:bc:c9:d6:72:05:c6: 5d:43:30:9a:a9:1e:63:a3:88:54:76:1b:74:d5:de: 04:4a:04:94:03:ac:55:95:19:4c:69:d8:d5:5b:29: ca:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7C:97:C8:3B:9D:1E:B1:5F:C1:2C:3A:1B:27:D2:A6:FA:DD:C8:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24e4c407-a03f-3eab-8604-1bfe885d988e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:29:26:ce:b0:e0:d2:3b:cb:b7:f4:ed:42:2f:b4:2c:05:2b: 43:d2:ad:ee:e4:1d:04:46:ca:02:33:97:cf:02:a4:74:20:6a: f8:50:de:3b:a5:ca:06:2e:e4:99:47:9e:bb:d4:fc:53:90:7a: ca:0c:1e:1c:78:95:d8:dc:7e:44:d2:9c:fc:0e:e2:0b:84:14: 11:c7:21:46:53:39:89:c2:d6:98:a0:49:04:70:27:98:1c:c7: 4e:ff:92:07:6d:b5:b2:f8:95:cd:50:2a:1c:08:c7:46:5c:58: 1f:5b:ea:9c:a9:1d:bf:f3:f5:2d:68:a7:6c:a0:b2:d2:f2:2f: 30:8a:f6:13:2b:fa:a5:a6:ee:36:a0:8f:d8:67:0e:a2:2c:ec: a3:7e:44:4a:f5:45:e2:a3:0f:fd:ef:f0:ce:09:cd:7f:bd:88: 5c:f6:83:5d:23:5c:a2:a2:85:b6:a0:10:6b:fd:7e:38:34:08: 7b:24:06:df:e6:9d:c5:6a:ca:df:11:95:c8:fb:45:66:8d:bc: ae:19:f4:8e:2b:a2:20:ba:47:21:67:b4:70:4e:d3:3e:f4:b0: 1c:22:4c:ee:29:31:4f:64:fe:87:ac:28:e0:4e:38:6e:d3:4a: 52:6c:90:3a:f3:f7:86:23:52:26:0e:93:b7:bd:8f:1b:db:8a: 67:77:0b:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH8OGD+l5oYVt6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjMxOFoXDTI2MDcyMzIzMjMxOFowLzEtMCsGA1UEAxMk MDgzNTk2ODMtODQ5Mi00OGE5LWFiMzctNWI0ZWZhZjE4YmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwup4QfjoH2vv4yqCLgBkf+pJays55JCtezcj Sm8guYczZ2WilGYF+mGtiP0fKdQ41sDRfpoGj1i/dzUV6jcevnSf1Yp2ArvbqPxP fDBXHQocFtf1s1DxiDWnCg6ZT0LE7YuZezHbhbS7jCEYb6Ppb4fOlLwH9A0KEjV9 DVfAct6q5IujgImn7gS7MrwZrss13KH7tqtQJW9WFy1C6BOVOfu84eS2MTDaz3jq SBrWXcQtoHxuJfQS6gx671rMi3siJT9Y6k+GYjf7mIHDGezd3iyvvihwDRyKmPy8 ydZyBcZdQzCaqR5jo4hUdht01d4ESgSUA6xVlRlMadjVWynKdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ8l8g7nR6xX8EsOhsn0qb63cjNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMjRlNGM0MDctYTAzZi0z ZWFiLTg2MDQtMWJmZTg4NWQ5ODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYpJs6w4NI7y7f07UIvtCwFK0PSre7kHQRGygIzl88CpHQgavhQ3jul ygYu5JlHnrvU/FOQesoMHhx4ldjcfkTSnPwO4guEFBHHIUZTOYnC1pigSQRwJ5gc x07/kgdttbL4lc1QKhwIx0ZcWB9b6pypHb/z9S1op2ygstLyLzCK9hMr+qWm7jag j9hnDqIs7KN+REr1ReKjD/3v8M4JzX+9iFz2g10jXKKihbagEGv9fjg0CHskBt/m ncVqyt8Rlcj7RWaNvK4Z9I4roiC6RyFntHBO0z70sBwiTO4pMU9k/oesKOBOOG7T SlJskDrz94YjUiYOk7e9jxvbimd3C/w= -----END CERTIFICATE-----Generated at Wed May 13 11:46:51 2026 by rpki-client