$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/50a6dab5-b736-3ae8-a418-132139e20b22.roa File: 50a6dab5-b736-3ae8-a418-132139e20b22.roa (raw, json) Hash identifier: 1E/8pTj0rkYwRUxXthyBt1M5h/R5CR/FYtDISAlIK/M= Subject key identifier: BC:BF:33:C2:B5:15:AF:4F:82:87:D4:6D:C7:19:AE:C9:68:96:5E:74 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1E5C30642AFDD2DA35C900 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/50a6dab5-b736-3ae8-a418-132139e20b22.roa Signing time: Fri 24 Apr 2026 23:20:28 +0000 ROA not before: Fri 24 Apr 2026 23:20:28 +0000 ROA not after: Thu 23 Jul 2026 23:20:28 +0000 asID: 7029 IP address blocks: 64.16.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:5c:30:64:2a:fd:d2:da:35:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:20:28 2026 GMT Not After : Jul 23 23:20:28 2026 GMT Subject: CN=a0cb9db4-2ca1-46ab-b1fc-be3f991e9889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2d:0a:95:64:47:d6:1a:50:e1:df:03:1f:fe: e1:2d:e1:05:0b:93:4e:14:26:83:70:97:81:7e:c9: 69:6a:ea:84:62:48:e2:e5:f6:bb:6f:4a:50:fe:04: 2b:94:0f:f3:ae:5f:94:81:b9:ee:3d:f0:cd:0f:ff: db:b1:59:a3:81:4d:3a:c7:dd:1e:a4:71:d0:c7:da: 57:80:14:6b:0f:9e:e7:9f:86:8a:33:a8:c1:43:88: 5e:9e:a6:9b:12:7c:4f:24:5c:92:73:54:85:c8:27: 99:5b:fc:96:e4:1f:3f:1a:5b:7e:ac:8f:10:02:c5: 77:01:d0:3c:fe:98:12:57:68:16:fe:6c:52:63:41: f5:60:e1:ee:a6:23:55:39:c3:c3:88:d3:26:24:74: b9:c0:48:71:4a:c5:aa:24:0b:f0:5d:85:50:5b:b2: ef:35:34:af:2d:39:65:16:0d:bd:b4:67:3c:5d:b2: 47:ce:4b:69:cc:b3:41:79:86:ed:e4:f3:dc:b1:0f: 4d:2f:ff:a7:8a:45:ff:3a:82:46:d3:59:85:1d:5c: 7c:a1:1c:14:59:56:cc:9a:ec:77:d7:23:a4:7a:e3: 93:91:a0:6a:63:f8:a2:2d:e5:92:41:f4:02:94:29: d0:17:ce:d4:8d:59:bd:67:65:a6:ed:61:e4:66:e6: e4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BF:33:C2:B5:15:AF:4F:82:87:D4:6D:C7:19:AE:C9:68:96:5E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/50a6dab5-b736-3ae8-a418-132139e20b22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:f1:b0:15:eb:a8:ac:d2:03:3b:b4:ff:7b:67:54:9d:5d:12: 97:71:7a:e2:8b:6a:0b:0b:1b:bb:d7:80:b7:3b:d5:fd:56:e6: 61:59:77:a6:d9:99:d1:e6:df:83:85:05:b5:bd:3a:c4:7f:f4: 68:d7:01:15:b7:ce:f6:24:22:f0:ba:b9:e6:5c:fe:e6:d5:b9: 4e:f5:96:01:fc:d6:50:ff:46:44:df:56:59:90:6b:79:79:e9: 82:42:c9:ac:0a:0a:e8:1b:95:79:80:51:58:1e:58:8a:44:36: c5:ed:36:e0:73:0e:a4:c8:5d:23:99:c0:73:f0:37:fb:fc:2e: 92:c4:c3:ff:13:69:f0:4a:14:f0:37:1b:59:22:05:5c:3a:ae: 73:33:e4:66:80:1e:c4:fa:6d:ca:84:06:77:f8:21:95:92:3c: 58:31:7a:52:77:60:70:88:dc:e0:dd:f7:6f:40:3c:f6:8f:f2: 11:09:76:5d:cf:1b:9e:51:f6:54:48:bf:d2:59:97:17:30:26: aa:98:b3:45:78:b6:59:bc:ba:34:b1:02:7f:c0:0e:c1:c4:76: 9e:38:50:67:e4:8f:0d:92:8b:94:6b:98:5e:24:77:47:86:3d: 3f:5d:d3:b6:aa:89:be:0e:69:d8:a7:cb:f7:da:8a:5b:6e:16: 75:9c:57:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHlwwZCr90to1yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjAyOFoXDTI2MDcyMzIzMjAyOFowLzEtMCsGA1UEAxMk YTBjYjlkYjQtMmNhMS00NmFiLWIxZmMtYmUzZjk5MWU5ODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi0KlWRH1hpQ4d8DH/7hLeEFC5NOFCaDcJeB fslpauqEYkji5fa7b0pQ/gQrlA/zrl+UgbnuPfDND//bsVmjgU06x90epHHQx9pX gBRrD57nn4aKM6jBQ4henqabEnxPJFySc1SFyCeZW/yW5B8/Glt+rI8QAsV3AdA8 /pgSV2gW/mxSY0H1YOHupiNVOcPDiNMmJHS5wEhxSsWqJAvwXYVQW7LvNTSvLTll Fg29tGc8XbJHzktpzLNBeYbt5PPcsQ9NL/+nikX/OoJG01mFHVx8oRwUWVbMmux3 1yOkeuOTkaBqY/iiLeWSQfQClCnQF87UjVm9Z2Wm7WHkZubkWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy/M8K1Fa9PgofUbccZrsloll50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNTBhNmRhYjUtYjczNi0z YWU4LWE0MTgtMTMyMTM5ZTIwYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnxsBXrqKzSAzu0/3tnVJ1dEpdxeuKLagsLG7vXgLc71f1W5mFZd6bZ mdHm34OFBbW9OsR/9GjXARW3zvYkIvC6ueZc/ubVuU71lgH81lD/RkTfVlmQa3l5 6YJCyawKCugblXmAUVgeWIpENsXtNuBzDqTIXSOZwHPwN/v8LpLEw/8TafBKFPA3 G1kiBVw6rnMz5GaAHsT6bcqEBnf4IZWSPFgxelJ3YHCI3ODd929APPaP8hEJdl3P G55R9lRIv9JZlxcwJqqYs0V4tlm8ujSxAn/ADsHEdp44UGfkjw2Si5RrmF4kd0eG PT9d07aqib4Oadiny/failtuFnWcV9g= -----END CERTIFICATE-----Generated at Wed May 13 13:42:07 2026 by rpki-client