$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f1aea5-9fe6-3937-a1d0-5db3957de106.roa File: 61f1aea5-9fe6-3937-a1d0-5db3957de106.roa (raw, json) Hash identifier: RIRKQgnND2Kleh7k4WG1JJtxbA4cYLP6tXEbKchP1pE= Subject key identifier: 5C:96:1A:EC:6C:7F:22:27:73:EF:3F:A4:02:E1:9A:A0:A7:A8:BA:F6 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F032C520A03BC5B5A7680 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f1aea5-9fe6-3937-a1d0-5db3957de106.roa Signing time: Fri 24 Apr 2026 23:21:47 +0000 ROA not before: Fri 24 Apr 2026 23:21:47 +0000 ROA not after: Thu 23 Jul 2026 23:21:47 +0000 asID: 20001 IP address blocks: 64.16.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:03:2c:52:0a:03:bc:5b:5a:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:47 2026 GMT Not After : Jul 23 23:21:47 2026 GMT Subject: CN=dec2594d-0e6b-49a6-a4a2-8808cef80f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:73:61:ea:03:7a:3c:ae:22:b2:a3:d0:21: 63:b2:45:eb:0b:43:89:90:1d:a0:81:7f:4b:08:d4: 8a:0e:51:14:c6:e3:e7:d8:75:56:fd:c9:ad:80:75: 1a:8f:7e:8b:27:4c:0c:9a:c7:65:e7:27:f1:aa:6b: 57:07:a3:f1:0f:a2:34:f6:b1:63:e9:97:c1:5e:cb: 25:f0:c9:23:de:18:04:63:22:e8:f1:0f:16:3a:0a: 2f:3c:4d:7b:4e:60:87:09:c7:52:a9:0c:e6:48:dd: d8:13:39:d9:be:2c:5c:c4:c9:10:6e:97:47:77:30: 9d:2b:e1:34:d8:93:89:ec:f9:16:c1:69:f0:7f:89: 47:9b:c5:17:2a:d3:b9:52:13:ca:f2:d4:0b:e1:c3: dc:e4:33:ae:28:b6:5d:91:3f:d3:d0:e2:db:70:eb: 52:54:07:70:aa:c1:89:a7:38:23:77:f5:f5:7d:bc: cd:64:0f:a0:b0:c8:54:d8:70:78:a2:db:95:3f:42: 26:ce:60:06:18:2c:59:95:66:12:18:95:37:15:d3: b2:d1:00:9b:90:ce:3e:92:e8:ea:22:b5:80:58:03: ec:dd:04:63:d3:cc:36:ae:56:83:6c:a3:2e:ab:7f: b6:69:ff:74:5c:fe:e3:0a:0a:af:9c:15:4e:06:7b: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:96:1A:EC:6C:7F:22:27:73:EF:3F:A4:02:E1:9A:A0:A7:A8:BA:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/61f1aea5-9fe6-3937-a1d0-5db3957de106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:33:72:5e:ee:7c:d5:93:d5:f8:cf:6f:8b:b7:66:a1:d6:5f: d0:aa:b3:f9:75:51:ce:99:73:bb:30:9d:e5:c2:d7:9f:65:ae: f2:d9:bd:ed:8d:1c:3e:98:bc:ee:a8:ec:99:3a:36:1d:6c:1d: 33:32:60:37:2e:4e:f1:a1:91:30:09:73:85:d7:42:6a:21:e2: f5:20:78:ce:52:99:71:c5:da:f6:4d:4a:e6:92:60:fe:05:86: ca:f3:aa:0b:1b:1d:3a:89:99:fb:b7:7f:db:ea:de:7a:87:64: 1b:76:2e:33:af:d0:4d:d6:e8:ee:eb:4b:7b:1a:59:bc:b3:ed: 8e:65:2b:9a:c1:d1:0e:f7:a9:29:16:92:61:7c:f8:83:fc:0b: bc:44:91:76:dc:5f:a7:32:84:b0:a5:8e:e5:b4:fa:5b:69:30: 22:c8:a3:10:1c:7a:ac:c0:7a:2f:08:09:42:93:c9:4d:51:c9: f4:bd:5a:31:21:f2:6b:76:f4:00:c2:02:14:81:a9:29:60:14: 97:f3:ab:7d:73:70:39:ed:45:cc:31:05:af:c3:aa:68:6f:e8: c8:94:20:61:6f:14:d0:6c:ee:98:f5:c5:8e:52:f8:2e:79:99: 4a:17:8f:02:85:75:f0:db:b2:1f:13:85:1c:2b:44:aa:a2:f9: db:c0:af:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHwMsUgoDvFtadoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjE0N1oXDTI2MDcyMzIzMjE0N1owLzEtMCsGA1UEAxMk ZGVjMjU5NGQtMGU2Yi00OWE2LWE0YTItODgwOGNlZjgwZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUtzYeoDejyuIrKj0CFjskXrC0OJkB2ggX9L CNSKDlEUxuPn2HVW/cmtgHUaj36LJ0wMmsdl5yfxqmtXB6PxD6I09rFj6ZfBXssl 8Mkj3hgEYyLo8Q8WOgovPE17TmCHCcdSqQzmSN3YEznZvixcxMkQbpdHdzCdK+E0 2JOJ7PkWwWnwf4lHm8UXKtO5UhPK8tQL4cPc5DOuKLZdkT/T0OLbcOtSVAdwqsGJ pzgjd/X1fbzNZA+gsMhU2HB4otuVP0ImzmAGGCxZlWYSGJU3FdOy0QCbkM4+kujq IrWAWAPs3QRj08w2rlaDbKMuq3+2af90XP7jCgqvnBVOBnsiawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyWGuxsfyInc+8/pALhmqCnqLr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjFmMWFlYTUtOWZlNi0z OTM3LWExZDAtNWRiMzk1N2RlMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0zcl7ufNWT1fjPb4u3ZqHWX9Cqs/l1Uc6Zc7swneXC159lrvLZve2N HD6YvO6o7Jk6Nh1sHTMyYDcuTvGhkTAJc4XXQmoh4vUgeM5SmXHF2vZNSuaSYP4F hsrzqgsbHTqJmfu3f9vq3nqHZBt2LjOv0E3W6O7rS3saWbyz7Y5lK5rB0Q73qSkW kmF8+IP8C7xEkXbcX6cyhLCljuW0+ltpMCLIoxAceqzAei8ICUKTyU1RyfS9WjEh 8mt29ADCAhSBqSlgFJfzq31zcDntRcwxBa/Dqmhv6MiUIGFvFNBs7pj1xY5S+C55 mUoXjwKFdfDbsh8ThRwrRKqi+dvAr80= -----END CERTIFICATE-----Generated at Wed May 13 13:45:15 2026 by rpki-client