$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f07d22-8648-3fa0-9c86-d1f0137e730e.roa File: 61f07d22-8648-3fa0-9c86-d1f0137e730e.roa (raw, json) Hash identifier: plVSfhVntaVBFi9bzz3e2mpJ+VyAemgOdoXGFu5hgp4= Subject key identifier: 8F:9B:9E:5D:8B:22:58:37:C1:2E:B0:DF:52:A3:7F:31:5A:1F:69:BF Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1FEC438A722513BB116EC0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f07d22-8648-3fa0-9c86-d1f0137e730e.roa Signing time: Fri 24 Apr 2026 23:23:37 +0000 ROA not before: Fri 24 Apr 2026 23:23:37 +0000 ROA not after: Thu 23 Jul 2026 23:23:37 +0000 asID: 397630 IP address blocks: 64.16.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:ec:43:8a:72:25:13:bb:11:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:37 2026 GMT Not After : Jul 23 23:23:37 2026 GMT Subject: CN=5361f236-13fa-4615-b3ac-585d36638005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:53:9e:01:a2:c3:c2:29:d1:af:3a:4a:80: 08:04:65:d3:12:be:01:88:0c:11:84:eb:e9:bf:79: f9:db:8b:0e:2c:d5:ef:65:20:be:6b:da:f1:1b:85: c1:2f:5f:d2:e1:f6:06:1a:1c:37:9e:5e:3e:22:14: 85:1c:0b:89:fb:f6:24:bd:c5:65:09:cc:a1:ad:31: 49:a5:76:1c:e3:93:15:aa:2e:0c:c6:dd:bf:ff:1e: 54:c1:9f:e5:e9:18:e3:8d:93:6e:c6:c1:a0:5b:12: f7:19:dc:05:51:fc:37:1c:9d:87:4e:40:92:86:f6: d4:4e:c7:05:29:de:e8:19:4c:a4:06:1d:3a:c8:5a: d3:55:f4:b0:8e:dc:dd:bf:18:43:74:a2:56:82:40: 28:8b:0b:7b:bf:17:05:c2:01:84:f8:10:77:dd:b1: 81:e9:2b:c6:c5:a0:66:a6:82:9d:14:9d:38:1b:f7: 73:27:43:e3:25:fe:10:bc:61:59:38:03:cc:f0:e2: ba:ec:7a:8c:2d:e5:8d:bd:9d:26:57:92:b1:f5:9d: ed:57:b8:b4:ae:c3:31:6c:1e:a6:cb:0b:f8:76:e2: c0:3a:b2:75:90:62:ee:7a:ca:a7:6d:55:d3:6c:58: 8d:0d:93:b7:04:ed:0d:0b:15:7f:0c:1d:6d:a1:13: 79:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9B:9E:5D:8B:22:58:37:C1:2E:B0:DF:52:A3:7F:31:5A:1F:69:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f07d22-8648-3fa0-9c86-d1f0137e730e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:fa:51:19:cf:f3:5a:70:a1:ef:01:9b:fc:6e:50:b1:9b:8d: f9:dc:0b:a9:3b:1c:c0:87:cc:eb:c5:84:91:12:e7:04:fd:18: f4:3a:e9:62:92:3e:30:ef:38:65:07:70:56:8d:fe:ca:fa:9d: ac:e1:df:70:4b:77:c1:fc:91:0c:8e:4c:00:2f:82:85:54:4e: e3:50:87:c1:35:3a:da:a1:64:a9:f0:53:4b:e9:7e:6c:95:de: ad:03:25:fc:a6:3f:c0:f4:df:85:90:5b:06:0c:f7:d2:a3:e8: fa:2f:a4:9f:96:40:ce:42:44:c7:63:64:20:c1:75:9f:bc:87: 56:dc:e4:2f:34:61:4c:99:97:2e:51:0b:c5:cb:21:ec:9c:55: 09:6b:03:5c:f8:05:b5:96:e6:de:82:6e:56:82:25:aa:f2:a0: fc:65:ed:09:d8:cb:fe:c9:82:e1:ba:94:16:f2:78:28:c9:a4: 4a:26:0a:70:bf:aa:f4:14:ec:fc:ae:cc:46:74:45:b8:f9:f2: 21:7d:f4:cb:ee:7d:92:3f:b6:ee:a7:0a:be:df:a8:41:82:5e: 62:75:c0:9b:fe:34:ff:01:b6:93:94:ee:7c:97:2e:f3:c4:5a: 7b:e5:55:f1:6c:da:50:58:06:e2:df:f6:13:31:25:e8:0b:1e: a2:03:74:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH+xDinIlE7sRbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjMzN1oXDTI2MDcyMzIzMjMzN1owLzEtMCsGA1UEAxMk NTM2MWYyMzYtMTNmYS00NjE1LWIzYWMtNTg1ZDM2NjM4MDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBhTngGiw8Ip0a86SoAIBGXTEr4BiAwRhOvp v3n524sOLNXvZSC+a9rxG4XBL1/S4fYGGhw3nl4+IhSFHAuJ+/YkvcVlCcyhrTFJ pXYc45MVqi4Mxt2//x5UwZ/l6RjjjZNuxsGgWxL3GdwFUfw3HJ2HTkCShvbUTscF Kd7oGUykBh06yFrTVfSwjtzdvxhDdKJWgkAoiwt7vxcFwgGE+BB33bGB6SvGxaBm poKdFJ04G/dzJ0PjJf4QvGFZOAPM8OK67HqMLeWNvZ0mV5Kx9Z3tV7i0rsMxbB6m ywv4duLAOrJ1kGLuesqnbVXTbFiNDZO3BO0NCxV/DB1toRN5rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+bnl2LIlg3wS6w31KjfzFaH2m/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjFmMDdkMjItODY0OC0z ZmEwLTljODYtZDFmMDEzN2U3MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALj6URnP81pwoe8Bm/xuULGbjfncC6k7HMCHzOvFhJES5wT9GPQ66WKS PjDvOGUHcFaN/sr6nazh33BLd8H8kQyOTAAvgoVUTuNQh8E1OtqhZKnwU0vpfmyV 3q0DJfymP8D034WQWwYM99Kj6PovpJ+WQM5CRMdjZCDBdZ+8h1bc5C80YUyZly5R C8XLIeycVQlrA1z4BbWW5t6CblaCJaryoPxl7QnYy/7JguG6lBbyeCjJpEomCnC/ qvQU7PyuzEZ0Rbj58iF99MvufZI/tu6nCr7fqEGCXmJ1wJv+NP8BtpOU7nyXLvPE WnvlVfFs2lBYBuLf9hMxJegLHqIDdKg= -----END CERTIFICATE-----Generated at Wed May 13 12:12:28 2026 by rpki-client