$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/666200aa-4d9e-303e-9815-1b88a9ab7e3b.roa File: 666200aa-4d9e-303e-9815-1b88a9ab7e3b.roa (raw, json) Hash identifier: wzuNRxk9vpCnJxL8ghm1jIl3gKwS+nCnhz5LWxXZFfA= Subject key identifier: 23:0B:6E:D3:68:95:14:21:5F:0E:D0:15:59:BC:64:93:1F:38:0C:07 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F54C518CBEB9F185E8080 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/666200aa-4d9e-303e-9815-1b88a9ab7e3b.roa Signing time: Fri 24 Apr 2026 23:22:25 +0000 ROA not before: Fri 24 Apr 2026 23:22:25 +0000 ROA not after: Thu 23 Jul 2026 23:22:25 +0000 asID: 20001 IP address blocks: 64.16.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:54:c5:18:cb:eb:9f:18:5e:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:25 2026 GMT Not After : Jul 23 23:22:25 2026 GMT Subject: CN=20964e4b-95b5-45bb-9287-a066c46ecdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8e:b6:d8:82:e9:5b:3f:4e:e7:1d:9f:cd:84: fb:ce:fa:54:ea:8f:3a:dd:41:f4:4a:b8:86:55:b6: 3c:af:87:1c:1a:ff:af:d8:d7:f6:51:5d:d1:7d:54: 3d:77:4d:46:a4:78:b0:ff:04:93:67:fb:a8:42:c3: 91:59:84:3b:d2:98:e7:1f:f1:f1:e4:6c:4b:43:b8: fe:c1:d3:9a:ea:1a:30:94:4e:ec:29:1f:d3:b4:e8: 33:24:4d:06:86:85:a2:b3:1d:03:2f:a5:f9:fa:bf: d4:cd:cd:65:02:b5:0a:07:43:dd:d1:15:bb:ff:18: 20:ab:eb:ca:46:f9:2e:31:0c:4a:39:e8:aa:cf:91: a5:4f:1f:d2:95:89:cc:93:90:8a:be:87:1a:82:74: 6f:f5:e0:80:be:71:93:56:f6:5d:61:10:41:4a:25: 6c:96:af:e7:24:98:50:46:6d:18:c3:e0:1f:7e:1e: 5c:43:1c:ae:9b:1a:c9:52:53:c3:14:89:61:c7:0f: d7:b6:e6:13:a4:cd:fd:06:37:51:7b:c2:1e:74:82: c5:62:3d:23:5c:03:af:77:07:7e:3c:14:60:0a:d4: 64:68:1f:81:36:2c:11:63:3d:1d:9a:e6:cb:8c:af: fe:4d:95:91:10:eb:69:05:30:b4:68:16:37:a4:65: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0B:6E:D3:68:95:14:21:5F:0E:D0:15:59:BC:64:93:1F:38:0C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/666200aa-4d9e-303e-9815-1b88a9ab7e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d8:92:99:6e:90:8e:43:37:b0:56:74:8b:d0:27:c5:34:c8: 03:f7:2c:a8:da:45:21:d0:cd:a2:ce:1d:ec:9d:f9:3a:ea:07: 8c:0c:9e:38:ca:ee:c3:65:25:17:89:b3:68:ac:84:01:ff:06: 3f:a9:c2:d1:73:aa:60:1b:63:34:9a:17:ea:2d:02:a6:ff:a0: 66:02:9d:1b:32:3c:78:74:91:c2:42:94:9f:0b:7e:0e:5a:e6: ab:61:3a:22:84:8d:07:32:c3:5f:72:c9:7f:91:59:c4:73:31: 19:5b:51:a3:20:7a:c7:39:9c:10:ad:c2:f0:e4:85:be:31:5b: e7:82:ab:c6:4c:b3:07:40:a8:c6:ec:5e:09:f2:24:4a:a8:70: 92:0e:27:b3:47:f3:f8:c4:19:6d:07:cd:1f:ac:3d:d1:ca:04: ff:60:79:0d:53:24:07:93:9e:f3:91:d0:fd:0d:47:e2:71:98: ad:78:90:44:70:9b:f4:ac:7b:ed:88:28:46:0c:0f:a2:7b:c5: 53:a9:c0:a0:84:16:33:9e:85:df:83:04:68:83:4d:fd:13:8c: a2:20:d1:c2:44:2c:1f:4e:26:9a:27:18:8a:c6:dd:b1:91:8b: ec:80:fe:99:e8:e8:25:b0:e5:50:8b:d7:56:ca:93:65:05:73: c6:79:68:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH1TFGMvrnxhegIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIyNVoXDTI2MDcyMzIzMjIyNVowLzEtMCsGA1UEAxMk MjA5NjRlNGItOTViNS00NWJiLTkyODctYTA2NmM0NmVjZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY622ILpWz9O5x2fzYT7zvpU6o863UH0SriG VbY8r4ccGv+v2Nf2UV3RfVQ9d01GpHiw/wSTZ/uoQsORWYQ70pjnH/Hx5GxLQ7j+ wdOa6howlE7sKR/TtOgzJE0GhoWisx0DL6X5+r/Uzc1lArUKB0Pd0RW7/xggq+vK RvkuMQxKOeiqz5GlTx/SlYnMk5CKvocagnRv9eCAvnGTVvZdYRBBSiVslq/nJJhQ Rm0Yw+Affh5cQxyumxrJUlPDFIlhxw/XtuYTpM39BjdRe8IedILFYj0jXAOvdwd+ PBRgCtRkaB+BNiwRYz0dmubLjK/+TZWREOtpBTC0aBY3pGWbSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMLbtNolRQhXw7QFVm8ZJMfOAwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjY2MjAwYWEtNGQ5ZS0z MDNlLTk4MTUtMWI4OGE5YWI3ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvYkplukI5DN7BWdIvQJ8U0yAP3LKjaRSHQzaLOHeyd+TrqB4wMnjjK 7sNlJReJs2ishAH/Bj+pwtFzqmAbYzSaF+otAqb/oGYCnRsyPHh0kcJClJ8Lfg5a 5qthOiKEjQcyw19yyX+RWcRzMRlbUaMgesc5nBCtwvDkhb4xW+eCq8ZMswdAqMbs XgnyJEqocJIOJ7NH8/jEGW0HzR+sPdHKBP9geQ1TJAeTnvOR0P0NR+JxmK14kERw m/Sse+2IKEYMD6J7xVOpwKCEFjOehd+DBGiDTf0TjKIg0cJELB9OJponGIrG3bGR i+yA/pno6CWw5VCL11bKk2UFc8Z5aMk= -----END CERTIFICATE-----Generated at Wed May 13 14:47:51 2026 by rpki-client