$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9162e2da-99f7-38b5-b7ee-c4c8931b73b3.roa File: 9162e2da-99f7-38b5-b7ee-c4c8931b73b3.roa (raw, json) Hash identifier: Qvl/+I6SlT5HWLaNKKx9GF8hWLrEY0eoI0ui/T4fmfE= Subject key identifier: 53:A6:45:03:7E:4F:6E:61:60:B8:92:94:E3:D0:31:3E:5E:41:A9:F4 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E20301D8BB73AEAF29A5F00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9162e2da-99f7-38b5-b7ee-c4c8931b73b3.roa Signing time: Fri 24 Apr 2026 23:24:09 +0000 ROA not before: Fri 24 Apr 2026 23:24:09 +0000 ROA not after: Thu 23 Jul 2026 23:24:09 +0000 asID: 397630 IP address blocks: 64.16.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:20:30:1d:8b:b7:3a:ea:f2:9a:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:24:09 2026 GMT Not After : Jul 23 23:24:09 2026 GMT Subject: CN=753470cf-16c4-44e1-8014-4de116070800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:94:27:40:64:28:b8:31:f1:23:03:f7:2c:8d: fd:b7:83:17:76:4e:d2:ee:95:2d:b6:ed:3a:d1:e6: bf:fd:b1:25:4e:ff:79:c0:fa:4e:97:6b:78:5e:75: 6b:73:f0:f7:20:92:d4:d6:03:64:3a:91:39:89:eb: 8c:24:b3:d2:dd:ab:92:2b:4f:18:8f:3c:77:b9:c1: 9a:44:65:1a:5c:62:58:4b:a9:96:90:12:e5:d0:d6: c8:1a:5e:d0:ab:41:70:7f:b1:1c:80:ed:5d:68:93: e2:fd:11:44:77:02:37:dd:20:05:8c:31:68:3c:63: f5:28:ef:4a:4f:5e:e6:0c:1a:71:4c:0d:2e:c7:5b: 53:5a:e6:01:13:81:8f:ff:e1:2d:98:f6:2b:26:04: bf:34:0d:2f:ed:68:03:5b:f2:32:04:a3:ea:4c:5b: 95:21:46:51:1c:4d:12:28:69:9a:6c:68:96:cd:82: bf:83:00:7d:6c:f7:a5:34:f7:80:6c:c3:76:fe:7d: 2d:9c:52:8f:31:8e:b5:4a:ce:c0:e9:5f:21:9d:ac: d9:34:3d:44:f0:89:07:8b:ef:07:b3:6e:10:28:f7: 0d:0f:7f:58:e7:58:1c:6e:c8:dd:2c:4e:ab:ff:7b: ad:17:ab:f7:2e:f5:b4:8c:09:20:f5:55:8a:21:a0: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A6:45:03:7E:4F:6E:61:60:B8:92:94:E3:D0:31:3E:5E:41:A9:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9162e2da-99f7-38b5-b7ee-c4c8931b73b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:fc:82:0e:26:ca:a9:a0:5a:39:07:e7:d1:42:81:24:e5:62: 12:16:30:24:75:12:d2:38:02:37:e0:79:38:11:e0:52:ca:93: 46:9c:46:31:24:06:73:36:1c:f8:72:93:f7:29:2c:5c:c0:26: 94:d2:f0:49:52:39:9e:1e:e1:67:b5:0f:7a:d7:b6:2a:a6:d9: 05:69:22:bc:2b:0e:9c:75:eb:54:24:83:d6:75:59:26:04:f2: 82:86:75:db:ae:a7:4c:91:c3:c3:33:d1:df:a8:ff:14:af:87: 1a:94:8f:2d:ed:84:64:3e:9b:4e:8d:0c:c8:fa:7c:f0:c0:67: 20:12:40:06:60:b1:e6:24:e7:29:17:00:21:ca:e4:27:18:14: a9:ca:f9:26:b5:b3:d1:a1:cc:ec:00:65:26:5c:c0:ee:71:73: e7:a1:24:7b:31:e6:09:86:6a:18:38:6c:03:c1:d6:01:51:4c: f5:2b:6b:b0:88:d2:0d:59:4b:c5:b1:0e:ab:cb:5f:df:06:5a: cd:c3:4b:32:5a:24:3f:eb:62:06:f8:35:8f:f4:fd:1a:bb:ec: 1c:d9:17:56:5a:f6:ae:95:3f:5a:aa:13:83:d1:7e:6a:98:dc: d0:8a:d8:be:c3:e6:94:5d:17:46:24:b5:44:01:29:63:65:e4: d1:cc:64:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eIDAdi7c66vKaXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjQwOVoXDTI2MDcyMzIzMjQwOVowLzEtMCsGA1UEAxMk NzUzNDcwY2YtMTZjNC00NGUxLTgwMTQtNGRlMTE2MDcwODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5QnQGQouDHxIwP3LI39t4MXdk7S7pUttu06 0ea//bElTv95wPpOl2t4XnVrc/D3IJLU1gNkOpE5ieuMJLPS3auSK08Yjzx3ucGa RGUaXGJYS6mWkBLl0NbIGl7Qq0Fwf7EcgO1daJPi/RFEdwI33SAFjDFoPGP1KO9K T17mDBpxTA0ux1tTWuYBE4GP/+EtmPYrJgS/NA0v7WgDW/IyBKPqTFuVIUZRHE0S KGmabGiWzYK/gwB9bPelNPeAbMN2/n0tnFKPMY61Ss7A6V8hnazZND1E8IkHi+8H s24QKPcND39Y51gcbsjdLE6r/3utF6v3LvW0jAkg9VWKIaDPfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOmRQN+T25hYLiSlOPQMT5eQan0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOTE2MmUyZGEtOTlmNy0z OGI1LWI3ZWUtYzRjODkzMWI3M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr8gg4myqmgWjkH59FCgSTlYhIWMCR1EtI4AjfgeTgR4FLKk0acRjEk BnM2HPhyk/cpLFzAJpTS8ElSOZ4e4We1D3rXtiqm2QVpIrwrDpx161Qkg9Z1WSYE 8oKGdduup0yRw8Mz0d+o/xSvhxqUjy3thGQ+m06NDMj6fPDAZyASQAZgseYk5ykX ACHK5CcYFKnK+Sa1s9GhzOwAZSZcwO5xc+ehJHsx5gmGahg4bAPB1gFRTPUra7CI 0g1ZS8WxDqvLX98GWs3DSzJaJD/rYgb4NY/0/Rq77BzZF1Za9q6VP1qqE4PRfmqY 3NCK2L7D5pRdF0YktUQBKWNl5NHMZM8= -----END CERTIFICATE-----Generated at Wed May 13 10:43:56 2026 by rpki-client