$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7497f4dd-b59f-3cbe-8a89-925ff1f7fde3.roa File: 7497f4dd-b59f-3cbe-8a89-925ff1f7fde3.roa (raw, json) Hash identifier: xubKJcqfcKa1+sQA9sQBDv7GsydpX5GTT+VnaX/N0N4= Subject key identifier: 4B:4D:06:C9:F6:D2:C2:65:1F:9D:E1:57:41:CA:94:FA:B0:57:57:D4 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F316DFD26D76AE328EB00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7497f4dd-b59f-3cbe-8a89-925ff1f7fde3.roa Signing time: Fri 24 Apr 2026 23:22:09 +0000 ROA not before: Fri 24 Apr 2026 23:22:09 +0000 ROA not after: Thu 23 Jul 2026 23:22:09 +0000 asID: 20001 IP address blocks: 64.16.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:31:6d:fd:26:d7:6a:e3:28:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:09 2026 GMT Not After : Jul 23 23:22:09 2026 GMT Subject: CN=64a8a9f6-d5f3-4dcc-80b0-a7228557e218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d9:14:de:46:6a:62:0c:7c:c0:30:0d:bb:e3: 3d:ca:04:82:41:3b:c5:05:31:9e:81:60:10:2a:75: 4b:03:fe:85:19:03:26:24:7a:8d:68:47:5d:5e:74: 32:c4:fb:fc:76:f6:19:9a:6c:d2:35:a5:ca:c4:ed: 2a:9b:ce:68:5e:44:63:40:c3:4c:dd:56:d1:7b:e9: 9f:9c:4d:89:4b:7d:c0:99:a0:24:9c:16:ce:19:8e: 7a:65:01:98:8e:02:cd:03:ed:1b:21:da:83:f2:44: ba:54:74:e4:da:be:75:2b:58:5c:b8:4e:b2:d9:97: 8c:49:b3:08:26:b6:f7:9a:06:0e:1b:19:f5:5d:cf: a0:00:06:ac:41:69:f2:e4:57:e5:84:8b:7e:88:22: b2:df:41:75:0b:cf:98:39:bb:b1:41:02:7d:16:21: 5d:9c:1c:19:77:41:fb:43:1b:8e:2a:21:15:cb:ba: c7:b5:5f:37:59:39:3e:a0:02:96:2a:16:c3:e5:06: d4:2c:a6:1a:c1:e3:4f:19:d0:37:27:10:09:d8:76: 1b:a5:28:28:52:d4:82:37:5a:6f:6d:f1:aa:5f:eb: 17:09:cc:f8:50:b9:7e:f3:d8:6f:e1:d3:ee:48:8f: 39:b2:f3:71:4b:82:87:72:02:eb:18:16:47:d4:04: ae:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4D:06:C9:F6:D2:C2:65:1F:9D:E1:57:41:CA:94:FA:B0:57:57:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7497f4dd-b59f-3cbe-8a89-925ff1f7fde3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:5a:c2:3f:e2:4e:87:dc:bf:97:39:4f:d2:57:62:16:da:a3: f5:3c:40:c5:b5:68:67:b7:29:17:df:4d:3e:f3:4f:36:ad:30: d3:08:f0:50:81:b5:bb:8c:80:2b:1f:c6:31:c1:b2:4f:87:bd: c0:50:e8:a1:ab:ec:e5:d7:2b:af:6d:f0:fc:fc:34:0b:36:c4: c8:ec:19:5e:ac:db:37:e2:6a:8d:6d:53:4c:df:d2:9f:48:52: 7b:4b:16:33:74:a9:90:4e:a1:7c:d6:d1:9c:a2:49:bc:c9:ed: f3:33:87:21:9f:68:35:a8:28:5f:3a:0b:a3:c8:7f:7d:43:78: 96:2e:04:fe:9e:dc:23:71:6e:30:8d:67:ca:71:3e:ad:67:3b: 0c:50:90:b5:ab:57:4f:46:90:98:64:f5:81:96:fb:93:57:e3: f2:e1:e1:9e:a7:24:aa:9b:dc:90:4a:ab:17:90:e7:70:9f:42: db:e8:fd:53:4e:7c:75:1a:33:cc:34:d2:14:3f:ea:d7:1f:f2: 2f:ae:95:fa:b2:4a:d2:88:1f:6c:5e:a9:b2:ae:51:77:68:8b: 3e:2a:ac:a0:67:10:b8:31:7b:a4:46:9c:78:43:03:62:ac:1d: c8:f9:c0:53:85:f3:0e:e7:3a:0a:78:8d:28:71:97:ae:50:d7: 5c:ab:4c:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHzFt/SbXauMo6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIwOVoXDTI2MDcyMzIzMjIwOVowLzEtMCsGA1UEAxMk NjRhOGE5ZjYtZDVmMy00ZGNjLTgwYjAtYTcyMjg1NTdlMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidkU3kZqYgx8wDANu+M9ygSCQTvFBTGegWAQ KnVLA/6FGQMmJHqNaEddXnQyxPv8dvYZmmzSNaXKxO0qm85oXkRjQMNM3VbRe+mf nE2JS33AmaAknBbOGY56ZQGYjgLNA+0bIdqD8kS6VHTk2r51K1hcuE6y2ZeMSbMI Jrb3mgYOGxn1Xc+gAAasQWny5FflhIt+iCKy30F1C8+YObuxQQJ9FiFdnBwZd0H7 QxuOKiEVy7rHtV83WTk+oAKWKhbD5QbULKYaweNPGdA3JxAJ2HYbpSgoUtSCN1pv bfGqX+sXCcz4ULl+89hv4dPuSI85svNxS4KHcgLrGBZH1ASu+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtNBsn20sJlH53hV0HKlPqwV1fUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNzQ5N2Y0ZGQtYjU5Zi0z Y2JlLThhODktOTI1ZmYxZjdmZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJawj/iTofcv5c5T9JXYhbao/U8QMW1aGe3KRffTT7zTzatMNMI8FCB tbuMgCsfxjHBsk+HvcBQ6KGr7OXXK69t8Pz8NAs2xMjsGV6s2zfiao1tU0zf0p9I UntLFjN0qZBOoXzW0ZyiSbzJ7fMzhyGfaDWoKF86C6PIf31DeJYuBP6e3CNxbjCN Z8pxPq1nOwxQkLWrV09GkJhk9YGW+5NX4/Lh4Z6nJKqb3JBKqxeQ53CfQtvo/VNO fHUaM8w00hQ/6tcf8i+ulfqyStKIH2xeqbKuUXdoiz4qrKBnELgxe6RGnHhDA2Ks Hcj5wFOF8w7nOgp4jShxl65Q11yrTDc= -----END CERTIFICATE-----Generated at Wed May 13 09:09:25 2026 by rpki-client