$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2acb2416-ab76-3ae2-80f7-a1fe3e88b340.roa File: 2acb2416-ab76-3ae2-80f7-a1fe3e88b340.roa (raw, json) Hash identifier: F5oBPN2bivX8pObdIIo20wN549jqtiWOL+l48kR+ieg= Subject key identifier: 53:39:36:55:57:3C:DC:17:4B:5B:39:84:01:D4:D3:5D:B2:FD:84:75 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D96ADD62ADA4CF26075812500 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2acb2416-ab76-3ae2-80f7-a1fe3e88b340.roa Signing time: Wed 22 Apr 2026 07:23:05 +0000 ROA not before: Wed 22 Apr 2026 07:23:05 +0000 ROA not after: Tue 21 Jul 2026 07:23:05 +0000 asID: 20001 IP address blocks: 64.16.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:96:ad:d6:2a:da:4c:f2:60:75:81:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 22 07:23:05 2026 GMT Not After : Jul 21 07:23:05 2026 GMT Subject: CN=2cbcb5c8-e988-4443-8ac2-d7ce5c306f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:3d:24:4a:8f:1c:ff:5a:e5:55:83:ff:c3: 2f:d3:4d:3c:68:00:fe:df:f4:36:b8:c6:9a:79:7d: fc:7f:09:3e:9e:26:5c:de:18:33:48:9e:47:fb:4b: 93:07:de:9c:d9:21:ab:7e:98:6f:97:2f:84:89:ad: 54:7a:1f:12:15:9d:f0:38:ed:c0:61:4e:3b:5b:87: 47:19:aa:af:eb:2f:c0:c1:a1:b4:c1:4f:64:0b:68: bf:4e:26:c1:0c:8f:98:53:3b:5c:61:03:25:a7:eb: 37:2c:9e:ec:3c:37:bc:72:ce:7e:a0:3a:18:a7:53: 7c:42:39:48:ba:74:23:b6:70:c2:ad:95:ef:36:f1: a6:16:3c:4f:f2:48:9c:31:fb:06:f6:c8:d0:85:28: fe:d1:b5:ba:9f:bf:a2:d1:31:ad:b4:c4:ed:ef:83: 0a:41:f2:2c:15:d7:0f:69:8a:83:a0:f8:74:dd:a3: 22:b7:a5:24:2b:3f:1c:c3:65:6c:a1:4d:d5:0c:65: 60:c5:8e:c9:d6:61:d6:d3:5c:d9:76:b5:23:73:c3: 2f:4d:c3:b4:74:e9:e7:67:78:ab:7d:45:e7:fd:78: e8:c0:43:03:f9:e5:83:49:55:b6:24:3f:c2:48:02: ce:6f:12:4b:df:72:24:39:e2:99:3f:fd:71:b5:bb: fa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:39:36:55:57:3C:DC:17:4B:5B:39:84:01:D4:D3:5D:B2:FD:84:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2acb2416-ab76-3ae2-80f7-a1fe3e88b340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:79:f1:ba:3a:fe:f6:09:8c:c9:c7:45:0c:f3:02:77:58:6c: d3:4d:e4:6e:5d:fb:75:11:f9:92:23:3a:a4:9b:49:3b:84:23: 6e:e7:ac:9a:ab:76:01:9f:55:14:51:34:4a:01:d0:00:27:75: 54:10:7c:9a:7a:be:78:fc:dd:cd:5d:b0:95:32:52:e7:52:1c: 7e:7a:0f:ab:3b:0a:86:f0:58:b1:09:95:6d:0e:2d:39:4b:8c: aa:1d:dd:21:4d:a4:2b:c9:a9:2e:75:7d:52:e2:e3:33:34:4a: 08:8b:10:5b:74:2e:59:7a:0d:45:5f:05:86:bf:33:a2:0b:8d: 26:2b:42:80:40:e7:8f:a3:37:20:c7:b1:a8:7d:98:b1:26:a8: 6e:16:ea:0a:c5:32:a1:c9:27:8e:3f:3e:28:68:86:73:14:e0: 9b:70:69:fe:6f:9d:70:1a:aa:af:9e:ee:f3:2a:b0:4a:c5:88: 0b:3d:45:5f:3c:bb:0c:75:52:7c:7a:06:79:da:92:b4:47:9a: 0a:b3:f3:4f:c0:cd:30:9d:ff:63:c5:f1:4f:3b:46:ff:5a:dd: 9c:53:22:f7:8f:f9:be:39:1c:74:ac:ab:95:11:30:52:2c:b9: a1:16:4e:ef:69:ec:0f:26:04:c9:be:f7:b6:c8:49:40:f0:59: 47:c4:3f:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2WrdYq2kzyYHWBJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyMjA3MjMwNVoXDTI2MDcyMTA3MjMwNVowLzEtMCsGA1UEAxMk MmNiY2I1YzgtZTk4OC00NDQzLThhYzItZDdjZTVjMzA2ZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvos9JEqPHP9a5VWD/8Mv0008aAD+3/Q2uMaa eX38fwk+niZc3hgzSJ5H+0uTB96c2SGrfphvly+Eia1Ueh8SFZ3wOO3AYU47W4dH Gaqv6y/AwaG0wU9kC2i/TibBDI+YUztcYQMlp+s3LJ7sPDe8cs5+oDoYp1N8QjlI unQjtnDCrZXvNvGmFjxP8kicMfsG9sjQhSj+0bW6n7+i0TGttMTt74MKQfIsFdcP aYqDoPh03aMit6UkKz8cw2VsoU3VDGVgxY7J1mHW01zZdrUjc8MvTcO0dOnnZ3ir fUXn/XjowEMD+eWDSVW2JD/CSALObxJL33IkOeKZP/1xtbv6ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFM5NlVXPNwXS1s5hAHU012y/YR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMmFjYjI0MTYtYWI3Ni0z YWUyLTgwZjctYTFmZTNlODhiMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF958bo6/vYJjMnHRQzzAndYbNNN5G5d+3UR+ZIjOqSbSTuEI27nrJqr dgGfVRRRNEoB0AAndVQQfJp6vnj83c1dsJUyUudSHH56D6s7CobwWLEJlW0OLTlL jKod3SFNpCvJqS51fVLi4zM0SgiLEFt0Lll6DUVfBYa/M6ILjSYrQoBA54+jNyDH sah9mLEmqG4W6grFMqHJJ44/PihohnMU4Jtwaf5vnXAaqq+e7vMqsErFiAs9RV88 uwx1Unx6BnnakrRHmgqz80/AzTCd/2PF8U87Rv9a3ZxTIveP+b45HHSsq5URMFIs uaEWTu9p7A8mBMm+97bISUDwWUfEP3E= -----END CERTIFICATE-----Generated at Wed May 13 12:51:56 2026 by rpki-client