$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8c46588d-02ce-325a-9e1b-72923e267abc.roa File: 8c46588d-02ce-325a-9e1b-72923e267abc.roa (raw, json) Hash identifier: mmyAanRheTOKENSHxj+rxG8NUVop+MvILS6z6G4hBMk= Subject key identifier: 4E:89:77:18:85:78:6A:0C:83:7E:15:10:9B:FF:72:C4:32:27:A6:15 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1FE425AB06B6DCD95C9740 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8c46588d-02ce-325a-9e1b-72923e267abc.roa Signing time: Fri 24 Apr 2026 23:23:33 +0000 ROA not before: Fri 24 Apr 2026 23:23:33 +0000 ROA not after: Thu 23 Jul 2026 23:23:33 +0000 asID: 397630 IP address blocks: 64.16.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:e4:25:ab:06:b6:dc:d9:5c:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:33 2026 GMT Not After : Jul 23 23:23:33 2026 GMT Subject: CN=d3fa0f35-ffe5-4d71-98f1-75aba6a7218c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:22:aa:af:6f:72:b5:0d:13:9e:e2:fb:ca:ea: aa:6b:2c:fd:63:d2:47:5c:eb:c5:27:35:d3:19:14: 44:80:68:b1:f8:9e:90:0b:2f:c3:10:f7:af:15:a8: 20:6b:7a:d0:18:75:33:f7:62:2a:50:e9:82:98:ad: ed:58:4d:9b:65:0e:f8:64:7b:de:b6:ae:d5:1a:b9: 07:08:19:00:1a:73:2c:1d:13:ae:75:55:fd:46:3e: 1e:9b:19:be:21:bf:c4:61:e1:a3:99:e1:df:45:72: 85:16:18:76:14:ab:f2:ed:c9:8e:d0:7c:5b:16:73: 79:a6:dc:a8:f7:b9:40:7f:0a:03:62:50:99:2e:a8: de:29:92:58:0d:13:4c:c4:3c:79:b7:7d:08:77:04: 6e:66:7a:b8:9c:2c:8d:24:3a:70:e5:d5:51:f2:3a: 7d:67:da:1c:2a:ac:cc:c7:32:15:50:ac:df:09:8c: d3:c0:6b:d6:35:d3:b6:62:84:5b:e1:fb:09:89:23: 16:5c:72:0b:d1:79:3e:a4:95:e4:34:65:8f:07:ee: fa:04:e4:d9:79:5f:4b:7f:1c:2b:bc:45:67:5f:fe: 19:2d:30:a6:66:20:a1:36:32:28:3b:8c:70:bd:04: c2:06:1e:7f:98:46:54:e8:ab:c3:67:01:46:73:0e: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:89:77:18:85:78:6A:0C:83:7E:15:10:9B:FF:72:C4:32:27:A6:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/8c46588d-02ce-325a-9e1b-72923e267abc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:bd:cc:c6:da:0b:6d:f6:68:07:88:7d:76:1f:d9:7b:9c:c6: ef:18:80:34:31:44:ee:13:0e:33:f5:5e:95:52:b3:79:cb:27: 7d:3e:5b:59:f0:bc:14:5b:7d:3e:3f:91:dd:8d:ee:b3:3b:f3: d0:08:81:7e:75:3d:64:86:f8:e7:af:95:f3:9b:9e:c4:1c:ee: 85:2d:d6:ba:a6:46:b5:eb:c8:b2:60:d7:35:25:62:9e:1e:72: 01:70:f9:39:29:18:07:e4:13:5e:b7:c7:fd:3b:4e:7b:41:5b: 90:73:5f:96:86:79:a5:f8:24:18:df:ba:b3:ff:1e:f0:d3:b7: 35:4e:b0:93:df:2a:86:e5:c1:9b:92:e6:35:bb:81:2f:a7:2b: 8b:08:4c:f0:e9:3a:a6:93:47:eb:55:72:3e:11:89:25:0f:65: bd:07:e4:34:f2:29:2f:ec:0e:6d:fb:74:71:9b:f2:02:c8:b4: eb:f7:c6:ca:3f:74:be:d3:42:45:92:d2:a8:70:d1:87:9a:52: f9:46:67:a5:1c:23:fc:d9:92:dc:1c:12:53:d9:2c:00:9a:31: 01:74:02:14:6e:52:8c:e5:0d:b2:31:61:08:25:fd:3b:5d:2b: 38:54:2f:df:4e:79:f4:36:a7:f5:55:61:0c:81:ab:17:08:4a: 4a:8e:35:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH+Qlqwa23Nlcl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjMzM1oXDTI2MDcyMzIzMjMzM1owLzEtMCsGA1UEAxMk ZDNmYTBmMzUtZmZlNS00ZDcxLTk4ZjEtNzVhYmE2YTcyMThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSKqr29ytQ0TnuL7yuqqayz9Y9JHXOvFJzXT GRREgGix+J6QCy/DEPevFagga3rQGHUz92IqUOmCmK3tWE2bZQ74ZHvetq7VGrkH CBkAGnMsHROudVX9Rj4emxm+Ib/EYeGjmeHfRXKFFhh2FKvy7cmO0HxbFnN5ptyo 97lAfwoDYlCZLqjeKZJYDRNMxDx5t30IdwRuZnq4nCyNJDpw5dVR8jp9Z9ocKqzM xzIVUKzfCYzTwGvWNdO2YoRb4fsJiSMWXHIL0Xk+pJXkNGWPB+76BOTZeV9Lfxwr vEVnX/4ZLTCmZiChNjIoO4xwvQTCBh5/mEZU6KvDZwFGcw5VCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6JdxiFeGoMg34VEJv/csQyJ6YVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOGM0NjU4OGQtMDJjZS0z MjVhLTllMWItNzI5MjNlMjY3YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG29zMbaC232aAeIfXYf2Xucxu8YgDQxRO4TDjP1XpVSs3nLJ30+W1nw vBRbfT4/kd2N7rM789AIgX51PWSG+OevlfObnsQc7oUt1rqmRrXryLJg1zUlYp4e cgFw+TkpGAfkE163x/07TntBW5BzX5aGeaX4JBjfurP/HvDTtzVOsJPfKoblwZuS 5jW7gS+nK4sITPDpOqaTR+tVcj4RiSUPZb0H5DTyKS/sDm37dHGb8gLItOv3xso/ dL7TQkWS0qhw0YeaUvlGZ6UcI/zZktwcElPZLACaMQF0AhRuUozlDbIxYQgl/Ttd KzhUL99OefQ2p/VVYQyBqxcISkqONWA= -----END CERTIFICATE-----Generated at Wed May 13 13:16:59 2026 by rpki-client