$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/38a55202-a5d1-3492-959c-af7d4c6ad01e.roa File: 38a55202-a5d1-3492-959c-af7d4c6ad01e.roa (raw, json) Hash identifier: /64qSd+hhds/md7UNm0q95efTTn+bwj2F+USsVeioUA= Subject key identifier: F7:6D:BF:7D:98:E2:62:7A:CB:43:6E:48:D7:FF:EC:C4:EE:97:EE:87 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E200221D9B03BA5E9D79A80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/38a55202-a5d1-3492-959c-af7d4c6ad01e.roa Signing time: Fri 24 Apr 2026 23:23:47 +0000 ROA not before: Fri 24 Apr 2026 23:23:47 +0000 ROA not after: Thu 23 Jul 2026 23:23:47 +0000 asID: 397630 IP address blocks: 64.16.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:20:02:21:d9:b0:3b:a5:e9:d7:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:47 2026 GMT Not After : Jul 23 23:23:47 2026 GMT Subject: CN=9bfab2d1-ec24-4076-abbf-52f0b651dd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:1e:82:77:cb:5f:3f:7e:98:04:fb:eb:67: bd:75:b8:8f:a9:ff:de:43:19:11:aa:a3:b7:5d:8b: a4:e8:69:e6:21:6a:bc:38:8d:38:61:26:14:70:15: 3b:e7:3e:c3:fe:67:df:0f:54:c6:78:73:74:3c:57: b2:00:06:f4:9b:4c:2f:e5:db:66:72:58:4d:53:69: 41:11:5a:e6:59:2a:e1:a0:24:6c:c0:8e:cb:88:e1: d7:38:d8:cd:53:46:cd:0a:61:fa:31:89:d1:6f:ee: 70:96:bc:e9:86:93:68:c4:b2:a0:12:d8:dc:b8:41: 1c:06:f1:16:5d:31:78:ec:15:b3:3a:18:5b:fc:98: d9:75:08:76:17:8d:ba:b7:70:71:c9:2f:b0:af:5a: b7:e8:a1:e0:13:b6:30:03:1f:84:9d:8e:22:b6:ae: 43:e3:65:a0:cc:cf:6a:7f:ca:63:d8:84:fe:7c:0b: 4f:1c:d8:9a:18:56:ed:fd:72:c9:86:8d:46:70:5e: 4c:b9:18:4a:ea:ca:9d:0a:e2:05:cf:e9:94:9e:be: e6:b5:31:23:29:02:9a:a3:3f:04:ab:83:b2:13:5d: e0:bb:be:c3:c3:8c:fe:ed:31:06:ad:81:fc:d2:9e: 66:1f:01:d0:3d:d2:c3:3f:eb:81:03:5e:4d:ad:fd: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6D:BF:7D:98:E2:62:7A:CB:43:6E:48:D7:FF:EC:C4:EE:97:EE:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/38a55202-a5d1-3492-959c-af7d4c6ad01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d4:f7:71:66:d8:26:16:55:93:7a:80:bc:92:9c:70:59:ab: 43:75:23:fa:3d:71:92:1f:e3:f3:ef:45:70:b0:5c:04:0b:08: 09:59:41:d9:dd:04:fd:2b:b3:b9:4b:7f:69:48:1f:2d:4a:20: f4:d5:6e:d5:ad:4d:82:5e:14:df:60:b7:f5:80:b0:b8:c2:ce: 5d:da:92:14:25:97:3c:b0:4b:20:50:8a:a9:53:93:b7:29:10: 8d:fc:2d:5a:72:f3:c3:18:13:a1:3f:c6:e7:b9:97:5a:b8:dc: 2c:c2:a5:db:20:80:75:c8:fa:d8:3a:80:e0:ad:9f:fb:32:26: 80:bf:e6:0e:03:bf:0f:e2:fa:4f:5d:4b:32:fc:d9:17:bc:7e: 29:88:43:b4:43:e1:2c:25:2b:70:41:5b:d4:15:e1:fe:3a:86: 9a:16:3e:4f:68:a7:f8:ca:16:a8:43:67:0a:11:44:ae:15:94: 0f:fa:7c:43:35:29:e7:6e:19:ab:56:43:41:f3:50:9e:c0:12: 97:03:57:ba:0b:1d:4f:a0:b4:52:66:17:8b:3b:c6:a9:79:d9: d1:9e:07:b4:df:31:c3:66:ef:32:3e:7d:a9:53:37:a0:6c:3a: fd:49:b8:d2:a9:09:4b:53:12:5c:cf:68:0f:2d:51:ee:42:cc: 6b:58:40:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eIAIh2bA7penXmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjM0N1oXDTI2MDcyMzIzMjM0N1owLzEtMCsGA1UEAxMk OWJmYWIyZDEtZWMyNC00MDc2LWFiYmYtNTJmMGI2NTFkZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtukegnfLXz9+mAT762e9dbiPqf/eQxkRqqO3 XYuk6GnmIWq8OI04YSYUcBU75z7D/mffD1TGeHN0PFeyAAb0m0wv5dtmclhNU2lB EVrmWSrhoCRswI7LiOHXONjNU0bNCmH6MYnRb+5wlrzphpNoxLKgEtjcuEEcBvEW XTF47BWzOhhb/JjZdQh2F426t3BxyS+wr1q36KHgE7YwAx+EnY4itq5D42WgzM9q f8pj2IT+fAtPHNiaGFbt/XLJho1GcF5MuRhK6sqdCuIFz+mUnr7mtTEjKQKaoz8E q4OyE13gu77Dw4z+7TEGrYH80p5mHwHQPdLDP+uBA15Nrf3bvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdtv32Y4mJ6y0NuSNf/7MTul+6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMzhhNTUyMDItYTVkMS0z NDkyLTk1OWMtYWY3ZDRjNmFkMDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7U93Fm2CYWVZN6gLySnHBZq0N1I/o9cZIf4/PvRXCwXAQLCAlZQdnd BP0rs7lLf2lIHy1KIPTVbtWtTYJeFN9gt/WAsLjCzl3akhQllzywSyBQiqlTk7cp EI38LVpy88MYE6E/xue5l1q43CzCpdsggHXI+tg6gOCtn/syJoC/5g4Dvw/i+k9d SzL82Re8fimIQ7RD4SwlK3BBW9QV4f46hpoWPk9op/jKFqhDZwoRRK4VlA/6fEM1 KeduGatWQ0HzUJ7AEpcDV7oLHU+gtFJmF4s7xql52dGeB7TfMcNm7zI+falTN6Bs Ov1JuNKpCUtTElzPaA8tUe5CzGtYQAA= -----END CERTIFICATE-----Generated at Wed May 13 14:53:31 2026 by rpki-client