$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/69d85ed1-f55f-3fb4-a678-d99bfb955abe.roa File: 69d85ed1-f55f-3fb4-a678-d99bfb955abe.roa (raw, json) Hash identifier: 8iocHIXXNmEoLjoIzkye/45gLBkrNuM/pKK3h5wuPJ0= Subject key identifier: B2:FA:50:B0:31:43:F5:65:8E:8A:2D:25:84:29:DB:50:02:E1:2C:BB Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1EF8484BA8A20327657E80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/69d85ed1-f55f-3fb4-a678-d99bfb955abe.roa Signing time: Fri 24 Apr 2026 23:21:42 +0000 ROA not before: Fri 24 Apr 2026 23:21:42 +0000 ROA not after: Thu 23 Jul 2026 23:21:42 +0000 asID: 20001 IP address blocks: 64.16.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:f8:48:4b:a8:a2:03:27:65:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:42 2026 GMT Not After : Jul 23 23:21:42 2026 GMT Subject: CN=c800959a-55ce-4926-91a7-25423b72e5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:f7:ba:4f:fa:21:98:f5:24:54:84:6f:2b: cb:d4:c5:d2:4c:2f:42:bd:4d:8f:7a:80:c3:9d:aa: 9e:06:05:a2:2a:22:ed:3c:9a:db:be:b6:c4:64:fe: a1:e2:06:66:27:8f:94:26:1c:b8:ff:b9:91:88:d7: b8:07:12:5c:60:6c:6a:6d:46:42:c4:b4:5f:07:04: 54:78:ce:8d:2b:00:4b:70:b3:f7:35:c3:9b:94:28: 27:d5:13:95:56:39:82:d2:5e:17:e0:a8:9c:2d:d3: f5:05:2d:1b:66:5c:0a:bc:b8:d9:46:3c:2e:42:57: c8:b4:3b:59:e1:10:8f:7f:ba:18:49:0a:58:61:19: 0c:6e:0d:08:50:43:57:b2:d5:3a:fc:7f:96:b2:2c: 1f:96:89:45:40:5a:41:b9:68:6a:04:1b:50:ed:4f: aa:4c:17:d8:68:d7:8d:aa:df:10:f6:46:0d:53:66: 7f:64:db:36:e2:72:cd:0a:4b:38:03:1c:83:56:b9: c6:20:d4:05:69:c7:81:d8:67:3a:1b:34:34:f7:35: a6:78:8c:26:b1:5f:04:1e:dd:07:3d:8d:22:7b:80: cc:a2:3f:7a:c6:d1:28:de:9c:7e:09:d7:06:80:31: 3c:58:f7:b2:88:c7:45:bd:b4:69:1f:8a:f0:90:f0: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FA:50:B0:31:43:F5:65:8E:8A:2D:25:84:29:DB:50:02:E1:2C:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/69d85ed1-f55f-3fb4-a678-d99bfb955abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:95:56:7d:95:73:c5:db:8c:c8:31:a4:30:07:32:69:b5:84: fb:b2:17:49:01:dc:b6:28:30:4c:27:2f:e1:2a:5a:e6:0f:d1: bc:65:7a:f4:f0:0c:12:96:62:b0:c0:a3:0b:d9:56:f6:7d:97: bd:ed:7e:09:89:9b:d4:4f:df:e3:83:c8:69:b7:da:e9:fb:9a: cb:d5:26:49:c7:8e:a6:f3:5f:11:cd:b7:68:ec:e2:1a:50:ce: 0f:b7:ec:d7:e2:2f:f0:99:27:e0:3f:5e:83:bf:17:77:2e:23: 12:0d:79:34:d1:b6:63:d7:2e:4a:5d:0c:ef:3b:1f:56:fe:8b: a9:51:50:e4:31:0e:cf:3a:92:74:6c:63:ec:6f:09:81:3e:47: de:f3:44:4c:2b:78:07:d8:c9:db:24:3e:3b:bf:cd:1d:1d:2f: cd:1f:f4:a0:b6:dc:50:1e:77:e4:fe:36:8b:e5:12:11:a1:87: c6:98:cd:5d:09:a3:45:73:ee:d0:1f:28:4f:e1:90:cd:47:fe: b3:55:f6:c7:9b:94:9c:cb:e7:f7:60:64:dc:aa:4c:cb:a5:5c: bb:97:48:15:28:9b:01:75:61:5d:e9:35:3d:ad:ef:68:9b:bc: b1:7b:e3:ad:21:e6:a9:0a:b0:d8:09:9f:1e:29:bc:1c:db:77: ca:c2:60:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHvhIS6iiAydlfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjE0MloXDTI2MDcyMzIzMjE0MlowLzEtMCsGA1UEAxMk YzgwMDk1OWEtNTVjZS00OTI2LTkxYTctMjU0MjNiNzJlNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhL3uk/6IZj1JFSEbyvL1MXSTC9CvU2PeoDD naqeBgWiKiLtPJrbvrbEZP6h4gZmJ4+UJhy4/7mRiNe4BxJcYGxqbUZCxLRfBwRU eM6NKwBLcLP3NcOblCgn1ROVVjmC0l4X4KicLdP1BS0bZlwKvLjZRjwuQlfItDtZ 4RCPf7oYSQpYYRkMbg0IUENXstU6/H+WsiwflolFQFpBuWhqBBtQ7U+qTBfYaNeN qt8Q9kYNU2Z/ZNs24nLNCks4AxyDVrnGINQFaceB2Gc6GzQ09zWmeIwmsV8EHt0H PY0ie4DMoj96xtEo3px+CdcGgDE8WPeyiMdFvbRpH4rwkPDmowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLL6ULAxQ/VljootJYQp21AC4Sy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNjlkODVlZDEtZjU1Zi0z ZmI0LWE2NzgtZDk5YmZiOTU1YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+VVn2Vc8XbjMgxpDAHMmm1hPuyF0kB3LYoMEwnL+EqWuYP0bxlevTw DBKWYrDAowvZVvZ9l73tfgmJm9RP3+ODyGm32un7msvVJknHjqbzXxHNt2js4hpQ zg+37NfiL/CZJ+A/XoO/F3cuIxINeTTRtmPXLkpdDO87H1b+i6lRUOQxDs86knRs Y+xvCYE+R97zREwreAfYydskPju/zR0dL80f9KC23FAed+T+NovlEhGhh8aYzV0J o0Vz7tAfKE/hkM1H/rNV9seblJzL5/dgZNyqTMulXLuXSBUomwF1YV3pNT2t72ib vLF7460h5qkKsNgJnx4pvBzbd8rCYFg= -----END CERTIFICATE-----Generated at Wed May 13 13:02:15 2026 by rpki-client