$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5594c8dd-cbd6-3497-a85b-4e656a001a98.roa File: 5594c8dd-cbd6-3497-a85b-4e656a001a98.roa (raw, json) Hash identifier: VCnJP+BcfbBXIWu+m5aqEC8FMYkFTSlF1IESwmsudCI= Subject key identifier: 1E:52:07:00:81:F8:F9:9A:52:AB:AA:62:18:FD:25:AC:C0:A8:9C:04 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F2C104C4EF692D259FB80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5594c8dd-cbd6-3497-a85b-4e656a001a98.roa Signing time: Fri 24 Apr 2026 23:22:06 +0000 ROA not before: Fri 24 Apr 2026 23:22:06 +0000 ROA not after: Thu 23 Jul 2026 23:22:06 +0000 asID: 20001 IP address blocks: 64.16.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:2c:10:4c:4e:f6:92:d2:59:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:06 2026 GMT Not After : Jul 23 23:22:06 2026 GMT Subject: CN=0bec59ef-a445-4c69-aa50-dc7405885c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:dd:80:ee:6b:c0:38:c6:8b:50:f7:44:d7: 65:89:a2:fc:b1:c5:bc:54:cf:fc:37:3c:18:eb:35: 5c:e3:ca:60:e8:f1:43:80:ad:c2:9a:12:52:41:42: 6e:40:e3:72:00:56:65:b9:60:55:ea:44:85:5f:aa: 69:66:df:11:5a:1a:12:f6:28:c4:ab:90:cc:97:7d: 37:cb:82:28:e4:ca:e3:b4:6a:59:79:99:ba:62:cf: 06:4e:9e:4d:58:82:f2:de:a2:c8:d7:69:c5:df:2e: d3:29:e2:a4:85:11:0a:61:21:a3:31:22:29:80:57: c5:e9:74:d5:ae:e1:83:46:4e:05:d7:21:ee:39:c0: c7:32:5b:0b:50:83:52:10:2b:41:6d:04:67:3b:ac: 93:bc:0f:fa:7b:ac:dc:c1:5a:91:f6:b2:d4:77:76: 99:25:79:16:01:d6:e7:21:b1:4b:51:53:c0:94:69: a7:9c:d8:3d:f3:5e:d5:31:ea:a2:66:b3:53:44:91: bd:49:9d:b1:ea:01:ee:69:4a:f3:35:c2:aa:e3:fa: a6:64:12:75:8b:b7:18:bd:d3:2d:95:70:37:26:28: 26:20:8a:9f:46:e3:32:a9:a1:81:80:b7:8d:14:03: a3:90:3a:44:86:d7:2c:09:10:08:98:2f:9d:ec:94: 2a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:52:07:00:81:F8:F9:9A:52:AB:AA:62:18:FD:25:AC:C0:A8:9C:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5594c8dd-cbd6-3497-a85b-4e656a001a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:73:dd:4d:db:4f:f3:73:32:17:e7:9a:b0:c8:8b:2e:c3:42: d7:4c:47:2a:7b:45:59:83:5b:f5:c3:21:ea:2a:0d:fb:fe:96: 30:73:49:1e:36:48:bd:ca:8b:fb:3d:21:84:0f:60:7d:08:e8: d4:63:ca:cf:d0:9a:3b:63:80:95:d4:c6:d0:28:42:15:aa:4e: 1e:1d:a2:80:92:04:bc:ef:6a:78:16:48:ab:be:64:4b:a4:fa: 5b:46:85:42:1e:1d:e0:a6:89:e2:e0:ef:0d:8a:cf:c5:ba:03: 29:e4:a7:39:cf:0c:93:3b:de:c1:46:ec:77:18:61:40:e5:20: 14:87:47:82:e1:e7:c7:8a:16:90:18:d0:07:2a:5d:fa:88:c6: ee:a1:9c:dd:40:7a:6f:fd:49:a9:df:e8:33:37:d6:99:94:a5: b3:48:04:5c:24:39:79:c7:1e:d0:9b:98:29:2c:37:a7:7d:1e: 74:08:11:5a:fd:22:d1:df:b2:60:aa:fb:c5:37:de:65:7a:18: 2b:b6:88:db:dd:4a:68:0b:5a:af:66:cf:bc:2d:c7:b0:fd:d0: 54:a8:69:ab:84:90:93:09:03:75:e7:e9:75:df:aa:2d:06:c0: 5a:ed:88:25:24:72:3b:ad:97:cb:6c:41:21:71:57:0d:4d:1f: 59:7d:50:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHywQTE72ktJZ+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIwNloXDTI2MDcyMzIzMjIwNlowLzEtMCsGA1UEAxMk MGJlYzU5ZWYtYTQ0NS00YzY5LWFhNTAtZGM3NDA1ODg1YzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt03dgO5rwDjGi1D3RNdliaL8scW8VM/8NzwY 6zVc48pg6PFDgK3CmhJSQUJuQONyAFZluWBV6kSFX6ppZt8RWhoS9ijEq5DMl303 y4Io5MrjtGpZeZm6Ys8GTp5NWILy3qLI12nF3y7TKeKkhREKYSGjMSIpgFfF6XTV ruGDRk4F1yHuOcDHMlsLUINSECtBbQRnO6yTvA/6e6zcwVqR9rLUd3aZJXkWAdbn IbFLUVPAlGmnnNg9817VMeqiZrNTRJG9SZ2x6gHuaUrzNcKq4/qmZBJ1i7cYvdMt lXA3JigmIIqfRuMyqaGBgLeNFAOjkDpEhtcsCRAImC+d7JQqpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5SBwCB+PmaUquqYhj9JazAqJwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNTU5NGM4ZGQtY2JkNi0z NDk3LWE4NWItNGU2NTZhMDAxYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdz3U3bT/NzMhfnmrDIiy7DQtdMRyp7RVmDW/XDIeoqDfv+ljBzSR42 SL3Ki/s9IYQPYH0I6NRjys/QmjtjgJXUxtAoQhWqTh4dooCSBLzvangWSKu+ZEuk +ltGhUIeHeCmieLg7w2Kz8W6AynkpznPDJM73sFG7HcYYUDlIBSHR4Lh58eKFpAY 0AcqXfqIxu6hnN1Aem/9Sanf6DM31pmUpbNIBFwkOXnHHtCbmCksN6d9HnQIEVr9 ItHfsmCq+8U33mV6GCu2iNvdSmgLWq9mz7wtx7D90FSoaauEkJMJA3Xn6XXfqi0G wFrtiCUkcjutl8tsQSFxVw1NH1l9UJY= -----END CERTIFICATE-----Generated at Wed May 13 06:26:59 2026 by rpki-client