$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/42dd7f78-f74a-3426-ae4b-db716c576597.roa File: 42dd7f78-f74a-3426-ae4b-db716c576597.roa (raw, json) Hash identifier: 3J4VLnbF6E8jrSm9blC2cbbb9AfTGHIDndiNOyNyuxk= Subject key identifier: 37:40:1F:4C:AA:CA:C6:2F:68:5F:2A:2B:CF:64:A2:EC:1C:F5:82:D9 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E2017D5453014D52FD129C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/42dd7f78-f74a-3426-ae4b-db716c576597.roa Signing time: Fri 24 Apr 2026 23:23:57 +0000 ROA not before: Fri 24 Apr 2026 23:23:57 +0000 ROA not after: Thu 23 Jul 2026 23:23:57 +0000 asID: 397630 IP address blocks: 64.16.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:20:17:d5:45:30:14:d5:2f:d1:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:57 2026 GMT Not After : Jul 23 23:23:57 2026 GMT Subject: CN=df93faee-57a3-45d5-85ce-2637e3f47594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:51:df:90:f7:4d:03:f6:5c:77:bd:34:64:d0: e7:5a:94:16:53:44:3e:15:9b:25:fb:f1:18:ae:67: d6:c7:be:dd:06:7a:4d:4a:c7:70:92:82:66:4e:c0: f2:2f:e0:70:5f:8b:74:e4:4d:76:78:b0:3c:c0:a6: a1:5a:12:7a:7e:4e:9c:0a:00:31:ca:4d:ef:6a:6a: e6:67:e8:80:02:61:88:90:d3:4f:8e:44:af:d9:c3: 2b:29:a2:87:16:d8:8d:18:84:52:77:16:88:52:a3: 72:2d:8a:d4:1c:b5:cb:6a:08:a6:59:3d:f2:2c:c5: 73:5f:0c:b8:19:65:3b:c1:00:55:ca:2d:24:39:98: 47:c2:7e:55:f8:1c:b2:96:11:14:e9:5f:e0:52:8a: 4a:60:24:ea:c4:2b:c2:af:92:d6:75:db:7e:fc:25: ab:22:b7:10:a8:6f:31:77:f5:a9:07:ff:20:45:02: cc:3f:a9:db:1d:d6:a5:59:42:37:aa:40:5e:c1:a4: c9:dc:d2:fe:04:47:13:9f:f1:09:d3:c4:8e:33:2e: 60:c6:ae:17:4b:4e:68:e2:66:f8:97:74:e7:7e:6c: 4e:9e:77:81:ee:01:cb:67:ad:2d:88:ee:4a:48:bb: af:20:9e:c5:a3:c4:0b:51:0e:60:95:00:43:4b:16: df:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:40:1F:4C:AA:CA:C6:2F:68:5F:2A:2B:CF:64:A2:EC:1C:F5:82:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/42dd7f78-f74a-3426-ae4b-db716c576597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:35:d1:bd:86:e1:6c:d6:d3:73:f4:92:a9:33:c4:57:96:59: 78:53:5f:3c:28:57:2c:64:0c:c7:01:dc:12:60:c8:75:c4:06: ba:6a:da:6f:95:8a:7e:1b:44:5a:b4:8d:75:cd:03:c0:d7:a1: f6:40:2f:38:0d:d6:e1:f2:56:db:40:72:47:aa:20:49:eb:a2: b1:78:6d:14:80:a6:8a:a6:67:75:49:ed:3a:5d:06:67:4a:73: 14:99:d5:18:62:7b:69:a8:6b:4f:b1:15:2f:14:07:2c:15:1d: b5:e3:7b:c5:a0:61:44:bd:8a:b8:e8:75:d4:1a:8b:b7:22:e9: 1c:15:5a:33:7c:f0:ad:5c:f2:0a:96:29:31:23:88:f4:82:72: 6d:a8:f4:49:36:9b:3c:63:ca:65:8f:89:81:f6:44:51:52:3b: 3f:3c:20:85:5d:65:c1:10:f4:7a:a2:03:2d:bc:48:62:f2:89: b5:d5:46:9b:ef:64:77:61:45:21:5f:8e:e8:ff:57:f4:8e:12: 61:de:64:86:13:12:b2:76:5a:b8:95:a6:a8:53:df:76:fc:a4: 64:a9:de:3c:45:e7:d2:61:2e:97:5c:4e:80:2c:e9:ac:de:d5: 12:f6:f7:20:44:a3:c6:ff:b6:f3:82:07:fc:84:3f:e0:1b:fb: 1a:1b:0b:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eIBfVRTAU1S/RKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjM1N1oXDTI2MDcyMzIzMjM1N1owLzEtMCsGA1UEAxMk ZGY5M2ZhZWUtNTdhMy00NWQ1LTg1Y2UtMjYzN2UzZjQ3NTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVHfkPdNA/Zcd700ZNDnWpQWU0Q+FZsl+/EY rmfWx77dBnpNSsdwkoJmTsDyL+BwX4t05E12eLA8wKahWhJ6fk6cCgAxyk3vamrm Z+iAAmGIkNNPjkSv2cMrKaKHFtiNGIRSdxaIUqNyLYrUHLXLagimWT3yLMVzXwy4 GWU7wQBVyi0kOZhHwn5V+ByylhEU6V/gUopKYCTqxCvCr5LWddt+/CWrIrcQqG8x d/WpB/8gRQLMP6nbHdalWUI3qkBewaTJ3NL+BEcTn/EJ08SOMy5gxq4XS05o4mb4 l3TnfmxOnneB7gHLZ60tiO5KSLuvIJ7Fo8QLUQ5glQBDSxbfFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdAH0yqysYvaF8qK89kouwc9YLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNDJkZDdmNzgtZjc0YS0z NDI2LWFlNGItZGI3MTZjNTc2NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKY10b2G4WzW03P0kqkzxFeWWXhTXzwoVyxkDMcB3BJgyHXEBrpq2m+V in4bRFq0jXXNA8DXofZALzgN1uHyVttAckeqIEnrorF4bRSApoqmZ3VJ7TpdBmdK cxSZ1Rhie2moa0+xFS8UBywVHbXje8WgYUS9irjoddQai7ci6RwVWjN88K1c8gqW KTEjiPSCcm2o9Ek2mzxjymWPiYH2RFFSOz88IIVdZcEQ9HqiAy28SGLyibXVRpvv ZHdhRSFfjuj/V/SOEmHeZIYTErJ2WriVpqhT33b8pGSp3jxF59JhLpdcToAs6aze 1RL29yBEo8b/tvOCB/yEP+Ab+xobC4M= -----END CERTIFICATE-----Generated at Wed May 13 15:37:13 2026 by rpki-client