$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/4b843800-475f-35ea-9a8b-bfcd29f3e823.roa File: 4b843800-475f-35ea-9a8b-bfcd29f3e823.roa (raw, json) Hash identifier: SoePhDEmJa4lJozSuSQE7RHKS9udR7JsMdT0I8UUMmE= Subject key identifier: 1E:3B:86:B2:ED:6E:B5:6B:37:02:BB:06:B4:6F:1E:C4:4C:D6:CA:3C Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1EA30150C260DC44779E10 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/4b843800-475f-35ea-9a8b-bfcd29f3e823.roa Signing time: Fri 24 Apr 2026 23:21:01 +0000 ROA not before: Fri 24 Apr 2026 23:21:01 +0000 ROA not after: Thu 23 Jul 2026 23:21:01 +0000 asID: 7029 IP address blocks: 64.16.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:a3:01:50:c2:60:dc:44:77:9e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:01 2026 GMT Not After : Jul 23 23:21:01 2026 GMT Subject: CN=c20e5c4a-24b8-44a8-b2f9-5b71bdd2f0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:9f:9d:0c:91:8c:54:50:0a:8c:45:58:64: be:af:e9:99:40:25:c9:d9:bc:52:ac:ca:55:75:08: bb:59:bf:b5:be:cc:cd:dc:e0:f9:e1:0e:e5:d2:f2: 30:e3:5d:a9:0f:24:45:62:52:74:e6:81:65:39:3f: 76:34:7e:38:3b:c1:65:ec:c3:cf:32:75:37:f6:30: eb:7b:f5:21:e3:da:71:6c:72:3c:67:5a:0d:8b:34: fc:80:c8:67:d7:41:75:38:d9:08:51:ca:9b:fd:e9: 54:69:93:f2:f9:f6:4d:99:de:33:ac:42:15:55:65: e9:22:c2:94:2c:ca:40:d9:66:2d:58:e4:da:5e:a7: ba:58:05:db:75:d9:d1:e7:6e:3c:17:d9:68:31:47: c4:63:6d:29:8e:f7:6d:73:03:24:44:8e:b4:d7:1d: 55:1d:ef:14:d2:a1:20:29:65:7d:e0:27:83:83:46: 0c:a1:01:26:80:3d:0b:62:88:f9:e1:12:b6:94:45: 14:8d:68:76:a2:f3:b6:ab:15:c0:96:c1:d9:b0:b3: a7:a2:84:2a:f6:9d:7e:eb:ce:81:eb:d3:a4:da:8e: 97:ec:94:42:39:98:8d:ba:fe:9e:04:32:b2:ff:11: 65:93:b4:ed:61:ab:da:61:fb:dc:e0:d4:b6:f5:b1: b1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3B:86:B2:ED:6E:B5:6B:37:02:BB:06:B4:6F:1E:C4:4C:D6:CA:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/4b843800-475f-35ea-9a8b-bfcd29f3e823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1a:8b:28:d6:04:06:66:1b:ec:b5:39:f2:f6:2d:03:49:c6: bd:b0:5d:a5:4e:a1:c8:90:b4:13:8d:b7:07:77:f0:aa:17:ff: 27:92:40:fd:07:0c:11:e0:9b:ac:99:ff:d6:46:05:8b:b9:de: 9c:4a:d5:4d:cb:10:22:fa:4b:5b:43:e9:38:93:30:c8:d6:fd: 56:2e:60:22:e3:ab:6e:ef:a9:05:1f:68:98:ee:2b:06:d4:0d: ab:96:57:c8:82:08:45:c4:fc:81:41:36:54:15:ab:9e:f7:82: 90:02:9f:fe:80:25:59:af:ca:4f:d4:6f:f6:52:39:a2:75:8c: 26:42:77:70:6f:05:a9:72:da:3d:f7:6d:41:f9:39:ed:4f:90: 59:6e:02:5e:3a:59:ce:8e:e9:54:89:a6:88:b0:51:28:f8:b9: db:fc:43:34:91:c3:3d:8c:be:37:e9:20:10:77:7d:a2:75:eb: f0:13:32:ec:36:27:c4:85:ec:fb:7c:af:2e:52:ad:55:ba:d7: 93:e5:86:07:ce:14:3e:d0:d0:1e:73:c6:1f:27:24:55:28:ed: c9:c9:0f:49:7b:c8:b4:e6:ad:e0:1f:09:35:b1:71:f4:5c:17: 52:9c:51:58:22:d1:5e:ad:57:03:6c:c0:e6:72:08:d5:66:85: f9:5f:2c:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHqMBUMJg3ER3nhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjEwMVoXDTI2MDcyMzIzMjEwMVowLzEtMCsGA1UEAxMk YzIwZTVjNGEtMjRiOC00NGE4LWIyZjktNWI3MWJkZDJmMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfyfnQyRjFRQCoxFWGS+r+mZQCXJ2bxSrMpV dQi7Wb+1vszN3OD54Q7l0vIw412pDyRFYlJ05oFlOT92NH44O8Fl7MPPMnU39jDr e/Uh49pxbHI8Z1oNizT8gMhn10F1ONkIUcqb/elUaZPy+fZNmd4zrEIVVWXpIsKU LMpA2WYtWOTaXqe6WAXbddnR5248F9loMUfEY20pjvdtcwMkRI601x1VHe8U0qEg KWV94CeDg0YMoQEmgD0LYoj54RK2lEUUjWh2ovO2qxXAlsHZsLOnooQq9p1+686B 69Ok2o6X7JRCOZiNuv6eBDKy/xFlk7TtYavaYfvc4NS29bGxoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB47hrLtbrVrNwK7BrRvHsRM1so8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNGI4NDM4MDAtNDc1Zi0z NWVhLTlhOGItYmZjZDI5ZjNlODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsaiyjWBAZmG+y1OfL2LQNJxr2wXaVOociQtBONtwd38KoX/yeSQP0H DBHgm6yZ/9ZGBYu53pxK1U3LECL6S1tD6TiTMMjW/VYuYCLjq27vqQUfaJjuKwbU DauWV8iCCEXE/IFBNlQVq573gpACn/6AJVmvyk/Ub/ZSOaJ1jCZCd3BvBaly2j33 bUH5Oe1PkFluAl46Wc6O6VSJpoiwUSj4udv8QzSRwz2MvjfpIBB3faJ16/ATMuw2 J8SF7Pt8ry5SrVW615PlhgfOFD7Q0B5zxh8nJFUo7cnJD0l7yLTmreAfCTWxcfRc F1KcUVgi0V6tVwNswOZyCNVmhflfLGE= -----END CERTIFICATE-----Generated at Wed May 13 10:39:35 2026 by rpki-client