$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/71ac1e75-f2ea-36f4-ad2f-08164d1cb6a0.roa File: 71ac1e75-f2ea-36f4-ad2f-08164d1cb6a0.roa (raw, json) Hash identifier: ohSgRVPo35ge3CzpNC3KMktRRGLXobUUZpPg2I9rmYU= Subject key identifier: AF:A7:99:37:E0:AD:99:B7:D1:AE:EA:E4:B1:C5:80:53:23:DD:F7:A2 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D96ABE7DEE29196D02A370020 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/71ac1e75-f2ea-36f4-ad2f-08164d1cb6a0.roa Signing time: Wed 22 Apr 2026 07:19:12 +0000 ROA not before: Wed 22 Apr 2026 07:19:12 +0000 ROA not after: Tue 21 Jul 2026 07:19:12 +0000 asID: 20001 IP address blocks: 64.16.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:96:ab:e7:de:e2:91:96:d0:2a:37:00:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 22 07:19:12 2026 GMT Not After : Jul 21 07:19:12 2026 GMT Subject: CN=76588a0a-0347-4ddc-b988-e8dca9b8416f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8d:6b:e6:d4:89:df:9b:da:83:bc:51:1f:59: 33:b4:65:b5:ee:e9:63:7f:8b:50:c2:3f:50:5d:42: ba:96:5d:cc:be:56:d8:4e:b5:bb:65:18:e1:d8:ee: e5:c0:13:55:d3:d2:44:d9:02:bb:4e:3b:8a:35:5d: 70:c2:f8:f0:d3:3b:66:58:a5:9a:c7:f0:50:d5:cf: b7:4e:1a:ce:25:28:da:df:68:62:4c:98:5d:8b:b0: 0f:f5:58:ce:2f:97:ff:2a:07:2e:ee:c8:5d:5c:27: 4b:24:07:e4:49:d7:55:47:b6:70:92:f4:d8:c0:bb: 65:32:8d:f2:c7:de:30:b4:c1:4d:cd:cc:5a:ef:9f: 00:0b:c2:f0:b0:5e:52:e9:6e:da:a9:cf:77:6a:4a: 58:14:97:4a:c7:20:ea:bc:92:3d:7f:90:bd:a2:53: 4e:36:fa:81:66:4c:a4:10:e2:19:da:be:73:11:bb: cb:96:d3:ca:0c:e3:f8:d9:ea:e5:76:46:91:85:4b: e4:aa:5b:2e:09:f4:47:a7:21:17:19:93:b8:13:29: 60:09:0d:f8:22:e6:fa:8d:bf:ad:3f:23:1f:43:11: 63:67:87:52:fc:55:bc:7c:4e:64:e6:e2:4a:c7:87: 32:3d:da:12:d4:61:8e:0e:73:7f:f7:45:e8:85:55: 59:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A7:99:37:E0:AD:99:B7:D1:AE:EA:E4:B1:C5:80:53:23:DD:F7:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/71ac1e75-f2ea-36f4-ad2f-08164d1cb6a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:cb:25:8b:86:b7:72:7b:cf:ae:7b:4a:0c:9f:92:ef:dc:b7: 99:84:9f:e8:8d:83:bc:47:dd:35:ba:19:2a:b1:ae:61:21:f6: a1:8a:f7:e3:17:ee:2b:64:b0:de:b7:95:d0:ff:74:c4:5d:0f: 68:c6:f0:a0:f3:9c:70:a1:4e:09:ce:1c:80:56:b1:d8:b8:8d: 7d:8d:d7:ff:35:16:5f:b5:a6:86:40:ca:bf:bb:50:08:3e:82: cf:cb:00:fc:3a:b1:d8:ba:13:45:3f:b8:f0:9a:d6:5c:73:c1: f6:40:b0:4c:fa:3c:d1:53:1b:e4:3e:48:de:a9:79:16:d3:eb: ed:35:66:df:e0:61:83:8c:23:19:24:3f:80:aa:b6:87:83:5f: c6:05:ee:38:04:50:4a:a5:c3:5e:94:61:75:e6:df:2e:69:0c: 97:30:1c:70:14:40:20:19:cf:b0:57:7c:9c:a6:d5:e9:af:c0: 37:c5:b2:30:64:62:9a:8d:0b:c7:fa:9c:7a:4e:34:79:91:b7: 74:83:1c:21:1c:eb:f9:4f:9f:b7:c7:bd:99:fb:10:bc:26:41: 4a:25:f6:f1:dc:38:50:cd:ea:ae:8d:2a:99:04:e9:a4:36:a7: 70:b8:50:e4:e0:89:de:32:8a:c5:a6:bd:22:4d:b6:07:12:ed: 2b:8b:d4:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Wq+fe4pGW0Co3ACAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyMjA3MTkxMloXDTI2MDcyMTA3MTkxMlowLzEtMCsGA1UEAxMk NzY1ODhhMGEtMDM0Ny00ZGRjLWI5ODgtZThkY2E5Yjg0MTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI1r5tSJ35vag7xRH1kztGW17uljf4tQwj9Q XUK6ll3MvlbYTrW7ZRjh2O7lwBNV09JE2QK7TjuKNV1wwvjw0ztmWKWax/BQ1c+3 ThrOJSja32hiTJhdi7AP9VjOL5f/Kgcu7shdXCdLJAfkSddVR7ZwkvTYwLtlMo3y x94wtMFNzcxa758AC8LwsF5S6W7aqc93akpYFJdKxyDqvJI9f5C9olNONvqBZkyk EOIZ2r5zEbvLltPKDOP42erldkaRhUvkqlsuCfRHpyEXGZO4EylgCQ34Iub6jb+t PyMfQxFjZ4dS/FW8fE5k5uJKx4cyPdoS1GGODnN/90XohVVZ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+nmTfgrZm30a7q5LHFgFMj3feiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNzFhYzFlNzUtZjJlYS0z NmY0LWFkMmYtMDgxNjRkMWNiNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzLJYuGt3J7z657Sgyfku/ct5mEn+iNg7xH3TW6GSqxrmEh9qGK9+MX 7itksN63ldD/dMRdD2jG8KDznHChTgnOHIBWsdi4jX2N1/81Fl+1poZAyr+7UAg+ gs/LAPw6sdi6E0U/uPCa1lxzwfZAsEz6PNFTG+Q+SN6peRbT6+01Zt/gYYOMIxkk P4CqtoeDX8YF7jgEUEqlw16UYXXm3y5pDJcwHHAUQCAZz7BXfJym1emvwDfFsjBk YpqNC8f6nHpONHmRt3SDHCEc6/lPn7fHvZn7ELwmQUol9vHcOFDN6q6NKpkE6aQ2 p3C4UOTgid4yisWmvSJNtgcS7SuL1F4= -----END CERTIFICATE-----Generated at Wed May 13 12:41:03 2026 by rpki-client