$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7ba9a0a7-4b74-308a-8e29-504851b27706.roa File: 7ba9a0a7-4b74-308a-8e29-504851b27706.roa (raw, json) Hash identifier: 7AhluZ3Si3BOlOTmIcDBAnR5iO6CN/Z/CANntk7JGSA= Subject key identifier: FE:9A:62:76:FC:27:EF:27:9F:51:2E:76:CB:A6:49:DF:32:EC:E0:6F Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1E9AC85B09F111A609C280 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7ba9a0a7-4b74-308a-8e29-504851b27706.roa Signing time: Fri 24 Apr 2026 23:20:58 +0000 ROA not before: Fri 24 Apr 2026 23:20:58 +0000 ROA not after: Thu 23 Jul 2026 23:20:58 +0000 asID: 7029 IP address blocks: 64.16.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:9a:c8:5b:09:f1:11:a6:09:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:20:58 2026 GMT Not After : Jul 23 23:20:58 2026 GMT Subject: CN=fb8b7c3c-eac6-4706-9105-502be4409c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:33:c7:6b:8f:76:24:d4:15:4b:43:71:92:07: dd:46:2f:ab:50:15:c4:25:0c:0e:99:58:b8:45:f0: 54:e5:33:0e:90:6f:24:48:d3:af:16:52:98:98:df: 48:d5:98:28:a3:ce:01:22:9a:86:a6:37:17:b4:e0: 86:b7:ce:4e:b3:44:b5:22:3c:3f:e8:92:8d:79:1e: 17:ef:fa:32:2c:e2:d8:1d:a7:e8:97:2c:f1:2e:1a: a6:80:4b:45:c7:45:cf:f7:4d:d6:b9:96:15:ea:fb: d9:80:5e:12:df:ea:14:0b:79:92:d0:8f:36:41:66: 04:14:07:34:29:a8:88:c3:5f:2b:d2:61:a5:ed:28: 2b:ce:4f:91:f7:f9:ad:6a:c3:a3:8e:18:b5:78:9f: d4:fe:ea:9f:34:b2:4e:fc:e2:6f:ab:89:c1:a9:e0: 73:f7:b2:5c:55:dd:93:62:1d:36:da:58:36:12:a5: f2:c3:34:4c:a4:aa:68:9a:e2:e0:f7:14:e6:10:47: 08:5b:b0:af:45:db:af:68:c6:44:bf:51:af:02:42: 48:33:49:23:a9:5c:1f:b5:2a:7d:60:24:b6:b6:a4: db:c9:9d:05:75:5b:c1:ad:ab:5b:61:02:f1:32:81: a4:dd:60:6e:67:6c:fb:d3:ef:be:ce:bf:32:33:85: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9A:62:76:FC:27:EF:27:9F:51:2E:76:CB:A6:49:DF:32:EC:E0:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7ba9a0a7-4b74-308a-8e29-504851b27706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:5a:ab:b3:34:4e:23:61:89:2f:4e:7b:07:14:47:6d:ca:a1: 30:31:f8:31:8d:e6:93:f9:76:e2:18:ff:2f:a2:7c:7e:db:de: 63:11:5e:ae:76:48:f9:35:e2:7d:7e:39:f5:3a:1b:0b:eb:f1: 27:f1:3c:50:7c:a4:02:9e:f9:29:bd:d5:3d:c9:17:b2:eb:49: 29:3c:12:0f:75:99:ce:31:f0:05:48:12:dc:51:8e:e2:bb:4e: 49:1e:9e:e0:06:04:f3:c3:5b:a0:52:cd:a1:a1:64:1e:b6:19: d0:7a:d5:53:1b:04:31:6a:b7:23:90:29:4f:8e:dc:19:91:8c: 80:e4:65:78:82:3e:99:95:bb:fe:5d:15:ed:e3:6c:d3:05:b5: 76:fc:99:3e:76:0f:b9:dd:0f:66:20:0d:cd:73:dc:13:85:4b: 4b:ab:e9:b8:5e:2a:c1:e4:56:c7:d3:0b:81:1e:b2:45:98:73: cc:22:07:67:cb:eb:97:cf:aa:99:fd:e2:64:14:de:56:2c:c1: f8:3d:86:be:31:18:a0:37:2c:cf:4f:8f:6e:de:d0:fa:12:8c: 40:b5:00:e6:38:e4:8a:cf:f9:3b:62:3d:20:3f:a5:7b:e3:72: 60:99:89:4c:b1:0b:23:06:54:d1:15:bc:ba:81:32:d4:d6:5d: 17:7c:ea:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHprIWwnxEaYJwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjA1OFoXDTI2MDcyMzIzMjA1OFowLzEtMCsGA1UEAxMk ZmI4YjdjM2MtZWFjNi00NzA2LTkxMDUtNTAyYmU0NDA5YzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzPHa492JNQVS0NxkgfdRi+rUBXEJQwOmVi4 RfBU5TMOkG8kSNOvFlKYmN9I1Zgoo84BIpqGpjcXtOCGt85Os0S1Ijw/6JKNeR4X 7/oyLOLYHafolyzxLhqmgEtFx0XP903WuZYV6vvZgF4S3+oUC3mS0I82QWYEFAc0 KaiIw18r0mGl7Sgrzk+R9/mtasOjjhi1eJ/U/uqfNLJO/OJvq4nBqeBz97JcVd2T Yh022lg2EqXywzRMpKpomuLg9xTmEEcIW7CvRduvaMZEv1GvAkJIM0kjqVwftSp9 YCS2tqTbyZ0FdVvBratbYQLxMoGk3WBuZ2z70+++zr8yM4WJHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6aYnb8J+8nn1EudsumSd8y7OBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvN2JhOWEwYTctNGI3NC0z MDhhLThlMjktNTA0ODUxYjI3NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNaq7M0TiNhiS9OewcUR23KoTAx+DGN5pP5duIY/y+ifH7b3mMRXq52 SPk14n1+OfU6Gwvr8SfxPFB8pAKe+Sm91T3JF7LrSSk8Eg91mc4x8AVIEtxRjuK7 TkkenuAGBPPDW6BSzaGhZB62GdB61VMbBDFqtyOQKU+O3BmRjIDkZXiCPpmVu/5d Fe3jbNMFtXb8mT52D7ndD2YgDc1z3BOFS0ur6bheKsHkVsfTC4EeskWYc8wiB2fL 65fPqpn94mQU3lYswfg9hr4xGKA3LM9Pj27e0PoSjEC1AOY45IrP+TtiPSA/pXvj cmCZiUyxCyMGVNEVvLqBMtTWXRd86lc= -----END CERTIFICATE-----Generated at Wed May 13 14:16:56 2026 by rpki-client