$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8253844d-08a2-33aa-9d5c-ba72879a0121.roa File: 8253844d-08a2-33aa-9d5c-ba72879a0121.roa (raw, json) Hash identifier: F8hj2/8JvNVhAh8Ufkrcd1176w0n8wJ2HxMgI9buMIU= Subject key identifier: 32:FB:45:DC:C0:8C:69:F0:8A:76:FE:F7:AD:F6:12:98:9D:D9:42:88 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F8ACB2F4434389E902E80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8253844d-08a2-33aa-9d5c-ba72879a0121.roa Signing time: Fri 24 Apr 2026 23:22:51 +0000 ROA not before: Fri 24 Apr 2026 23:22:51 +0000 ROA not after: Thu 23 Jul 2026 23:22:51 +0000 asID: 20001 IP address blocks: 64.16.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:8a:cb:2f:44:34:38:9e:90:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:51 2026 GMT Not After : Jul 23 23:22:51 2026 GMT Subject: CN=976f2fdf-989f-4560-8379-3cc765b17398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:c4:77:32:3c:66:b3:17:d1:77:b9:02:98: aa:2b:8f:89:20:8b:ec:e7:59:3e:18:57:f8:7a:d4: ac:70:01:eb:ba:4c:df:76:ad:59:06:03:56:a1:c8: 30:d6:76:77:2b:9c:51:83:8f:2f:12:55:55:cd:e3: 84:f9:55:bd:73:49:6a:76:c5:66:56:ac:10:28:4e: 32:98:98:f9:27:cd:04:4e:d7:7a:df:84:2c:7d:d2: 91:42:2d:1f:67:2f:b6:b0:79:a5:64:42:0b:c1:36: 1c:ef:2e:bc:5e:a5:0d:2b:c4:c1:15:75:79:3a:01: 7c:2f:3b:21:4d:3f:30:72:fa:21:34:a9:76:2f:7f: e4:c4:85:2c:c9:8f:33:00:0e:01:f2:66:f0:42:6d: b2:e8:02:7b:c0:87:0d:a0:e3:8c:c2:8d:28:11:4a: 92:c7:62:c1:41:b3:e3:5f:bc:6d:3f:c0:71:9b:4c: b2:90:61:4b:58:24:45:4f:9d:2a:85:ff:2b:4b:ac: 99:23:ef:cf:5f:58:80:bc:93:d5:cb:66:20:b1:9d: 36:a0:a8:db:44:23:00:07:a7:0b:8e:69:a7:7d:1f: 25:db:eb:de:b8:fd:12:cf:d5:d3:b9:9c:7d:62:a6: dd:fe:39:72:23:f1:e3:37:8a:54:15:fe:5c:64:31: c6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FB:45:DC:C0:8C:69:F0:8A:76:FE:F7:AD:F6:12:98:9D:D9:42:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8253844d-08a2-33aa-9d5c-ba72879a0121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:87:8c:ad:55:68:28:e3:9b:8f:6c:08:f1:8e:5a:20:28:16: 59:96:52:1e:fd:ad:43:bc:3f:db:6e:e3:08:2b:50:9b:aa:c8: 18:e0:73:c0:1a:23:f7:5a:56:1e:d9:25:50:43:59:03:f8:ad: 57:c6:37:ed:4f:96:12:21:c5:b2:b1:be:e7:6e:3f:23:71:08: 6a:a0:d5:aa:a3:1b:42:d5:70:51:33:51:ea:ea:ac:e0:9d:cb: 5e:4f:26:04:84:4a:43:a2:4a:6f:43:38:91:cf:2d:d0:45:0c: 51:fe:55:75:56:86:97:8a:61:96:b7:a4:43:16:9e:0c:c7:11: a6:69:5c:0e:d2:b5:d0:24:81:ee:6e:e7:f4:c1:85:c1:9e:c1: f1:64:75:8b:45:ec:f9:a2:3a:f5:b2:99:90:c4:d3:5f:d1:5d: dc:fe:ca:bd:f1:ce:70:9e:fe:2a:9e:97:a2:9a:07:38:d4:20: 03:12:72:18:ab:02:51:c5:a5:b7:ef:9f:b2:7a:20:e4:89:1e: b8:20:0b:da:1b:49:09:4e:35:cb:1c:b7:7e:90:6d:b7:63:3e: 55:1c:d7:14:ce:7a:cc:2e:44:10:f0:d6:bd:5f:75:52:25:21: 96:5f:c9:d3:d3:3a:ca:c0:41:72:b8:b4:5a:16:1c:42:59:2e: 94:3e:27:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH4rLL0Q0OJ6QLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjI1MVoXDTI2MDcyMzIzMjI1MVowLzEtMCsGA1UEAxMk OTc2ZjJmZGYtOTg5Zi00NTYwLTgzNzktM2NjNzY1YjE3Mzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJvEdzI8ZrMX0Xe5ApiqK4+JIIvs51k+GFf4 etSscAHrukzfdq1ZBgNWocgw1nZ3K5xRg48vElVVzeOE+VW9c0lqdsVmVqwQKE4y mJj5J80ETtd634QsfdKRQi0fZy+2sHmlZEILwTYc7y68XqUNK8TBFXV5OgF8Lzsh TT8wcvohNKl2L3/kxIUsyY8zAA4B8mbwQm2y6AJ7wIcNoOOMwo0oEUqSx2LBQbPj X7xtP8Bxm0yykGFLWCRFT50qhf8rS6yZI+/PX1iAvJPVy2YgsZ02oKjbRCMAB6cL jmmnfR8l2+veuP0Sz9XTuZx9Yqbd/jlyI/HjN4pUFf5cZDHGzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL7RdzAjGnwinb+9632Epid2UKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvODI1Mzg0NGQtMDhhMi0z M2FhLTlkNWMtYmE3Mjg3OWEwMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGHjK1VaCjjm49sCPGOWiAoFlmWUh79rUO8P9tu4wgrUJuqyBjgc8Aa I/daVh7ZJVBDWQP4rVfGN+1PlhIhxbKxvuduPyNxCGqg1aqjG0LVcFEzUerqrOCd y15PJgSESkOiSm9DOJHPLdBFDFH+VXVWhpeKYZa3pEMWngzHEaZpXA7StdAkge5u 5/TBhcGewfFkdYtF7PmiOvWymZDE01/RXdz+yr3xznCe/iqel6KaBzjUIAMSchir AlHFpbfvn7J6IOSJHrggC9obSQlONcsct36QbbdjPlUc1xTOeswuRBDw1r1fdVIl IZZfydPTOsrAQXK4tFoWHEJZLpQ+J6g= -----END CERTIFICATE-----Generated at Wed May 13 12:51:56 2026 by rpki-client