$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30f18138-c1ab-36d7-991d-784dd997e256.roa File: 30f18138-c1ab-36d7-991d-784dd997e256.roa (raw, json) Hash identifier: GDHIuLiBUkkuEeJO+sgvToZfGft9RJsfPJBGR8ZPIZs= Subject key identifier: FD:2F:4C:88:46:0D:FA:72:B6:01:F8:D6:22:3F:2B:E3:AD:07:C8:99 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1EFAFD12EA4CC4F6F3E840 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30f18138-c1ab-36d7-991d-784dd997e256.roa Signing time: Fri 24 Apr 2026 23:21:43 +0000 ROA not before: Fri 24 Apr 2026 23:21:43 +0000 ROA not after: Thu 23 Jul 2026 23:21:43 +0000 asID: 20001 IP address blocks: 64.16.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:fa:fd:12:ea:4c:c4:f6:f3:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:43 2026 GMT Not After : Jul 23 23:21:43 2026 GMT Subject: CN=22fd9e4d-808c-47e8-9b0a-5714b24c22eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:da:36:9c:85:e6:6d:5e:74:0a:a0:0d:4a:1f: d9:87:b2:80:03:71:e4:ca:63:b0:c9:04:75:5f:3e: 4a:8d:7b:16:57:8e:f7:05:25:28:91:8c:9e:69:d0: 73:9f:35:dd:b3:a1:0d:de:63:c9:63:fa:2f:a5:72: 1f:64:67:0f:bd:7e:b9:9b:1e:5e:43:4a:56:8b:27: 7d:f5:e6:4d:3c:bb:95:e6:98:f2:66:06:ef:9c:52: db:ff:d7:d0:35:54:d7:35:f9:dc:07:de:99:1e:04: 9e:81:96:bb:66:bd:ef:45:a9:cb:66:12:ab:ac:2d: cd:fe:f9:b1:36:e7:26:23:09:0d:8e:46:8c:3e:03: 38:dd:72:00:95:66:f1:eb:bd:4d:55:c2:49:df:e2: 29:2d:9f:8c:96:d0:a0:54:ff:91:18:c1:e0:87:aa: 50:6a:5a:02:45:3d:0b:29:2e:ad:00:ba:b9:c8:0a: f2:a7:0e:11:0b:8a:6c:fd:67:8d:7e:a0:57:9a:db: 98:dc:ed:5b:49:05:3a:e6:74:b2:75:5d:aa:b3:71: 91:9d:92:8e:54:42:b3:2f:a2:d6:47:0d:1c:b0:6e: 36:c4:4b:4e:ea:ff:fc:e6:ae:60:c4:a8:97:99:57: 50:7d:34:19:76:bc:e5:6f:a5:c6:30:0d:a9:1c:b4: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2F:4C:88:46:0D:FA:72:B6:01:F8:D6:22:3F:2B:E3:AD:07:C8:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30f18138-c1ab-36d7-991d-784dd997e256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:14:17:f7:bf:4d:07:c3:dd:60:19:15:c6:9e:24:0a:d0:0f: cf:69:9b:7a:08:a6:ce:15:b1:93:ef:6d:73:8b:c3:39:d3:78: 82:7f:75:aa:f6:c7:d3:5c:99:1f:e8:80:1a:21:bf:00:b4:61: 86:48:fe:b3:0e:2b:45:a6:a9:06:fb:89:bc:69:19:44:2a:91: ea:ac:7d:be:6a:c5:48:a7:14:e6:e3:d6:b5:16:bf:e0:63:35: 85:fb:74:f8:21:c2:9f:95:72:d7:1c:14:0e:93:60:df:0c:d5: ae:14:1a:1f:8b:b6:25:d5:1a:d4:5a:21:f2:ba:42:d6:a9:12: 09:21:6c:7f:27:d1:dc:16:5a:a9:d6:0a:78:b6:7f:a7:84:3d: de:fe:a6:7c:62:b9:2d:40:ff:c6:95:9e:79:7e:b7:0d:c8:34: bf:d4:82:4f:e7:2f:e8:77:03:ed:ec:df:69:5d:13:09:da:f3: 9a:1d:4e:32:9c:bb:61:42:ef:0c:5c:42:5b:d4:df:a0:bf:76: 5b:86:b1:70:6f:0f:61:f3:2a:0d:67:e1:36:58:e0:77:b5:3c: bd:1e:e4:af:7a:d6:be:17:dc:87:59:e3:e2:bb:fc:f6:2f:20: 42:f3:db:b2:8f:56:0a:07:a7:56:02:f5:a2:7c:87:72:d7:c9: 97:8d:68:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHvr9EupMxPbz6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjE0M1oXDTI2MDcyMzIzMjE0M1owLzEtMCsGA1UEAxMk MjJmZDllNGQtODA4Yy00N2U4LTliMGEtNTcxNGIyNGMyMmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79o2nIXmbV50CqANSh/Zh7KAA3HkymOwyQR1 Xz5KjXsWV473BSUokYyeadBznzXds6EN3mPJY/ovpXIfZGcPvX65mx5eQ0pWiyd9 9eZNPLuV5pjyZgbvnFLb/9fQNVTXNfncB96ZHgSegZa7Zr3vRanLZhKrrC3N/vmx NucmIwkNjkaMPgM43XIAlWbx671NVcJJ3+IpLZ+MltCgVP+RGMHgh6pQaloCRT0L KS6tALq5yArypw4RC4ps/WeNfqBXmtuY3O1bSQU65nSydV2qs3GRnZKOVEKzL6LW Rw0csG42xEtO6v/85q5gxKiXmVdQfTQZdrzlb6XGMA2pHLQ/eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0vTIhGDfpytgH41iI/K+OtB8iZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMzBmMTgxMzgtYzFhYi0z NmQ3LTk5MWQtNzg0ZGQ5OTdlMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQUF/e/TQfD3WAZFcaeJArQD89pm3oIps4VsZPvbXOLwznTeIJ/dar2 x9NcmR/ogBohvwC0YYZI/rMOK0WmqQb7ibxpGUQqkeqsfb5qxUinFObj1rUWv+Bj NYX7dPghwp+VctccFA6TYN8M1a4UGh+LtiXVGtRaIfK6QtapEgkhbH8n0dwWWqnW Cni2f6eEPd7+pnxiuS1A/8aVnnl+tw3INL/Ugk/nL+h3A+3s32ldEwna85odTjKc u2FC7wxcQlvU36C/dluGsXBvD2HzKg1n4TZY4He1PL0e5K961r4X3IdZ4+K7/PYv IELz27KPVgoHp1YC9aJ8h3LXyZeNaF4= -----END CERTIFICATE-----Generated at Wed May 13 12:50:47 2026 by rpki-client