$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/37a654aa-9de0-362c-9bf8-83dd058f0003.roa File: 37a654aa-9de0-362c-9bf8-83dd058f0003.roa (raw, json) Hash identifier: IZJE5o8i2P+8jqmcPDF0YSUinwjozZZrI9rHAWiMdtU= Subject key identifier: 06:05:D7:A6:31:32:9A:C0:47:9A:BF:F1:80:1E:42:38:AE:32:44:8E Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1EE21820BDAE71C125D7BC Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/37a654aa-9de0-362c-9bf8-83dd058f0003.roa Signing time: Fri 24 Apr 2026 23:21:31 +0000 ROA not before: Fri 24 Apr 2026 23:21:31 +0000 ROA not after: Thu 23 Jul 2026 23:21:31 +0000 asID: 7029 IP address blocks: 64.16.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:e2:18:20:bd:ae:71:c1:25:d7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:31 2026 GMT Not After : Jul 23 23:21:31 2026 GMT Subject: CN=e96eb8c8-aa9f-4770-97d4-a1d7bb404f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:75:f6:5a:51:2d:f1:99:df:d7:40:c9:86:e2: 80:63:7d:31:63:fd:40:86:c2:23:17:64:48:a6:ae: 6a:fc:47:59:ab:62:41:80:3a:68:fa:a8:9d:9e:31: df:2d:5e:0f:1c:b7:21:bc:4e:c0:8c:df:e7:a0:fe: d4:53:2f:3c:97:c5:53:83:ea:85:68:18:c9:41:83: 6a:61:04:58:06:99:2f:a2:e9:68:5e:33:59:17:82: b3:cd:73:c4:e7:49:31:35:86:b7:5e:e1:7d:20:5c: d8:03:3b:8f:64:8d:2f:e1:24:97:be:b5:1a:d3:f1: 3d:a6:7f:ab:51:91:f4:f2:80:51:bf:d7:11:72:df: 1d:76:cd:18:49:32:84:13:ff:68:af:f8:a0:d4:50: 69:a2:a6:b8:97:66:33:21:39:1c:16:a0:95:48:30: bf:f4:aa:31:fe:38:d6:7f:70:13:93:c8:6b:b5:a3: ba:59:08:53:2c:58:e1:80:77:93:20:3a:31:6a:2d: e7:99:0e:fa:1d:37:5f:90:27:33:9c:8e:d9:79:f9: 63:c5:da:10:24:68:9f:a3:fd:90:ce:4e:ff:30:9c: da:33:0e:87:c9:80:81:ab:d5:48:e6:a2:e4:2c:87: 55:dd:10:92:13:99:57:1e:c4:75:a8:1a:f6:44:33: 5a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:05:D7:A6:31:32:9A:C0:47:9A:BF:F1:80:1E:42:38:AE:32:44:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/37a654aa-9de0-362c-9bf8-83dd058f0003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:df:43:45:82:03:38:4a:35:22:a7:9e:d8:b2:4c:3f:22:8f: 4c:99:de:ce:3a:ad:9d:55:76:f6:67:f0:b2:f4:e3:82:06:2d: 47:e8:b1:98:a0:71:98:f2:c7:67:9e:54:e6:a3:26:07:46:5d: 21:9c:06:88:e8:0b:04:d9:35:ee:6f:70:f3:29:23:18:df:50: 8e:e2:6a:a0:27:91:cd:ae:72:4f:e8:6a:a2:88:d3:04:24:6b: 2d:50:15:97:e2:d6:30:07:d7:1b:97:65:aa:57:ec:21:26:a2: 29:92:68:1f:a9:89:a3:05:13:19:7a:9e:11:f8:6e:49:58:2f: a1:43:90:4b:d1:41:54:82:cd:b8:84:e1:5c:91:67:6e:9f:03: a5:b3:9b:34:c7:fc:7f:c0:4f:0b:a9:be:0e:e6:c4:9d:e5:4a: 94:56:45:dc:de:31:f9:f1:40:f6:cc:81:8b:31:aa:81:96:5b: 29:a6:43:c2:6b:dc:05:27:ed:db:06:e1:03:dc:e3:00:2d:23: cb:2f:f7:1d:f1:ef:2d:15:d3:c6:db:67:99:dc:6d:35:c9:63: bf:45:31:52:2c:8f:c5:54:d3:b2:d3:c5:46:0b:28:28:76:93: 58:85:97:8b:7e:9a:66:44:ed:2b:cd:a0:20:89:28:5a:c3:97: 8e:dd:d8:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHuIYIL2uccEl17wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjEzMVoXDTI2MDcyMzIzMjEzMVowLzEtMCsGA1UEAxMk ZTk2ZWI4YzgtYWE5Zi00NzcwLTk3ZDQtYTFkN2JiNDA0Zjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnX2WlEt8Znf10DJhuKAY30xY/1AhsIjF2RI pq5q/EdZq2JBgDpo+qidnjHfLV4PHLchvE7AjN/noP7UUy88l8VTg+qFaBjJQYNq YQRYBpkvouloXjNZF4KzzXPE50kxNYa3XuF9IFzYAzuPZI0v4SSXvrUa0/E9pn+r UZH08oBRv9cRct8dds0YSTKEE/9or/ig1FBpoqa4l2YzITkcFqCVSDC/9Kox/jjW f3ATk8hrtaO6WQhTLFjhgHeTIDoxai3nmQ76HTdfkCcznI7ZefljxdoQJGifo/2Q zk7/MJzaMw6HyYCBq9VI5qLkLIdV3RCSE5lXHsR1qBr2RDNaGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYF16YxMprAR5q/8YAeQjiuMkSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMzdhNjU0YWEtOWRlMC0z NjJjLTliZjgtODNkZDA1OGYwMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLfQ0WCAzhKNSKnntiyTD8ij0yZ3s46rZ1VdvZn8LL044IGLUfosZig cZjyx2eeVOajJgdGXSGcBojoCwTZNe5vcPMpIxjfUI7iaqAnkc2uck/oaqKI0wQk ay1QFZfi1jAH1xuXZapX7CEmoimSaB+piaMFExl6nhH4bklYL6FDkEvRQVSCzbiE 4VyRZ26fA6WzmzTH/H/ATwupvg7mxJ3lSpRWRdzeMfnxQPbMgYsxqoGWWymmQ8Jr 3AUn7dsG4QPc4wAtI8sv9x3x7y0V08bbZ5ncbTXJY79FMVIsj8VU07LTxUYLKCh2 k1iFl4t+mmZE7SvNoCCJKFrDl47d2Jo= -----END CERTIFICATE-----Generated at Wed May 13 12:47:01 2026 by rpki-client