$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/6b3e736e-c90b-3a5c-9daa-580496f4625b.roa File: 6b3e736e-c90b-3a5c-9daa-580496f4625b.roa (raw, json) Hash identifier: 2/GGea7nLyR7FyDf+XAnQ5Uj2xBNr8n3rs9j8BxfIVk= Subject key identifier: 58:21:8E:9D:6B:51:E4:9F:D1:64:B5:9D:B9:B2:64:EC:18:0D:D4:EC Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1E5EEA9AE6952B67F61D80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/6b3e736e-c90b-3a5c-9daa-580496f4625b.roa Signing time: Fri 24 Apr 2026 23:20:29 +0000 ROA not before: Fri 24 Apr 2026 23:20:29 +0000 ROA not after: Thu 23 Jul 2026 23:20:29 +0000 asID: 7029 IP address blocks: 64.16.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:5e:ea:9a:e6:95:2b:67:f6:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:20:29 2026 GMT Not After : Jul 23 23:20:29 2026 GMT Subject: CN=6ddfb483-c71f-4d18-8713-71f9bc570bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d6:9e:fe:0f:ef:89:09:a4:78:10:13:09:84: 06:9b:df:de:90:b3:fa:12:3e:ca:84:9a:4a:90:ea: 07:ab:ee:73:ac:13:2d:ba:2e:69:44:a1:96:09:cc: c3:cb:9f:58:5f:b5:99:66:fa:16:b3:cd:4b:82:4c: d0:c2:b6:73:31:7d:9a:c7:0b:87:6c:41:af:62:fc: b1:e9:b3:1c:56:2e:9f:1d:cb:a7:7f:86:1b:8d:91: 9d:72:67:ea:59:c4:32:1d:b4:dd:0d:0a:6c:f9:ca: 89:e4:48:8c:fb:b0:56:b5:c6:5c:d5:76:25:73:d5: b6:53:5b:38:67:3a:40:ac:5d:87:c9:4e:3f:93:3c: f7:ce:90:23:ce:90:83:a7:cd:47:8a:83:25:4d:aa: 31:8f:c3:15:70:53:f9:6d:e1:49:b3:e3:b7:7b:c6: bf:85:a4:a7:3f:7f:dc:41:0b:a9:24:7e:cd:b0:35: a7:83:92:40:5e:1e:de:bc:92:46:b3:74:2d:27:58: 7e:b2:19:3f:83:63:ff:eb:38:37:1a:4e:41:91:99: 0d:65:6b:ab:70:64:3a:b9:5b:96:bb:68:7d:22:bd: 34:2e:b3:e6:f9:9b:ac:61:a5:cb:44:6b:b2:19:9f: 69:31:fd:22:40:e1:4f:db:8a:59:2d:39:74:02:20: 91:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:21:8E:9D:6B:51:E4:9F:D1:64:B5:9D:B9:B2:64:EC:18:0D:D4:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/6b3e736e-c90b-3a5c-9daa-580496f4625b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:75:12:49:e4:42:27:1c:69:96:6f:f5:49:15:1d:5d:b9:47: 91:bc:fb:90:e8:ae:3e:33:f2:22:97:68:f8:19:36:96:70:3e: 94:42:4b:f2:2d:ca:90:de:cc:f8:db:d0:40:97:3c:f6:8a:3b: d0:c4:b2:07:3e:eb:85:77:48:59:fe:95:94:39:9e:89:b2:ed: 71:55:b5:b5:84:ec:d9:ec:b1:75:b1:ff:3b:3f:2a:27:ed:35: 58:56:5a:6f:ad:7a:04:bb:6d:0b:c3:0c:3c:7d:85:40:84:0b: de:ee:d6:0d:a0:46:cc:4d:ab:ce:54:2d:47:b4:e3:e3:d4:46: fe:d2:3d:54:f4:fb:f2:af:42:1c:ec:93:3b:cc:3d:f4:84:86: a7:71:fa:5f:b0:93:76:5a:eb:e0:d2:87:20:a5:0d:20:07:b6: 23:59:37:f1:6f:a8:9c:de:bc:1e:c6:61:7a:69:b0:b8:79:dc: 35:cc:d4:83:84:f5:b4:fa:35:85:cc:2c:74:9b:72:0e:3b:0a: 66:b4:9a:d1:73:30:13:69:b3:4c:55:8a:e2:fa:97:1a:fe:73: df:6d:84:de:16:16:aa:45:5c:7f:a2:74:79:8b:1c:a2:2e:96: fd:6b:5c:65:66:5c:ce:90:28:fd:4c:44:49:37:82:ea:5e:88: 2d:67:c6:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHl7qmuaVK2f2HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjAyOVoXDTI2MDcyMzIzMjAyOVowLzEtMCsGA1UEAxMk NmRkZmI0ODMtYzcxZi00ZDE4LTg3MTMtNzFmOWJjNTcwYmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitae/g/viQmkeBATCYQGm9/ekLP6Ej7KhJpK kOoHq+5zrBMtui5pRKGWCczDy59YX7WZZvoWs81LgkzQwrZzMX2axwuHbEGvYvyx 6bMcVi6fHcunf4YbjZGdcmfqWcQyHbTdDQps+cqJ5EiM+7BWtcZc1XYlc9W2U1s4 ZzpArF2HyU4/kzz3zpAjzpCDp81HioMlTaoxj8MVcFP5beFJs+O3e8a/haSnP3/c QQupJH7NsDWng5JAXh7evJJGs3QtJ1h+shk/g2P/6zg3Gk5BkZkNZWurcGQ6uVuW u2h9Ir00LrPm+ZusYaXLRGuyGZ9pMf0iQOFP24pZLTl0AiCR6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFghjp1rUeSf0WS1nbmyZOwYDdTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNmIzZTczNmUtYzkwYi0z YTVjLTlkYWEtNTgwNDk2ZjQ2MjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN1EknkQiccaZZv9UkVHV25R5G8+5Dorj4z8iKXaPgZNpZwPpRCS/It ypDezPjb0ECXPPaKO9DEsgc+64V3SFn+lZQ5nomy7XFVtbWE7NnssXWx/zs/Kift NVhWWm+tegS7bQvDDDx9hUCEC97u1g2gRsxNq85ULUe04+PURv7SPVT0+/KvQhzs kzvMPfSEhqdx+l+wk3Za6+DShyClDSAHtiNZN/FvqJzevB7GYXppsLh53DXM1IOE 9bT6NYXMLHSbcg47Cma0mtFzMBNps0xViuL6lxr+c99thN4WFqpFXH+idHmLHKIu lv1rXGVmXM6QKP1MREk3gupeiC1nxqg= -----END CERTIFICATE-----Generated at Wed May 13 10:44:04 2026 by rpki-client