$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7dfab49a-2ec9-3469-ba84-62cf12537d90.roa File: 7dfab49a-2ec9-3469-ba84-62cf12537d90.roa (raw, json) Hash identifier: +F+xGxgPW/Bd6VRxM5R8ov/udZe2eE467ruq3njKwzw= Subject key identifier: 4B:E8:39:F0:A2:88:46:73:7A:E9:80:88:D3:2E:9F:47:B3:4E:FD:D2 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D96AE116FB277CE94A5F40EE0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7dfab49a-2ec9-3469-ba84-62cf12537d90.roa Signing time: Wed 22 Apr 2026 07:23:33 +0000 ROA not before: Wed 22 Apr 2026 07:23:33 +0000 ROA not after: Tue 21 Jul 2026 07:23:33 +0000 asID: 397630 IP address blocks: 64.16.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:96:ae:11:6f:b2:77:ce:94:a5:f4:0e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 22 07:23:33 2026 GMT Not After : Jul 21 07:23:33 2026 GMT Subject: CN=24a033a0-e386-48d0-8401-fed0e0b41dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:6c:5e:8e:e0:5f:b8:5c:36:a9:8d:52:84: ce:b1:2f:60:3a:5f:91:68:67:aa:42:0b:4f:95:9c: d4:c2:f0:ba:73:6f:45:4a:e8:13:c4:07:d5:eb:b6: b2:3b:79:fc:50:4c:20:c2:27:84:26:bf:af:9c:3f: 3b:86:41:e2:8f:01:c9:d6:5f:f5:d5:5e:76:3a:7b: bd:30:50:88:85:d4:fd:c9:41:41:20:0f:33:1e:0b: 2e:c1:cb:20:90:72:bc:61:c8:b6:4b:5d:ad:27:45: 30:22:70:a8:51:a6:b2:ff:84:a5:fe:e5:52:9f:82: 62:86:10:fe:38:22:8f:29:35:2f:69:f7:dd:c0:0b: bf:00:cd:17:0e:85:a1:c6:5c:31:00:f7:b5:7c:e4: fc:69:ff:5f:d5:8e:30:6c:3d:39:ab:6c:1d:3e:79: c3:5c:7c:3b:ed:e0:2a:8f:68:4a:82:e3:47:33:3b: cc:f1:15:43:1d:9a:54:a8:9c:7b:c0:51:91:3a:ae: ac:40:64:dc:4d:4a:11:7c:49:ed:f8:f1:be:e7:1a: 9e:7d:2d:9e:ac:59:3d:30:59:97:00:8c:4e:27:c8: 5c:1a:98:28:76:c5:66:66:dc:f5:a2:a8:56:4c:8d: 55:8e:c3:47:9c:e8:b3:e8:db:be:05:eb:eb:b9:f6: 57:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E8:39:F0:A2:88:46:73:7A:E9:80:88:D3:2E:9F:47:B3:4E:FD:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7dfab49a-2ec9-3469-ba84-62cf12537d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:dc:78:36:48:69:4f:6a:d5:e3:a5:c6:bf:33:10:ff:06:75: 12:9b:c3:7c:16:9a:31:b4:02:39:16:ba:7e:46:45:54:e9:5c: da:9c:7c:c3:66:25:67:3b:1a:31:9e:ed:1a:f2:1c:50:a9:08: ca:f1:ac:9c:0b:57:2f:5a:24:58:c0:aa:58:5d:87:e1:16:dd: e6:ff:0d:23:bf:f6:8b:08:92:2b:22:ed:6f:87:dc:dd:13:e7: 7c:d5:d2:c2:94:f8:e3:39:b6:d6:48:c0:06:d0:cd:ce:4e:5b: 7c:c4:12:61:c2:83:91:80:9f:c3:ee:41:79:77:60:3a:6a:d6: a4:f1:69:04:c0:07:8b:5b:9d:b6:1d:64:df:ab:a8:18:52:cc: a5:22:ec:c2:c2:f1:d8:5a:93:47:c5:c9:0b:0c:15:3b:c2:60: e6:97:d1:13:75:10:4b:71:1d:97:5b:ac:e7:da:43:d9:98:8b: 69:64:db:40:ce:24:ef:32:bc:62:c7:3c:be:83:64:96:dc:3f: b5:e4:b7:bb:33:e1:d2:e1:10:9f:65:fb:d3:76:a9:d5:08:e1: 46:3c:e4:5a:d1:f3:86:f0:71:97:a1:17:5b:60:dd:7d:1e:23: 79:31:0f:86:66:88:80:3a:93:58:35:10:30:d3:ad:aa:04:5c: 62:02:86:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2WrhFvsnfOlKX0DuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyMjA3MjMzM1oXDTI2MDcyMTA3MjMzM1owLzEtMCsGA1UEAxMk MjRhMDMzYTAtZTM4Ni00OGQwLTg0MDEtZmVkMGUwYjQxZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz1sXo7gX7hcNqmNUoTOsS9gOl+RaGeqQgtP lZzUwvC6c29FSugTxAfV67ayO3n8UEwgwieEJr+vnD87hkHijwHJ1l/11V52Onu9 MFCIhdT9yUFBIA8zHgsuwcsgkHK8Yci2S12tJ0UwInCoUaay/4Sl/uVSn4JihhD+ OCKPKTUvaffdwAu/AM0XDoWhxlwxAPe1fOT8af9f1Y4wbD05q2wdPnnDXHw77eAq j2hKguNHMzvM8RVDHZpUqJx7wFGROq6sQGTcTUoRfEnt+PG+5xqefS2erFk9MFmX AIxOJ8hcGpgodsVmZtz1oqhWTI1VjsNHnOiz6Nu+BevrufZXdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvoOfCiiEZzeumAiNMun0ezTv3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvN2RmYWI0OWEtMmVjOS0z NDY5LWJhODQtNjJjZjEyNTM3ZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3ceDZIaU9q1eOlxr8zEP8GdRKbw3wWmjG0AjkWun5GRVTpXNqcfMNm JWc7GjGe7RryHFCpCMrxrJwLVy9aJFjAqlhdh+EW3eb/DSO/9osIkisi7W+H3N0T 53zV0sKU+OM5ttZIwAbQzc5OW3zEEmHCg5GAn8PuQXl3YDpq1qTxaQTAB4tbnbYd ZN+rqBhSzKUi7MLC8dhak0fFyQsMFTvCYOaX0RN1EEtxHZdbrOfaQ9mYi2lk20DO JO8yvGLHPL6DZJbcP7Xkt7sz4dLhEJ9l+9N2qdUI4UY85FrR84bwcZehF1tg3X0e I3kxD4ZmiIA6k1g1EDDTraoEXGIChig= -----END CERTIFICATE-----Generated at Wed May 13 11:59:19 2026 by rpki-client