$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/52a01772-a844-32e5-86c3-5ebd2cde21d7.roa File: 52a01772-a844-32e5-86c3-5ebd2cde21d7.roa (raw, json) Hash identifier: yrkL6XSSlAKuMCPMA7Pm/7UGrFZ8i0PQr0Gbx/ZZlPk= Subject key identifier: C4:EE:68:C3:EC:E3:DD:6E:C6:34:65:36:8D:B6:E0:E7:2F:16:83:24 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1FDC0DBE052FE7A4186C70 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/52a01772-a844-32e5-86c3-5ebd2cde21d7.roa Signing time: Fri 24 Apr 2026 23:23:29 +0000 ROA not before: Fri 24 Apr 2026 23:23:29 +0000 ROA not after: Thu 23 Jul 2026 23:23:29 +0000 asID: 397630 IP address blocks: 64.16.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:dc:0d:be:05:2f:e7:a4:18:6c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:29 2026 GMT Not After : Jul 23 23:23:29 2026 GMT Subject: CN=2e50969e-6afe-4f23-b5b8-6b5ff60ea1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b6:63:99:e8:36:f2:42:b2:3c:66:e6:83:3c: 38:f0:54:dc:8d:d5:02:22:a1:23:d3:4f:b8:18:be: 7c:c3:ed:b4:22:a1:8d:9f:53:a7:8b:f4:02:bd:71: 0c:62:72:3c:57:eb:91:7e:98:6e:12:37:f5:b2:00: 38:dc:ab:75:66:1d:7f:5f:3d:45:ed:43:61:18:4a: 5a:8e:5a:a8:c6:06:8a:c9:0b:d7:b8:dc:3c:44:ff: 82:3a:67:71:16:36:7c:7a:f0:1b:73:78:30:dd:50: ef:93:f3:cf:f0:0d:5a:bd:87:c4:93:af:55:5d:80: 91:10:57:9d:11:3f:27:c1:7d:2b:09:d3:64:b5:d9: 0e:b1:0b:ad:96:8b:fc:38:c9:f8:8d:7d:3b:30:5e: 4f:0a:67:a8:14:a4:7d:3a:e1:6b:cc:ab:0d:86:f0: e7:e6:fe:8e:8e:d1:ab:a3:0b:9d:fd:7e:ab:ee:11: a5:58:b8:7d:36:d9:16:a4:4d:83:33:f3:63:8e:5f: 06:d6:78:84:dd:28:e1:82:41:cf:0c:68:89:ca:ae: fc:41:ed:c4:c2:5c:cd:53:4b:9d:40:a5:f6:96:1f: bc:d5:5e:5d:a1:ea:aa:4a:e4:e7:aa:db:1c:13:1e: f6:3a:13:7d:1a:a8:3e:5d:2f:f0:d9:2b:b7:61:05: 5a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EE:68:C3:EC:E3:DD:6E:C6:34:65:36:8D:B6:E0:E7:2F:16:83:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/52a01772-a844-32e5-86c3-5ebd2cde21d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:62:1f:b3:71:38:a7:e9:f3:ef:29:c4:16:10:3a:17:8a:bf: f2:cb:ad:5d:54:ba:28:b1:03:e3:08:6a:e0:9a:bd:87:24:7d: 7e:c1:8b:01:dd:06:4d:c2:97:7c:ad:54:ea:2e:9a:a3:79:b6: cf:b7:fe:92:44:70:12:c6:be:f1:af:06:8e:2c:19:eb:26:96: 34:7f:70:c4:58:c5:0a:96:3f:c8:90:61:83:86:2f:74:1f:a6: 37:a6:d2:4c:38:52:1c:fc:be:d2:5a:a8:47:66:e5:b8:c6:35: 95:37:ac:53:bc:fd:ef:98:60:49:84:29:62:92:0b:fa:2f:34: 4d:86:32:0d:92:b3:67:85:59:44:81:5e:c7:f2:41:dc:86:6d: 9b:ba:a0:f2:d6:63:fb:1d:21:f9:22:a6:4e:4a:bd:de:94:6f: 7c:81:40:e8:32:a2:34:19:47:83:92:bb:c7:2c:4a:cd:46:ab: 26:b0:50:25:ed:7a:a8:33:37:bc:dd:48:82:c8:b1:47:6f:66: f4:1f:8c:8d:88:57:b1:e4:d1:ef:c7:46:8b:01:e6:45:ee:f8: b7:4f:e9:a3:fb:7d:fd:e2:58:5a:01:4f:72:42:7a:94:ed:be: ca:1a:65:19:c0:f5:24:b0:c3:2c:fc:b1:bf:7c:a5:f4:52:f7: 4d:43:bc:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH9wNvgUv56QYbHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjMyOVoXDTI2MDcyMzIzMjMyOVowLzEtMCsGA1UEAxMk MmU1MDk2OWUtNmFmZS00ZjIzLWI1YjgtNmI1ZmY2MGVhMWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7Zjmeg28kKyPGbmgzw48FTcjdUCIqEj00+4 GL58w+20IqGNn1Oni/QCvXEMYnI8V+uRfphuEjf1sgA43Kt1Zh1/Xz1F7UNhGEpa jlqoxgaKyQvXuNw8RP+COmdxFjZ8evAbc3gw3VDvk/PP8A1avYfEk69VXYCREFed ET8nwX0rCdNktdkOsQutlov8OMn4jX07MF5PCmeoFKR9OuFrzKsNhvDn5v6OjtGr owud/X6r7hGlWLh9NtkWpE2DM/Njjl8G1niE3SjhgkHPDGiJyq78Qe3EwlzNU0ud QKX2lh+81V5doeqqSuTnqtscEx72OhN9Gqg+XS/w2Su3YQVaswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTuaMPs491uxjRlNo224OcvFoMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNTJhMDE3NzItYTg0NC0z MmU1LTg2YzMtNWViZDJjZGUyMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANiH7NxOKfp8+8pxBYQOheKv/LLrV1UuiixA+MIauCavYckfX7BiwHd Bk3Cl3ytVOoumqN5ts+3/pJEcBLGvvGvBo4sGesmljR/cMRYxQqWP8iQYYOGL3Qf pjem0kw4Uhz8vtJaqEdm5bjGNZU3rFO8/e+YYEmEKWKSC/ovNE2GMg2Ss2eFWUSB XsfyQdyGbZu6oPLWY/sdIfkipk5Kvd6Ub3yBQOgyojQZR4OSu8csSs1GqyawUCXt eqgzN7zdSILIsUdvZvQfjI2IV7Hk0e/HRosB5kXu+LdP6aP7ff3iWFoBT3JCepTt vsoaZRnA9SSwwyz8sb98pfRS901DvPY= -----END CERTIFICATE-----Generated at Wed May 13 10:20:16 2026 by rpki-client