$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5a899af6-258c-3b81-bc82-4110f746a591.roa File: 5a899af6-258c-3b81-bc82-4110f746a591.roa (raw, json) Hash identifier: AYfCGkWVwm3jTzXemZk3QYsTK+PBESWjyBH7d1wGgZU= Subject key identifier: E6:A4:72:D6:88:7F:8B:04:1B:A7:16:8F:4D:ED:1F:17:23:9D:37:79 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F10D5685F5B70AAF7E440 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5a899af6-258c-3b81-bc82-4110f746a591.roa Signing time: Fri 24 Apr 2026 23:21:53 +0000 ROA not before: Fri 24 Apr 2026 23:21:53 +0000 ROA not after: Thu 23 Jul 2026 23:21:53 +0000 asID: 20001 IP address blocks: 64.16.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:10:d5:68:5f:5b:70:aa:f7:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:53 2026 GMT Not After : Jul 23 23:21:53 2026 GMT Subject: CN=ecb95899-7e65-4126-ba84-ad7581f130a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:e3:37:88:fc:ec:dd:e5:d6:3a:14:f0:f9: eb:1c:1c:98:5b:a9:ea:69:84:7f:4a:3d:05:5f:96: b6:89:eb:fb:25:ef:ce:d0:ce:2e:4a:f2:f2:d8:d4: 9d:26:51:d5:49:7c:d9:ca:1b:cc:54:e4:f1:64:05: c8:2a:d0:91:b3:99:36:52:03:3d:48:d5:ba:36:0f: af:15:67:07:e9:5b:fe:20:cf:76:9a:7c:d7:7f:2e: 04:7c:ea:3e:e5:0f:1d:39:4f:7b:c4:31:73:e6:4d: d1:fc:97:73:df:91:f0:23:11:42:1a:6f:93:8e:21: 43:8e:3b:4a:ba:3e:cc:50:84:fd:4a:0d:87:d8:d9: 5f:4c:7f:1e:2f:0e:1c:7b:c1:32:73:23:a1:90:e5: 3c:b0:3b:57:0f:e4:ca:10:6f:e2:ab:6f:66:13:3f: 52:75:2b:c8:b6:28:bd:7e:e8:20:f3:d3:d3:c5:2c: 90:6a:e6:f2:58:25:26:35:5f:25:4e:ce:ad:8f:4c: 8b:99:39:da:a6:2a:1f:ef:2e:1f:ac:f0:29:6b:e4: 0b:98:94:e7:22:5a:86:4d:42:70:6a:e6:9c:09:72: 16:b8:ca:e6:2c:7b:0e:2a:4b:f8:d0:ed:47:9f:89: a2:6e:f8:16:47:47:39:f4:49:18:6c:73:dc:eb:b3: c9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A4:72:D6:88:7F:8B:04:1B:A7:16:8F:4D:ED:1F:17:23:9D:37:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5a899af6-258c-3b81-bc82-4110f746a591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:39:a2:ff:0e:96:6d:c1:94:ae:dc:53:b8:84:c9:88:8b:de: 08:86:35:d8:ec:94:88:10:77:d4:d4:c8:f8:3f:0e:e5:f9:cd: 66:08:d8:07:bd:fe:62:c6:6a:ba:78:63:2d:ec:f6:48:ae:53: f5:86:4e:c9:cc:9c:29:47:e5:26:e5:d1:34:dd:27:39:11:2c: 07:9a:4f:fd:9f:fb:de:ce:8f:ae:82:9e:81:76:4d:94:67:64: c6:92:be:07:33:90:73:df:ba:4d:a1:68:ad:fc:67:7e:26:3c: 6f:c1:35:da:da:f7:6f:50:25:85:5f:f6:17:13:64:f8:cb:c2: 54:2f:88:8a:e2:ca:84:df:ce:ef:ec:6a:57:b5:97:10:1d:92: 0d:77:0d:d7:60:c0:86:89:6b:b4:be:17:cb:6b:2a:b8:a3:4b: ea:04:9d:c9:06:ff:22:11:8c:3a:e1:85:b7:5f:9b:4e:a7:e2: fb:f4:5b:37:83:f7:ec:8f:a3:29:1b:5f:64:19:e2:0c:e2:9e: c1:38:65:6d:28:4b:dd:b6:79:75:08:39:4e:20:4f:34:4b:5e: 30:97:99:87:5f:27:f3:0e:69:f9:17:b4:8f:d2:dc:39:6f:35: 5a:73:fd:42:3e:2a:da:ce:24:dc:39:d9:c4:4b:0b:96:95:f1: 35:c2:52:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHxDVaF9bcKr35EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjE1M1oXDTI2MDcyMzIzMjE1M1owLzEtMCsGA1UEAxMk ZWNiOTU4OTktN2U2NS00MTI2LWJhODQtYWQ3NTgxZjEzMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPvjN4j87N3l1joU8PnrHByYW6nqaYR/Sj0F X5a2iev7Je/O0M4uSvLy2NSdJlHVSXzZyhvMVOTxZAXIKtCRs5k2UgM9SNW6Ng+v FWcH6Vv+IM92mnzXfy4EfOo+5Q8dOU97xDFz5k3R/Jdz35HwIxFCGm+TjiFDjjtK uj7MUIT9Sg2H2NlfTH8eLw4ce8EycyOhkOU8sDtXD+TKEG/iq29mEz9SdSvItii9 fugg89PTxSyQaubyWCUmNV8lTs6tj0yLmTnapiof7y4frPApa+QLmJTnIlqGTUJw auacCXIWuMrmLHsOKkv40O1Hn4mibvgWR0c59EkYbHPc67PJTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOakctaIf4sEG6cWj03tHxcjnTd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNWE4OTlhZjYtMjU4Yy0z YjgxLWJjODItNDExMGY3NDZhNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc5ov8Olm3BlK7cU7iEyYiL3giGNdjslIgQd9TUyPg/DuX5zWYI2Ae9 /mLGarp4Yy3s9kiuU/WGTsnMnClH5Sbl0TTdJzkRLAeaT/2f+97Oj66CnoF2TZRn ZMaSvgczkHPfuk2haK38Z34mPG/BNdra929QJYVf9hcTZPjLwlQviIriyoTfzu/s ale1lxAdkg13DddgwIaJa7S+F8trKrijS+oEnckG/yIRjDrhhbdfm06n4vv0WzeD 9+yPoykbX2QZ4gzinsE4ZW0oS922eXUIOU4gTzRLXjCXmYdfJ/MOafkXtI/S3Dlv NVpz/UI+KtrOJNw52cRLC5aV8TXCUr4= -----END CERTIFICATE-----Generated at Wed May 13 14:43:16 2026 by rpki-client