$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7f67d81c-fc64-3238-8240-e56e4b61c5b8.roa File: 7f67d81c-fc64-3238-8240-e56e4b61c5b8.roa (raw, json) Hash identifier: DBd6CD3wEcZtfdMPrXa+ZkYGjZ1/50sic9YfuM1YwSU= Subject key identifier: 39:35:D5:32:7C:1D:59:99:7A:EF:3A:B5:83:22:EC:75:D3:7E:EF:B3 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F473B6F1962A231D09040 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7f67d81c-fc64-3238-8240-e56e4b61c5b8.roa Signing time: Fri 24 Apr 2026 23:22:19 +0000 ROA not before: Fri 24 Apr 2026 23:22:19 +0000 ROA not after: Thu 23 Jul 2026 23:22:19 +0000 asID: 20001 IP address blocks: 64.16.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:47:3b:6f:19:62:a2:31:d0:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:19 2026 GMT Not After : Jul 23 23:22:19 2026 GMT Subject: CN=bb82a332-4f2c-477e-8b99-2c46f44784f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:79:10:85:54:fb:8e:3e:51:d6:88:cb:66:d3: 31:18:49:7a:59:6d:f5:56:73:55:d7:21:58:bf:ee: a1:8b:1c:6c:ef:a0:7e:9b:d6:c3:0d:32:cf:76:cd: 2e:53:96:6c:50:68:62:92:94:03:3a:fd:ec:3f:cc: 81:6f:c9:0e:0c:d5:77:38:91:36:b8:02:d2:f0:41: bf:2b:18:07:99:6a:4c:cd:e5:ad:29:13:56:05:10: ba:57:6b:0b:cc:30:ce:ae:58:32:49:fd:93:3a:29: a1:8e:3e:01:4e:39:9e:ef:0c:c1:d9:3f:a8:7f:3e: d7:6a:13:49:5b:b9:6e:a4:c0:6b:63:87:bd:e3:86: ec:dc:c0:72:46:de:6a:f0:e7:90:96:d9:61:25:0f: 2f:51:b7:46:0b:ef:d6:3a:9a:29:77:b7:7d:04:5f: 38:33:6a:ac:91:c9:1a:45:a3:4f:79:d3:69:a9:f8: f3:05:56:13:db:60:29:48:6e:42:fd:26:8a:cc:2f: 1b:12:57:cb:26:88:f8:1c:57:59:c3:7f:8e:83:fc: 31:e6:be:c3:0a:b6:7f:26:9b:8c:bf:58:1a:f1:40: 3d:2b:6f:a2:b3:d2:42:8d:80:7c:22:d2:de:67:35: 43:65:41:a0:55:8c:f3:a8:fd:23:e0:9c:23:08:c7: f2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:35:D5:32:7C:1D:59:99:7A:EF:3A:B5:83:22:EC:75:D3:7E:EF:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7f67d81c-fc64-3238-8240-e56e4b61c5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:fb:7c:1a:04:32:d8:6a:9f:b6:f1:63:95:8f:30:19:94:af: 4c:db:ab:2f:56:aa:60:59:77:b7:83:9c:ef:f6:05:31:e8:8f: 96:96:58:03:ec:1f:fb:1e:79:60:1a:8d:30:5f:9d:23:98:d2: ee:a6:9a:18:1b:66:0c:a8:e0:3a:99:53:e1:fe:ce:8b:72:21: cf:09:b9:91:5f:5c:f4:ff:39:f2:66:7c:91:79:b4:21:75:e0: 01:36:4d:40:22:3a:da:37:db:7a:0e:e7:c1:6e:e0:75:47:e8: 2b:ba:8d:aa:08:36:93:e8:a7:5d:84:bd:db:49:6c:d9:31:71: 68:a9:a3:c2:73:ca:32:d3:94:56:96:bf:28:42:6a:67:89:69: 57:01:3c:02:6c:c7:5c:d3:f3:f5:74:c1:48:e7:e6:ef:dc:c6: bf:f1:1b:fc:7e:3a:b7:ce:77:d0:7d:e2:8c:07:c4:c2:bf:fd: 58:36:6b:68:45:88:f3:2b:9e:2b:e7:eb:a4:59:18:36:d1:34: 3d:b9:3b:61:f5:e9:e0:b2:eb:e4:e5:29:52:ec:15:43:51:90: 7d:2d:39:39:29:67:32:fc:60:61:30:32:b4:9b:11:d4:45:fe: d0:07:cf:e2:07:5b:14:3a:3c:49:85:aa:d5:8d:e6:eb:74:33: d3:ab:da:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH0c7bxliojHQkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIxOVoXDTI2MDcyMzIzMjIxOVowLzEtMCsGA1UEAxMk YmI4MmEzMzItNGYyYy00NzdlLThiOTktMmM0NmY0NDc4NGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHkQhVT7jj5R1ojLZtMxGEl6WW31VnNV1yFY v+6hixxs76B+m9bDDTLPds0uU5ZsUGhikpQDOv3sP8yBb8kODNV3OJE2uALS8EG/ KxgHmWpMzeWtKRNWBRC6V2sLzDDOrlgySf2TOimhjj4BTjme7wzB2T+ofz7XahNJ W7lupMBrY4e944bs3MByRt5q8OeQltlhJQ8vUbdGC+/WOpopd7d9BF84M2qskcka RaNPedNpqfjzBVYT22ApSG5C/SaKzC8bElfLJoj4HFdZw3+Og/wx5r7DCrZ/JpuM v1ga8UA9K2+is9JCjYB8ItLeZzVDZUGgVYzzqP0j4JwjCMfyeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk11TJ8HVmZeu86tYMi7HXTfu+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvN2Y2N2Q4MWMtZmM2NC0z MjM4LTgyNDAtZTU2ZTRiNjFjNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz7fBoEMthqn7bxY5WPMBmUr0zbqy9WqmBZd7eDnO/2BTHoj5aWWAPs H/seeWAajTBfnSOY0u6mmhgbZgyo4DqZU+H+zotyIc8JuZFfXPT/OfJmfJF5tCF1 4AE2TUAiOto323oO58Fu4HVH6Cu6jaoINpPop12EvdtJbNkxcWipo8JzyjLTlFaW vyhCameJaVcBPAJsx1zT8/V0wUjn5u/cxr/xG/x+OrfOd9B94owHxMK//Vg2a2hF iPMrnivn66RZGDbRND25O2H16eCy6+TlKVLsFUNRkH0tOTkpZzL8YGEwMrSbEdRF /tAHz+IHWxQ6PEmFqtWN5ut0M9Or2gc= -----END CERTIFICATE-----Generated at Wed May 13 14:58:14 2026 by rpki-client