$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8402f520-c85b-359c-a454-1cedfef7c566.roa File: 8402f520-c85b-359c-a454-1cedfef7c566.roa (raw, json) Hash identifier: xow2WMiulnL+mqlAYDX6voNszRMwDtAHM6ZFKbUO4Gw= Subject key identifier: 5B:8D:BF:EA:A1:39:6F:AB:65:6F:86:D9:2A:C6:F7:2E:B8:AB:F7:82 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D96AC8D10345BE99A0834D400 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8402f520-c85b-359c-a454-1cedfef7c566.roa Signing time: Wed 22 Apr 2026 07:20:30 +0000 ROA not before: Wed 22 Apr 2026 07:20:30 +0000 ROA not after: Tue 21 Jul 2026 07:20:30 +0000 asID: 20001 IP address blocks: 64.16.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:96:ac:8d:10:34:5b:e9:9a:08:34:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 22 07:20:30 2026 GMT Not After : Jul 21 07:20:30 2026 GMT Subject: CN=f14c157c-39e4-40a1-b28a-eb9b6d92d10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:19:47:98:a2:95:8c:f6:93:76:f0:29:ae:a3: f7:ad:ad:45:63:4f:f2:33:af:ee:04:58:2d:4a:b3: ae:a6:50:48:b0:9e:5e:ce:b6:1d:43:9c:e7:b1:52: dc:aa:52:cc:8b:e6:98:15:4d:3e:46:4d:5b:1d:1b: 6c:85:da:2f:78:19:50:54:d3:9d:16:9a:f5:69:d1: 1d:ec:ea:3f:f8:07:d8:80:57:d0:fe:8e:8d:e7:be: 47:43:61:91:43:1b:4c:57:fd:68:90:e4:e5:29:cd: 80:7b:fe:23:71:de:62:78:c3:74:35:5d:99:1c:89: 52:64:f4:47:61:6c:cd:c7:35:6e:35:e4:39:d4:33: ac:f4:d3:44:7c:21:ab:70:9b:33:13:e8:48:0e:31: 41:93:82:58:47:18:58:9a:9d:92:16:19:0c:9a:19: 50:6c:92:e6:3a:34:34:a0:25:a9:e3:80:5a:73:c6: 9c:b5:e2:3d:23:11:fe:6f:a8:45:e7:97:15:29:89: 8b:ad:c9:ff:cd:74:65:e9:f4:d0:c7:c9:d8:28:e7: e5:4c:81:38:6c:83:c7:68:92:18:c1:a5:46:ae:2d: 7f:bd:34:42:99:d9:44:2a:79:3d:27:9f:38:d0:0b: 56:b5:ee:0f:2c:5d:00:c3:cb:39:07:a1:90:53:8c: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8D:BF:EA:A1:39:6F:AB:65:6F:86:D9:2A:C6:F7:2E:B8:AB:F7:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8402f520-c85b-359c-a454-1cedfef7c566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:cf:7f:4c:62:ce:d8:60:de:e2:79:a0:ea:bd:15:97:60:15: 30:24:74:5a:cf:6a:5a:cc:52:7c:75:8f:d5:04:73:ca:c5:08: b5:2c:78:ce:b0:67:44:fe:09:e0:20:be:7b:72:dd:de:8d:f4: 0b:a5:66:05:92:37:39:4c:a4:48:cc:da:36:f8:aa:39:b5:1e: 5c:a1:e9:44:8f:2f:4c:53:f6:92:1a:ae:de:6b:f7:e0:71:b0: e4:b4:50:cc:46:aa:5f:10:6f:f4:24:3b:03:61:45:9c:96:3a: 36:75:c5:b9:8e:68:3c:8f:cd:c8:4f:63:a7:d3:1d:75:b4:9f: b2:f8:5f:bc:3f:a0:f1:14:11:7c:39:a0:da:02:63:80:0f:11: 0b:e1:85:76:ca:b3:a9:83:04:dd:53:cd:a5:23:5e:cb:84:be: 94:00:4a:8c:58:51:6e:63:d4:53:bd:d6:1d:e9:96:0c:64:5b: 29:63:b1:83:00:ba:32:48:77:f3:20:f7:e9:74:2e:54:2c:57: 3e:64:48:fa:a9:d1:44:93:ba:f9:8c:24:92:fc:84:a1:20:9e: 02:f7:74:ba:14:ec:d0:57:44:2c:74:1f:ee:9d:89:88:14:69: 21:d4:36:9d:4f:8b:f8:5c:63:1e:c6:bb:82:a5:38:1c:bd:71: 10:49:38:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2WrI0QNFvpmgg01AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyMjA3MjAzMFoXDTI2MDcyMTA3MjAzMFowLzEtMCsGA1UEAxMk ZjE0YzE1N2MtMzllNC00MGExLWIyOGEtZWI5YjZkOTJkMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRlHmKKVjPaTdvAprqP3ra1FY0/yM6/uBFgt SrOuplBIsJ5ezrYdQ5znsVLcqlLMi+aYFU0+Rk1bHRtshdoveBlQVNOdFpr1adEd 7Oo/+AfYgFfQ/o6N575HQ2GRQxtMV/1okOTlKc2Ae/4jcd5ieMN0NV2ZHIlSZPRH YWzNxzVuNeQ51DOs9NNEfCGrcJszE+hIDjFBk4JYRxhYmp2SFhkMmhlQbJLmOjQ0 oCWp44Bac8acteI9IxH+b6hF55cVKYmLrcn/zXRl6fTQx8nYKOflTIE4bIPHaJIY waVGri1/vTRCmdlEKnk9J5840AtWte4PLF0Aw8s5B6GQU4yiLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuNv+qhOW+rZW+G2SrG9y64q/eCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvODQwMmY1MjAtYzg1Yi0z NTljLWE0NTQtMWNlZGZlZjdjNTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7Pf0xizthg3uJ5oOq9FZdgFTAkdFrPalrMUnx1j9UEc8rFCLUseM6w Z0T+CeAgvnty3d6N9AulZgWSNzlMpEjM2jb4qjm1Hlyh6USPL0xT9pIart5r9+Bx sOS0UMxGql8Qb/QkOwNhRZyWOjZ1xbmOaDyPzchPY6fTHXW0n7L4X7w/oPEUEXw5 oNoCY4APEQvhhXbKs6mDBN1TzaUjXsuEvpQASoxYUW5j1FO91h3plgxkWyljsYMA ujJId/Mg9+l0LlQsVz5kSPqp0USTuvmMJJL8hKEgngL3dLoU7NBXRCx0H+6diYgU aSHUNp1Pi/hcYx7Gu4KlOBy9cRBJOCA= -----END CERTIFICATE-----Generated at Wed May 13 13:08:42 2026 by rpki-client