$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61666019-0c9a-36e0-a487-94a151a81bc7.roa File: 61666019-0c9a-36e0-a487-94a151a81bc7.roa (raw, json) Hash identifier: S0V8f44Hee0nHBpQklF+IPfJEZvCScs4ZriU76u0EvE= Subject key identifier: EE:E8:B6:8C:A1:89:52:92:C9:A2:43:77:8C:2B:ED:44:DC:C8:77:25 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1FA32AC130F1625A724540 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61666019-0c9a-36e0-a487-94a151a81bc7.roa Signing time: Fri 24 Apr 2026 23:23:02 +0000 ROA not before: Fri 24 Apr 2026 23:23:02 +0000 ROA not after: Thu 23 Jul 2026 23:23:02 +0000 asID: 397630 IP address blocks: 64.16.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:a3:2a:c1:30:f1:62:5a:72:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:02 2026 GMT Not After : Jul 23 23:23:02 2026 GMT Subject: CN=0eeb75a2-0de0-4d06-8fe6-79c4e6077cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:f2:49:4b:3f:6e:79:da:da:a4:39:60:9f: 0b:1b:80:c4:1a:fe:4f:13:7e:0c:0c:5b:d7:db:b5: 36:c8:d3:7d:3c:c3:87:83:b7:91:45:0e:27:82:73: 27:14:05:65:f5:25:ac:72:25:24:dc:42:da:58:1c: 4d:73:cb:be:04:e4:ce:8b:65:60:a3:83:7b:dc:ae: 59:06:26:db:d4:01:48:76:bc:b4:7c:84:6f:51:2a: 14:f8:39:36:b1:78:28:e5:48:6a:8f:a9:76:4e:5a: 55:5f:0e:f4:00:dc:e3:29:8b:2d:13:30:8f:57:17: 93:24:0d:89:7a:ed:f0:96:85:0d:f1:a2:46:cf:cc: 78:b6:6d:f6:80:e8:6c:22:1e:35:4f:f3:b5:01:38: 5b:29:b3:90:f9:80:6b:f2:9b:4c:d8:81:2b:ae:b4: 2e:9f:61:59:9b:5b:60:4b:c0:3d:5b:cd:ad:9c:32: 2a:2b:26:70:f8:91:a7:1c:dd:df:91:74:4e:54:03: 35:82:52:92:dc:73:a6:d3:4e:44:cb:ba:2b:15:48: 8d:3b:41:5b:04:28:74:31:0a:34:15:3d:67:f3:6f: a1:8e:6b:75:a7:b8:63:3e:f1:c2:67:e6:12:69:f6: 00:c6:08:60:54:7d:c6:68:fc:2c:b6:82:39:d4:d2: fc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E8:B6:8C:A1:89:52:92:C9:A2:43:77:8C:2B:ED:44:DC:C8:77:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61666019-0c9a-36e0-a487-94a151a81bc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:46:e0:49:69:9c:d0:b0:c8:86:aa:5e:1c:9b:d6:0a:e5:46: 54:67:2e:e4:3c:69:3b:22:4f:a7:92:3e:d0:ef:5b:0d:29:83: f8:7c:4e:04:c8:02:98:fa:1a:d3:81:15:f4:27:b0:7e:30:7a: 25:93:34:ab:50:74:c1:3f:68:c6:3c:52:86:40:0e:43:0f:74: b2:43:33:35:9b:53:00:b1:62:5d:f7:9d:a2:ed:68:eb:e4:71: c7:28:b2:81:2e:08:58:a4:31:a9:8e:4a:35:8b:08:c7:fb:c3: 17:85:04:da:cd:59:0a:81:fc:3e:44:b0:b0:15:8d:4f:f4:60: a6:9f:f0:b4:50:a3:65:e1:46:09:20:eb:7c:56:75:00:02:4a: c6:39:21:e9:4d:8e:ab:e2:3b:d8:ae:ee:4e:27:1c:aa:e5:25: 57:a3:ef:93:b6:45:8a:8d:16:e7:39:b4:15:f9:d0:e5:5e:86: 38:fa:08:1a:97:07:e3:57:22:df:3f:f3:81:27:df:67:dc:67: f5:b4:65:e0:80:a0:6c:7e:e8:f9:21:c0:c3:d7:b8:ac:95:e3: a3:f5:54:9c:77:c8:da:76:54:ab:34:77:da:28:94:23:b6:da: 54:3f:85:aa:a1:3b:6c:a1:97:31:a0:8c:bc:9f:bd:0c:8a:15: 97:88:90:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH6MqwTDxYlpyRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjMwMloXDTI2MDcyMzIzMjMwMlowLzEtMCsGA1UEAxMk MGVlYjc1YTItMGRlMC00ZDA2LThmZTYtNzljNGU2MDc3Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9PySUs/bnna2qQ5YJ8LG4DEGv5PE34MDFvX 27U2yNN9PMOHg7eRRQ4ngnMnFAVl9SWsciUk3ELaWBxNc8u+BOTOi2Vgo4N73K5Z Bibb1AFIdry0fIRvUSoU+Dk2sXgo5Uhqj6l2TlpVXw70ANzjKYstEzCPVxeTJA2J eu3wloUN8aJGz8x4tm32gOhsIh41T/O1AThbKbOQ+YBr8ptM2IErrrQun2FZm1tg S8A9W82tnDIqKyZw+JGnHN3fkXROVAM1glKS3HOm005Ey7orFUiNO0FbBCh0MQo0 FT1n82+hjmt1p7hjPvHCZ+YSafYAxghgVH3GaPwstoI51NL83QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7otoyhiVKSyaJDd4wr7UTcyHclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjE2NjYwMTktMGM5YS0z NmUwLWE0ODctOTRhMTUxYTgxYmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItG4ElpnNCwyIaqXhyb1grlRlRnLuQ8aTsiT6eSPtDvWw0pg/h8TgTI Apj6GtOBFfQnsH4weiWTNKtQdME/aMY8UoZADkMPdLJDMzWbUwCxYl33naLtaOvk cccosoEuCFikMamOSjWLCMf7wxeFBNrNWQqB/D5EsLAVjU/0YKaf8LRQo2XhRgkg 63xWdQACSsY5IelNjqviO9iu7k4nHKrlJVej75O2RYqNFuc5tBX50OVehjj6CBqX B+NXIt8/84En32fcZ/W0ZeCAoGx+6PkhwMPXuKyV46P1VJx3yNp2VKs0d9oolCO2 2lQ/haqhO2yhlzGgjLyfvQyKFZeIkIs= -----END CERTIFICATE-----Generated at Wed May 13 14:57:27 2026 by rpki-client