$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/53820eff-5ed6-38a2-884c-b8f1f6f9828e.roa File: 53820eff-5ed6-38a2-884c-b8f1f6f9828e.roa (raw, json) Hash identifier: wb2w9taCAXq+APX2fX91gOLj6wU/TJ3YU8vkCnH2KBU= Subject key identifier: 9A:42:AC:6C:FF:35:F7:87:D1:94:23:39:AC:93:5D:66:B2:8D:B7:A5 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D96AC1BB697368D92E5007EEC Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/53820eff-5ed6-38a2-884c-b8f1f6f9828e.roa Signing time: Wed 22 Apr 2026 07:19:36 +0000 ROA not before: Wed 22 Apr 2026 07:19:36 +0000 ROA not after: Tue 21 Jul 2026 07:19:36 +0000 asID: 397630 IP address blocks: 64.16.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:96:ac:1b:b6:97:36:8d:92:e5:00:7e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 22 07:19:36 2026 GMT Not After : Jul 21 07:19:36 2026 GMT Subject: CN=6eecf13e-ac0f-47cc-82a3-bb1b62267600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a4:7a:c7:6c:dd:f3:6c:61:63:29:8c:0d:52: 51:ac:ac:d5:47:23:2d:36:1a:af:65:7f:b0:17:83: 0c:8c:05:14:ff:21:60:23:b3:5c:09:a3:d6:e4:70: 25:27:3c:43:17:01:c0:e4:07:f9:f6:0d:1d:2d:df: 28:2d:4d:22:92:59:6b:c8:dd:9b:39:f2:ed:36:f7: a8:9b:6e:a1:a6:1a:f2:b4:8c:e8:41:76:55:73:67: 40:f0:c8:6f:80:a9:ba:86:c7:8f:0c:a8:7d:75:c3: 6d:f3:6e:3a:a5:ba:b5:e6:c7:6c:ad:d8:ac:fc:b6: 46:bc:3a:70:01:67:cc:6a:3b:d0:91:22:89:ef:c2: f4:03:9b:a5:a2:57:ca:8d:ed:1e:1e:4b:81:3a:b4: 24:81:ec:3a:7e:9b:9d:d3:a8:b3:c0:8d:14:a0:60: 71:8f:80:ea:c6:47:39:1e:ec:b9:b9:d7:f9:89:03: 84:88:9f:9b:32:1f:d9:7b:10:87:a0:c1:33:76:45: 8e:21:51:12:59:74:01:d2:97:d4:cc:11:c3:1a:63: 0c:af:3f:af:04:07:b2:92:e5:67:a6:e2:a2:dd:17: e9:76:14:5b:dc:dd:1e:f5:42:f0:3d:e3:c0:f3:15: 13:c2:d4:4a:3a:7c:8e:4e:49:d3:fd:37:57:58:f4: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:42:AC:6C:FF:35:F7:87:D1:94:23:39:AC:93:5D:66:B2:8D:B7:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/53820eff-5ed6-38a2-884c-b8f1f6f9828e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b0:dd:d8:a8:83:ac:db:6e:b0:7a:e2:f8:b8:e0:fd:e5:3b: aa:88:c5:e9:f1:6e:ca:c4:89:d5:d9:d7:c8:c8:b4:4d:4c:56: db:02:fd:bb:e1:04:35:47:7a:97:ef:0e:af:d0:19:25:2a:28: 1e:82:a9:c5:96:4a:33:90:38:e3:b5:4f:17:52:a7:9e:83:b2: 10:0c:1b:80:c7:f1:86:15:42:ba:9a:9b:e6:87:f1:e8:8a:75: da:c3:88:c1:43:6b:19:b8:44:2d:fd:be:b7:77:ab:6f:f1:22: 05:b5:ef:31:16:79:c9:ce:71:a6:01:9f:4a:0e:43:f0:c6:bb: c1:d3:6e:d7:22:03:01:6c:25:2c:47:72:66:2b:c2:c4:f8:f2: 2f:cd:ce:39:f7:16:5c:5e:72:99:76:f3:70:dd:84:bd:97:5f: 66:67:a1:44:b1:ca:e2:58:c2:ba:05:2b:46:b5:a0:26:c1:a6: 03:59:71:18:69:62:9e:36:b6:69:e9:61:dc:21:3f:8c:07:cb: 9c:dc:d3:28:25:a5:79:2f:31:29:d4:c3:7b:49:c7:76:a3:83: 3a:8a:1b:d6:ca:57:ab:4b:2f:50:a3:69:47:d1:94:8f:c0:bf: 97:55:36:4b:cb:0a:9b:0a:29:70:b4:7c:75:a2:bb:86:23:ac: 6b:c4:fb:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2WrBu2lzaNkuUAfuwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyMjA3MTkzNloXDTI2MDcyMTA3MTkzNlowLzEtMCsGA1UEAxMk NmVlY2YxM2UtYWMwZi00N2NjLTgyYTMtYmIxYjYyMjY3NjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6R6x2zd82xhYymMDVJRrKzVRyMtNhqvZX+w F4MMjAUU/yFgI7NcCaPW5HAlJzxDFwHA5Af59g0dLd8oLU0ikllryN2bOfLtNveo m26hphrytIzoQXZVc2dA8MhvgKm6hsePDKh9dcNt8246pbq15sdsrdis/LZGvDpw AWfMajvQkSKJ78L0A5ulolfKje0eHkuBOrQkgew6fpud06izwI0UoGBxj4Dqxkc5 Huy5udf5iQOEiJ+bMh/ZexCHoMEzdkWOIVESWXQB0pfUzBHDGmMMrz+vBAeykuVn puKi3RfpdhRb3N0e9ULwPePA8xUTwtRKOnyOTknT/TdXWPRHWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpCrGz/NfeH0ZQjOayTXWayjbelMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNTM4MjBlZmYtNWVkNi0z OGEyLTg4NGMtYjhmMWY2Zjk4MjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiw3diog6zbbrB64vi44P3lO6qIxenxbsrEidXZ18jItE1MVtsC/bvh BDVHepfvDq/QGSUqKB6CqcWWSjOQOOO1TxdSp56DshAMG4DH8YYVQrqam+aH8eiK ddrDiMFDaxm4RC39vrd3q2/xIgW17zEWecnOcaYBn0oOQ/DGu8HTbtciAwFsJSxH cmYrwsT48i/Nzjn3Flxecpl283DdhL2XX2ZnoUSxyuJYwroFK0a1oCbBpgNZcRhp Yp42tmnpYdwhP4wHy5zc0yglpXkvMSnUw3tJx3ajgzqKG9bKV6tLL1CjaUfRlI/A v5dVNkvLCpsKKXC0fHWiu4YjrGvE+wg= -----END CERTIFICATE-----Generated at Wed May 13 13:57:55 2026 by rpki-client