$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/4e2f23a3-0f51-30b7-98ab-2797c4b4caa4.roa File: 4e2f23a3-0f51-30b7-98ab-2797c4b4caa4.roa (raw, json) Hash identifier: nbQNPScC+Mdz8fDsgTJkVWv7Z3CSXrq+E02Rx6TCSnM= Subject key identifier: 5B:EE:22:80:C7:8A:0A:E6:70:AA:9F:F9:BF:86:E0:BB:87:3C:AD:DF Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1FD95DDCDC1647651AE480 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/4e2f23a3-0f51-30b7-98ab-2797c4b4caa4.roa Signing time: Fri 24 Apr 2026 23:23:28 +0000 ROA not before: Fri 24 Apr 2026 23:23:28 +0000 ROA not after: Thu 23 Jul 2026 23:23:28 +0000 asID: 397630 IP address blocks: 64.16.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:d9:5d:dc:dc:16:47:65:1a:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:28 2026 GMT Not After : Jul 23 23:23:28 2026 GMT Subject: CN=44f05174-1f1f-499c-a01b-bb1fcd5d984e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:7d:61:4b:fb:ac:99:89:a3:cc:99:38:f6: 10:93:ad:ac:ec:cd:fd:6c:28:31:94:45:fe:86:0d: cc:f0:75:47:c2:24:2e:2c:fa:69:47:75:48:21:0b: aa:ea:fc:bb:4a:ae:09:07:ee:15:37:bf:3e:db:40: 4f:1b:e9:47:3e:56:55:7a:65:d1:1e:a4:c8:cd:b8: 59:be:6b:54:5c:73:ab:f7:31:81:b7:69:64:4c:41: d8:d3:51:67:87:ff:55:7e:a8:a6:6f:da:2f:f5:00: 4d:2b:84:ee:3a:4a:25:9f:85:e7:e0:42:b0:b1:df: ce:15:56:cf:4c:92:82:f0:c8:17:00:aa:42:b4:42: 2a:a5:72:75:9b:7e:b1:8d:fb:4b:b8:e2:7d:6c:fd: 68:80:38:77:d2:8b:a9:17:1f:78:a5:8e:af:c5:ae: 0a:36:d3:f3:f0:e5:8a:6c:5c:a3:24:4f:3a:72:4b: 23:24:bb:ec:9d:59:2d:90:64:39:95:31:e5:92:3b: bd:31:49:63:f5:4e:28:06:8c:c4:61:f8:e7:86:7a: 3d:23:86:ff:61:ab:da:ad:e9:4d:67:4a:74:f0:3a: 25:7c:f6:e4:0d:a1:b8:1d:68:71:ca:48:52:db:b1: ad:f7:2d:01:58:2a:64:53:ca:6a:bb:f4:ee:7e:01: 05:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EE:22:80:C7:8A:0A:E6:70:AA:9F:F9:BF:86:E0:BB:87:3C:AD:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/4e2f23a3-0f51-30b7-98ab-2797c4b4caa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5e:70:de:e6:23:a8:dc:7a:74:5d:ae:c5:44:78:bd:0a:8c: 4e:42:e8:b8:da:f8:86:55:f9:40:e4:b0:05:4a:8e:02:b0:74: 56:53:a1:24:fc:d7:7e:b3:8a:ee:0d:16:da:d1:2a:00:10:e1: 18:3d:e4:bf:eb:29:b1:be:db:6d:9e:e7:30:37:f9:2c:2a:04: 70:ed:8c:23:79:89:11:d5:9d:aa:b7:c0:cf:10:58:ce:35:1c: 20:e6:25:0b:b1:f9:56:05:aa:d4:b2:da:38:7e:bd:b5:b9:d8: f5:e8:99:79:fe:fa:15:63:fe:f7:ee:09:62:a8:98:ec:b9:66: a1:89:91:b6:aa:18:4b:b3:33:26:bf:f0:b8:a2:c7:22:70:cc: 5a:63:18:19:ba:1a:a8:11:c7:8b:f3:e9:5c:4a:7e:af:2a:b6: ec:42:a0:a1:e2:bf:5d:7e:ab:ed:78:21:b8:7d:93:ef:bd:05: 07:a8:4f:5c:d6:c3:cf:f2:3e:8d:3a:bc:99:bf:c5:a1:3d:6d: d7:a1:86:f8:0f:7d:cf:d0:93:c9:13:dd:f4:ac:da:43:0f:5d: 1e:c8:90:8d:31:d1:dc:ba:3f:31:19:12:05:c5:6e:a0:a4:10: 2b:bd:fd:db:5f:3e:4d:6c:fd:7d:77:5b:aa:af:30:fa:7f:17: ae:48:d4:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH9ld3NwWR2Ua5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjMyOFoXDTI2MDcyMzIzMjMyOFowLzEtMCsGA1UEAxMk NDRmMDUxNzQtMWYxZi00OTljLWEwMWItYmIxZmNkNWQ5ODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0J9YUv7rJmJo8yZOPYQk62s7M39bCgxlEX+ hg3M8HVHwiQuLPppR3VIIQuq6vy7Sq4JB+4VN78+20BPG+lHPlZVemXRHqTIzbhZ vmtUXHOr9zGBt2lkTEHY01Fnh/9Vfqimb9ov9QBNK4TuOkoln4Xn4EKwsd/OFVbP TJKC8MgXAKpCtEIqpXJ1m36xjftLuOJ9bP1ogDh30oupFx94pY6vxa4KNtPz8OWK bFyjJE86cksjJLvsnVktkGQ5lTHlkju9MUlj9U4oBozEYfjnhno9I4b/YavarelN Z0p08DolfPbkDaG4HWhxykhS27Gt9y0BWCpkU8pqu/TufgEFkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvuIoDHigrmcKqf+b+G4LuHPK3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNGUyZjIzYTMtMGY1MS0z MGI3LTk4YWItMjc5N2M0YjRjYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxecN7mI6jcenRdrsVEeL0KjE5C6Lja+IZV+UDksAVKjgKwdFZToST8 136ziu4NFtrRKgAQ4Rg95L/rKbG+222e5zA3+SwqBHDtjCN5iRHVnaq3wM8QWM41 HCDmJQux+VYFqtSy2jh+vbW52PXomXn++hVj/vfuCWKomOy5ZqGJkbaqGEuzMya/ 8LiixyJwzFpjGBm6GqgRx4vz6VxKfq8qtuxCoKHiv11+q+14Ibh9k++9BQeoT1zW w8/yPo06vJm/xaE9bdehhvgPfc/Qk8kT3fSs2kMPXR7IkI0x0dy6PzEZEgXFbqCk ECu9/dtfPk1s/X13W6qvMPp/F65I1Ik= -----END CERTIFICATE-----Generated at Wed May 13 10:36:49 2026 by rpki-client