$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3f04eb66-22f0-392c-ad26-4587e32b4eec.roa File: 3f04eb66-22f0-392c-ad26-4587e32b4eec.roa (raw, json) Hash identifier: LvbnCkOQbphXk/2ILAaSQgCeORZqnbNPwjculTzJUPU= Subject key identifier: 9B:AD:2A:95:4A:AE:53:DD:FF:4A:16:06:40:AE:07:BE:1A:89:36:D2 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1EA5B0288A9A303FD6E420 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3f04eb66-22f0-392c-ad26-4587e32b4eec.roa Signing time: Fri 24 Apr 2026 23:21:03 +0000 ROA not before: Fri 24 Apr 2026 23:21:03 +0000 ROA not after: Thu 23 Jul 2026 23:21:03 +0000 asID: 7029 IP address blocks: 64.16.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:a5:b0:28:8a:9a:30:3f:d6:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:03 2026 GMT Not After : Jul 23 23:21:03 2026 GMT Subject: CN=34a3b1af-73f0-4ea4-a3e6-c9d19ed00de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9d:75:d4:4f:f0:ce:99:0f:96:74:83:07:2f: f7:3b:41:f8:3a:ab:7a:f8:c3:58:52:fc:54:83:0e: df:e4:1d:d2:78:f0:1e:3f:6d:85:96:f7:c0:b4:8e: 4c:83:fe:fb:82:08:5c:1b:d9:61:1d:72:c3:54:db: 7c:47:37:3e:c3:a7:21:6d:58:c1:22:a7:10:84:e2: 57:40:d6:91:8f:ae:95:7b:e3:1b:ef:d1:79:4d:16: 72:b6:d3:44:65:06:60:7b:d1:93:e8:58:88:a2:f4: 6b:79:8c:77:dd:4b:de:ad:74:a6:24:e7:97:00:15: b3:d4:41:df:ce:a0:e3:2a:c3:13:92:bd:75:d2:ec: 90:fc:3b:d2:d3:f3:6e:4f:56:f9:0e:20:94:4a:7c: 31:37:a2:b6:70:60:2e:5e:98:11:58:57:94:d5:55: be:33:79:e1:89:7e:f7:ef:0e:16:49:52:05:ea:d0: c0:9d:d1:46:51:49:d3:d2:9c:3b:b3:0c:70:ad:00: 31:df:64:5c:fd:20:f8:0c:b3:83:ca:27:55:b1:71: 2d:0c:46:c8:db:42:5b:03:87:a9:ed:a0:d0:ea:89: d6:f4:09:92:b0:29:45:f6:a9:d0:b5:e2:bd:39:92: 7c:16:36:02:d6:d7:4f:b9:24:f9:79:72:c5:aa:29: e8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AD:2A:95:4A:AE:53:DD:FF:4A:16:06:40:AE:07:BE:1A:89:36:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3f04eb66-22f0-392c-ad26-4587e32b4eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:50:a1:89:c3:46:72:c5:f8:19:7f:7d:88:ea:b9:da:26:7b: 2e:b4:51:53:86:dd:b0:d9:47:82:11:0e:f7:76:88:de:72:45: 74:7a:ba:a5:17:0e:36:97:16:1a:ed:22:cb:3d:10:a1:09:b1: 79:9c:c6:34:a9:4a:5a:98:63:1f:3f:ca:8f:c9:9f:40:da:bf: da:63:ba:2f:62:ca:71:19:3a:dd:15:c8:31:8e:12:e6:54:19: f6:aa:00:3a:6e:c7:f7:b1:0c:9d:fc:77:51:dc:55:57:35:cd: ba:96:6e:7b:9c:a5:f3:ce:35:82:c2:76:4e:8a:be:ea:31:a5: d5:e1:fe:af:35:dc:e2:20:48:1c:27:79:92:3a:d7:3b:a1:f3: 5b:32:86:e0:6e:7b:96:54:79:e2:54:55:43:31:f3:b7:53:92: f4:3d:ff:c8:25:a5:de:a3:81:94:33:f1:b6:56:3b:82:cc:61: a9:ec:e9:c4:5c:1a:57:05:52:b2:5d:ab:dc:8e:39:32:92:a9: 64:40:11:c2:ef:e8:68:95:ad:c7:12:26:dc:68:c4:89:19:a4: d2:36:31:50:87:eb:5f:a2:15:5d:a3:34:3a:d0:f0:46:b0:57: ff:37:92:0f:01:9d:23:d5:5a:f8:ee:7d:e2:0b:d7:f2:0a:ef: c2:6a:7e:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHqWwKIqaMD/W5CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjEwM1oXDTI2MDcyMzIzMjEwM1owLzEtMCsGA1UEAxMk MzRhM2IxYWYtNzNmMC00ZWE0LWEzZTYtYzlkMTllZDAwZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ111E/wzpkPlnSDBy/3O0H4Oqt6+MNYUvxU gw7f5B3SePAeP22FlvfAtI5Mg/77gghcG9lhHXLDVNt8Rzc+w6chbVjBIqcQhOJX QNaRj66Ve+Mb79F5TRZyttNEZQZge9GT6FiIovRreYx33UverXSmJOeXABWz1EHf zqDjKsMTkr110uyQ/DvS0/NuT1b5DiCUSnwxN6K2cGAuXpgRWFeU1VW+M3nhiX73 7w4WSVIF6tDAndFGUUnT0pw7swxwrQAx32Rc/SD4DLODyidVsXEtDEbI20JbA4ep 7aDQ6onW9AmSsClF9qnQteK9OZJ8FjYC1tdPuST5eXLFqinoIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJutKpVKrlPd/0oWBkCuB74aiTbSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvM2YwNGViNjYtMjJmMC0z OTJjLWFkMjYtNDU4N2UzMmI0ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBClMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRQoYnDRnLF+Bl/fYjqudomey60UVOG3bDZR4IRDvd2iN5yRXR6uqUX DjaXFhrtIss9EKEJsXmcxjSpSlqYYx8/yo/Jn0Dav9pjui9iynEZOt0VyDGOEuZU GfaqADpux/exDJ38d1HcVVc1zbqWbnucpfPONYLCdk6KvuoxpdXh/q813OIgSBwn eZI61zuh81syhuBue5ZUeeJUVUMx87dTkvQ9/8glpd6jgZQz8bZWO4LMYans6cRc GlcFUrJdq9yOOTKSqWRAEcLv6GiVrccSJtxoxIkZpNI2MVCH61+iFV2jNDrQ8Eaw V/83kg8BnSPVWvjufeIL1/IK78JqfnA= -----END CERTIFICATE-----Generated at Wed May 13 09:20:40 2026 by rpki-client