$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3b3cbe77-0639-31d8-a800-0723ddbf3eba.roa File: 3b3cbe77-0639-31d8-a800-0723ddbf3eba.roa (raw, json) Hash identifier: BWkXoXzCVhHebNKRW+4eGNJ31Y1TjPDxDrVw8EMmTqA= Subject key identifier: 0D:36:6C:93:0A:DA:9D:B9:93:5F:9E:19:07:E2:23:91:EF:B4:AE:61 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F0B491B60B7076C1D0F00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3b3cbe77-0639-31d8-a800-0723ddbf3eba.roa Signing time: Fri 24 Apr 2026 23:21:51 +0000 ROA not before: Fri 24 Apr 2026 23:21:51 +0000 ROA not after: Thu 23 Jul 2026 23:21:51 +0000 asID: 20001 IP address blocks: 64.16.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:0b:49:1b:60:b7:07:6c:1d:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:51 2026 GMT Not After : Jul 23 23:21:51 2026 GMT Subject: CN=2e29da7a-68d0-419a-a99b-1069a523c763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6e:63:96:fb:92:47:b9:7c:dc:0c:ba:03:ca: 17:be:61:45:86:9c:43:10:d8:b2:e9:5c:1a:45:b5: 22:02:67:5a:2d:5b:8f:6b:52:33:06:18:b5:b3:99: 4d:f5:6d:a8:eb:34:7b:02:ca:25:41:10:4e:f8:20: 12:9f:df:49:60:cf:cc:f3:4d:b0:69:21:cb:41:4c: 58:2d:0f:da:34:a6:f4:a3:2d:d0:85:da:2f:cc:23: e8:5d:e4:16:39:7f:e3:3c:98:f5:25:c7:06:2e:70: 05:1e:bf:90:87:96:d7:b7:4f:23:a7:fd:8a:1d:e7: 4b:07:80:3d:4a:6b:08:c4:13:6b:0b:24:d1:83:0c: f6:6a:5b:4a:c1:e4:6d:71:c9:0f:af:7e:65:ff:b6: 40:c0:0a:5c:d0:1d:e0:4a:55:ec:a5:59:42:12:a5: 55:8c:f8:fd:d6:9f:85:d4:7f:34:32:47:92:a8:fb: 07:b2:08:06:97:b6:b5:95:f2:2e:c8:f3:2f:56:08: 71:29:f0:9e:b0:58:0c:7a:fd:6b:ec:40:d2:d7:41: e3:a9:88:2d:77:aa:6b:8a:4a:96:c0:7d:a6:d5:99: 22:01:1c:19:7d:88:59:f4:f0:68:c3:49:34:1a:44: 7f:d1:7c:12:13:eb:da:ad:2a:d9:22:dd:5f:90:19: 56:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:36:6C:93:0A:DA:9D:B9:93:5F:9E:19:07:E2:23:91:EF:B4:AE:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3b3cbe77-0639-31d8-a800-0723ddbf3eba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a4:69:9c:c1:2c:42:8e:f7:e3:8e:20:f5:77:f0:5e:c1:57: 06:f2:2f:71:7f:b3:9b:ba:b9:9c:ab:eb:be:b1:5f:da:5e:2d: 11:22:5c:4b:dc:22:cb:42:7d:3a:bf:a0:6e:2a:63:cb:46:4c: 34:a3:d2:65:4d:fe:57:b1:a9:b4:db:11:0d:28:ee:c9:ec:a5: 65:be:94:f2:12:c0:bf:e7:bb:f0:60:ba:22:9f:26:c8:ed:68: b4:39:a1:a4:8c:f5:0f:22:c6:f5:fb:63:b3:2b:b1:f3:e4:60: 73:5d:55:8d:78:7a:0d:b2:2b:5d:8b:62:aa:35:9c:2f:53:0f: 22:d8:dc:40:0a:7c:4c:5b:50:73:86:05:66:7f:82:46:b0:2b: e5:c5:87:3b:0b:59:06:5f:79:f2:b3:d6:f4:99:b8:9b:46:f2: 3e:ce:2e:d1:08:67:eb:43:41:c2:5f:d2:62:df:88:21:6a:1c: 73:51:04:31:7d:1f:d3:67:55:b4:df:81:a1:a6:60:bb:75:66: bc:99:a5:df:c7:64:b8:85:e1:c2:04:e3:f0:0d:e7:60:14:eb: cf:d1:88:d3:90:a7:86:32:42:82:85:92:dd:59:f1:6c:2a:7c: 71:b4:44:c2:5a:85:79:39:e7:04:1d:2e:63:c0:6b:3f:99:a3: 10:68:d2:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHwtJG2C3B2wdDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjE1MVoXDTI2MDcyMzIzMjE1MVowLzEtMCsGA1UEAxMk MmUyOWRhN2EtNjhkMC00MTlhLWE5OWItMTA2OWE1MjNjNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg25jlvuSR7l83Ay6A8oXvmFFhpxDENiy6Vwa RbUiAmdaLVuPa1IzBhi1s5lN9W2o6zR7AsolQRBO+CASn99JYM/M802waSHLQUxY LQ/aNKb0oy3QhdovzCPoXeQWOX/jPJj1JccGLnAFHr+Qh5bXt08jp/2KHedLB4A9 SmsIxBNrCyTRgwz2altKweRtcckPr35l/7ZAwApc0B3gSlXspVlCEqVVjPj91p+F 1H80MkeSqPsHsggGl7a1lfIuyPMvVghxKfCesFgMev1r7EDS10HjqYgtd6prikqW wH2m1ZkiARwZfYhZ9PBow0k0GkR/0XwSE+varSrZIt1fkBlWOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA02bJMK2p25k1+eGQfiI5HvtK5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvM2IzY2JlNzctMDYzOS0z MWQ4LWE4MDAtMDcyM2RkYmYzZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKikaZzBLEKO9+OOIPV38F7BVwbyL3F/s5u6uZyr676xX9peLREiXEvc IstCfTq/oG4qY8tGTDSj0mVN/lexqbTbEQ0o7snspWW+lPISwL/nu/BguiKfJsjt aLQ5oaSM9Q8ixvX7Y7MrsfPkYHNdVY14eg2yK12LYqo1nC9TDyLY3EAKfExbUHOG BWZ/gkawK+XFhzsLWQZfefKz1vSZuJtG8j7OLtEIZ+tDQcJf0mLfiCFqHHNRBDF9 H9NnVbTfgaGmYLt1ZryZpd/HZLiF4cIE4/AN52AU68/RiNOQp4YyQoKFkt1Z8Wwq fHG0RMJahXk55wQdLmPAaz+ZoxBo0mE= -----END CERTIFICATE-----Generated at Wed May 13 11:04:10 2026 by rpki-client