$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8b2b7128-e0ac-3f07-b7ec-2ec5ee67e780.roa File: 8b2b7128-e0ac-3f07-b7ec-2ec5ee67e780.roa (raw, json) Hash identifier: PGJjTdjQgAD+Jq5/GylQ3HclaNBynRLr5cQPimLjHDo= Subject key identifier: 8C:09:24:05:FC:10:F1:4F:56:1A:96:46:08:5A:20:B9:98:B0:F3:27 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1FF457A495C1E2DD9F5E60 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8b2b7128-e0ac-3f07-b7ec-2ec5ee67e780.roa Signing time: Fri 24 Apr 2026 23:23:41 +0000 ROA not before: Fri 24 Apr 2026 23:23:41 +0000 ROA not after: Thu 23 Jul 2026 23:23:41 +0000 asID: 397630 IP address blocks: 64.16.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:f4:57:a4:95:c1:e2:dd:9f:5e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:41 2026 GMT Not After : Jul 23 23:23:41 2026 GMT Subject: CN=dcff234f-9f3b-4919-b1e0-7c0e23119187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6e:70:16:8d:52:ca:71:1d:91:0a:c3:ff:3a: 78:b9:2e:1f:3c:1c:4c:4b:51:a7:85:7e:74:22:9f: 9b:d7:f4:95:a6:67:88:a8:a7:9b:47:ad:4a:45:5a: a0:51:c8:3a:fa:92:69:c8:0a:5c:f5:96:e4:07:31: d7:e3:1c:be:63:97:33:29:af:8f:f2:e0:8a:36:4a: 7a:9b:97:5f:2e:72:7c:0c:78:31:18:39:8a:fd:58: 13:46:36:84:7f:47:8d:e7:ff:2f:47:79:0b:3d:e4: d5:49:aa:b0:b7:5f:1c:ef:ac:4e:0a:42:d7:4c:7a: 33:22:09:55:0b:f0:79:47:c0:39:c1:b1:21:0c:d5: a3:93:0f:7d:f7:a0:e6:8d:a6:ab:17:85:91:8a:ae: 67:ca:b0:a2:2d:3f:83:d9:61:1d:7b:3e:2c:c4:0f: e7:f2:99:b0:f9:1e:cb:d3:8c:00:7c:a6:8b:76:66: 11:90:55:d9:6d:bb:c3:98:53:3e:68:54:27:74:0a: c5:aa:05:dc:ac:24:7f:68:bf:50:fd:50:26:92:31: 12:10:78:2f:77:67:75:a3:b2:4e:a9:90:33:5d:e2: fb:95:b6:7e:0e:b5:d5:a6:f9:fe:c3:da:a9:86:78: cd:65:61:d4:d8:c4:b7:6f:2b:c6:b3:7b:0c:02:f0: 39:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:09:24:05:FC:10:F1:4F:56:1A:96:46:08:5A:20:B9:98:B0:F3:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8b2b7128-e0ac-3f07-b7ec-2ec5ee67e780.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:cf:45:dd:d1:28:5c:7b:b7:b1:9f:b1:e4:c2:ea:ec:2a:6f: c2:14:ce:d3:1a:01:df:3b:9d:11:ac:04:bb:a0:3d:e1:40:43: ab:d0:11:f8:56:78:29:ca:cb:03:6d:4b:76:aa:e6:93:03:32: e2:d9:e6:b9:a5:66:80:32:94:0c:ce:4e:44:89:77:84:46:6b: c7:9f:37:a7:d5:04:2d:44:f0:69:56:a0:f0:ad:b5:70:58:cf: 0a:f5:62:c7:87:50:f2:3e:00:e6:bf:b4:3c:c4:ba:e0:95:34: 7e:21:56:68:90:d3:60:a4:cd:73:44:6b:53:f5:c0:b1:11:c0: 77:0a:14:6b:3c:d4:f5:06:a0:3a:cd:c9:d7:74:ee:93:57:40: 45:d7:3a:ad:1e:de:81:44:fa:b6:04:2a:94:e0:e3:99:86:e6: 45:ee:f9:2f:2d:de:64:ae:06:9c:63:f8:c7:97:d5:47:80:00: fb:0d:ec:83:49:7d:63:0e:25:62:60:2c:af:22:1b:94:f5:68: 53:f2:19:35:9c:d1:27:ed:4e:87:df:32:ed:fc:e9:d9:34:b6: 9e:64:af:41:fa:37:1c:76:7c:e6:9f:9b:dd:82:b1:95:90:ea: b4:e7:30:e0:61:db:7d:0a:42:56:4e:18:a4:9e:ae:46:9b:cd: 0c:20:03:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH/RXpJXB4t2fXmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjM0MVoXDTI2MDcyMzIzMjM0MVowLzEtMCsGA1UEAxMk ZGNmZjIzNGYtOWYzYi00OTE5LWIxZTAtN2MwZTIzMTE5MTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA225wFo1SynEdkQrD/zp4uS4fPBxMS1GnhX50 Ip+b1/SVpmeIqKebR61KRVqgUcg6+pJpyApc9ZbkBzHX4xy+Y5czKa+P8uCKNkp6 m5dfLnJ8DHgxGDmK/VgTRjaEf0eN5/8vR3kLPeTVSaqwt18c76xOCkLXTHozIglV C/B5R8A5wbEhDNWjkw9996DmjaarF4WRiq5nyrCiLT+D2WEdez4sxA/n8pmw+R7L 04wAfKaLdmYRkFXZbbvDmFM+aFQndArFqgXcrCR/aL9Q/VAmkjESEHgvd2d1o7JO qZAzXeL7lbZ+DrXVpvn+w9qphnjNZWHU2MS3byvGs3sMAvA5EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwJJAX8EPFPVhqWRghaILmYsPMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOGIyYjcxMjgtZTBhYy0z ZjA3LWI3ZWMtMmVjNWVlNjdlNzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjPRd3RKFx7t7GfseTC6uwqb8IUztMaAd87nRGsBLugPeFAQ6vQEfhW eCnKywNtS3aq5pMDMuLZ5rmlZoAylAzOTkSJd4RGa8efN6fVBC1E8GlWoPCttXBY zwr1YseHUPI+AOa/tDzEuuCVNH4hVmiQ02CkzXNEa1P1wLERwHcKFGs81PUGoDrN ydd07pNXQEXXOq0e3oFE+rYEKpTg45mG5kXu+S8t3mSuBpxj+MeX1UeAAPsN7INJ fWMOJWJgLK8iG5T1aFPyGTWc0SftToffMu386dk0tp5kr0H6Nxx2fOafm92CsZWQ 6rTnMOBh230KQlZOGKSerkabzQwgAw8= -----END CERTIFICATE-----Generated at Wed May 13 05:43:58 2026 by rpki-client