$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/65f34d40-eb13-329d-87ed-7e5f780cd301.roa File: 65f34d40-eb13-329d-87ed-7e5f780cd301.roa (raw, json) Hash identifier: yKkgd9mNLceKMIJYX4hyTQH9gUxxZnxeMopX7TlIa8U= Subject key identifier: 3D:0D:F8:10:85:D8:90:0A:0F:26:EB:63:C7:D5:AA:25:CE:03:CC:40 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E200CF6AFF78765BA90FF00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/65f34d40-eb13-329d-87ed-7e5f780cd301.roa Signing time: Fri 24 Apr 2026 23:23:52 +0000 ROA not before: Fri 24 Apr 2026 23:23:52 +0000 ROA not after: Thu 23 Jul 2026 23:23:52 +0000 asID: 397630 IP address blocks: 64.16.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:20:0c:f6:af:f7:87:65:ba:90:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:52 2026 GMT Not After : Jul 23 23:23:52 2026 GMT Subject: CN=3551bb35-8cfa-4a3b-8222-b991ee3595a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:51:ae:9d:66:d1:cb:0d:85:51:c3:6d:5e:b9: 28:28:c9:44:dd:e8:90:3e:51:50:07:1e:f3:9a:09: 87:79:9a:46:4d:6b:e9:0f:87:5e:39:76:fc:ab:ba: c6:5f:1a:de:02:68:9e:89:b8:f9:d5:d0:d0:88:d6: 76:11:80:4a:ce:1e:6b:63:2c:31:4c:71:7f:2c:d6: 52:7f:f4:59:b2:cc:7f:1c:db:10:eb:92:e9:b1:c4: bf:ff:94:94:d2:b5:6f:97:aa:b3:a3:2b:fd:d3:be: 0e:17:43:e9:11:c1:a2:3d:bd:5f:13:a1:b2:52:c5: 1a:20:3a:41:d6:b4:27:d4:14:e5:14:20:54:69:01: 9d:98:69:89:ff:eb:cf:76:de:64:e5:04:76:df:e2: fe:03:71:81:6f:2d:98:f8:5b:ad:be:cf:fd:2b:82: 3b:34:a5:ea:b9:35:c8:99:bc:65:da:56:21:22:5d: a3:71:3e:29:62:c0:68:01:5f:7f:37:f0:99:30:6c: ea:a8:b6:ff:ca:ea:7c:17:1a:67:ed:8f:a8:12:20: 47:2d:e5:e8:d2:3e:ae:dc:ba:93:70:d8:ff:4c:5e: 8e:f3:53:88:a1:7e:0b:03:7c:30:b9:57:4f:b3:e4: 04:e6:cc:dd:43:e5:51:35:ff:9b:ef:dc:d5:6a:11: 55:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0D:F8:10:85:D8:90:0A:0F:26:EB:63:C7:D5:AA:25:CE:03:CC:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/65f34d40-eb13-329d-87ed-7e5f780cd301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:90:32:1c:cf:f3:1d:97:4f:d7:df:91:c5:ef:31:98:50:d2: 61:a0:0e:a2:04:cc:99:5f:ff:f9:3e:12:45:64:8e:9e:4c:15: 51:fe:ca:5a:1a:28:6d:00:1b:03:43:a1:e5:f1:54:22:db:c0: bb:24:e7:61:04:ea:2f:b9:7a:7e:4e:7c:93:59:51:cc:c3:9c: 82:5f:0e:71:1a:4d:8f:e1:64:22:33:87:74:25:32:c0:5c:c2: 20:a6:80:5a:b2:6a:40:f4:db:2f:ba:de:ee:7a:0b:23:fc:fa: 24:0d:6e:1a:66:b7:80:fc:38:78:27:c8:60:ac:79:f3:d8:27: 81:52:c6:bd:43:2b:98:1a:39:8c:8e:58:9c:7e:1b:80:c0:ad: 5b:f2:90:5c:eb:67:71:d8:0b:61:7a:ef:44:20:f9:67:40:c1: db:a4:b4:40:61:eb:74:35:7c:63:d6:da:8b:cc:ef:72:c8:57: 09:55:cc:d1:e2:3d:e5:b5:d7:39:ad:dc:b9:08:4e:4a:78:18: 7e:bf:d4:5d:cf:64:1c:f4:58:47:ac:fd:a0:f1:02:68:51:e4: 10:44:28:8d:9a:57:7b:10:48:51:c6:97:cb:7c:fb:af:dd:bd: 64:41:b6:60:42:8a:42:2c:90:ba:23:85:99:7b:66:6c:41:98: a4:5e:14:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eIAz2r/eHZbqQ/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjM1MloXDTI2MDcyMzIzMjM1MlowLzEtMCsGA1UEAxMk MzU1MWJiMzUtOGNmYS00YTNiLTgyMjItYjk5MWVlMzU5NWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1GunWbRyw2FUcNtXrkoKMlE3eiQPlFQBx7z mgmHeZpGTWvpD4deOXb8q7rGXxreAmieibj51dDQiNZ2EYBKzh5rYywxTHF/LNZS f/RZssx/HNsQ65LpscS//5SU0rVvl6qzoyv9074OF0PpEcGiPb1fE6GyUsUaIDpB 1rQn1BTlFCBUaQGdmGmJ/+vPdt5k5QR23+L+A3GBby2Y+Futvs/9K4I7NKXquTXI mbxl2lYhIl2jcT4pYsBoAV9/N/CZMGzqqLb/yup8Fxpn7Y+oEiBHLeXo0j6u3LqT cNj/TF6O81OIoX4LA3wwuVdPs+QE5szdQ+VRNf+b79zVahFV9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0N+BCF2JAKDybrY8fVqiXOA8xAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjVmMzRkNDAtZWIxMy0z MjlkLTg3ZWQtN2U1Zjc4MGNkMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2QMhzP8x2XT9ffkcXvMZhQ0mGgDqIEzJlf//k+EkVkjp5MFVH+yloa KG0AGwNDoeXxVCLbwLsk52EE6i+5en5OfJNZUczDnIJfDnEaTY/hZCIzh3QlMsBc wiCmgFqyakD02y+63u56CyP8+iQNbhpmt4D8OHgnyGCsefPYJ4FSxr1DK5gaOYyO WJx+G4DArVvykFzrZ3HYC2F670Qg+WdAwduktEBh63Q1fGPW2ovM73LIVwlVzNHi PeW11zmt3LkITkp4GH6/1F3PZBz0WEes/aDxAmhR5BBEKI2aV3sQSFHGl8t8+6/d vWRBtmBCikIskLojhZl7ZmxBmKReFFM= -----END CERTIFICATE-----Generated at Wed May 13 12:06:41 2026 by rpki-client