$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/918aeccd-1135-36ef-9172-bcf98a404b83.roa File: 918aeccd-1135-36ef-9172-bcf98a404b83.roa (raw, json) Hash identifier: 9iatYQl+Al4RX1WTpsqqjowcGyFxczbsVGkKzXqIgMk= Subject key identifier: 8C:D7:7C:37:66:0C:EF:B5:EE:B2:D8:4F:31:97:89:5D:04:BC:50:D7 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1E8D2F8AFAE5F74C777A80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/918aeccd-1135-36ef-9172-bcf98a404b83.roa Signing time: Fri 24 Apr 2026 23:20:51 +0000 ROA not before: Fri 24 Apr 2026 23:20:51 +0000 ROA not after: Thu 23 Jul 2026 23:20:51 +0000 asID: 7029 IP address blocks: 64.16.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:8d:2f:8a:fa:e5:f7:4c:77:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:20:51 2026 GMT Not After : Jul 23 23:20:51 2026 GMT Subject: CN=b94d6365-863d-4a90-bf4e-0b7c1e6cecbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:34:44:51:b9:98:a1:4e:49:51:97:af:81:6b: 35:7c:0f:27:34:26:b6:e2:23:85:ba:04:e2:20:13: ae:c8:3e:29:22:b0:99:24:2d:1b:6f:79:ce:7f:d2: 63:e1:26:a3:ce:fc:c0:57:9f:99:bc:58:fa:83:dc: ff:e9:84:a7:39:c3:c9:aa:20:a9:01:a7:57:da:d0: 73:4f:99:86:b5:12:a5:5b:9e:c7:2d:d6:1a:89:1e: 9e:6a:c8:3c:90:d0:e8:f9:05:59:ed:5e:89:69:c9: c7:ea:54:4e:f3:38:ed:07:38:93:08:ef:b8:03:af: fa:e8:de:23:f7:b5:46:f2:9c:75:eb:5c:a0:70:ec: 0f:ef:14:b8:2a:eb:f2:39:c1:9a:dd:9f:cd:fa:b7: 77:e6:06:0e:d2:fb:42:0d:a6:5a:93:97:c1:e0:86: b6:0c:3e:8c:2a:ce:de:53:57:fc:a5:e3:81:e7:d2: 67:c0:27:a7:8c:78:f7:49:79:8e:cf:6c:7e:7f:15: e8:bd:b2:c9:96:68:83:1b:84:b8:77:e7:32:ab:08: 7f:b1:ff:cb:54:36:4b:e3:a6:34:32:a0:01:f7:76: 8b:52:ba:e5:4d:eb:9e:b0:e0:27:80:2d:41:a1:93: aa:7f:db:d9:68:11:45:08:8a:33:cf:c2:7e:7b:84: 85:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D7:7C:37:66:0C:EF:B5:EE:B2:D8:4F:31:97:89:5D:04:BC:50:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/918aeccd-1135-36ef-9172-bcf98a404b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:54:f6:35:39:7e:6d:24:e1:87:31:66:56:79:af:86:7c:07: 77:fc:c0:72:35:54:1a:a5:a6:eb:be:ee:d2:5c:63:30:54:e1: f2:f9:63:a8:4c:df:9f:a4:99:ed:72:a9:55:17:40:51:90:e5: 05:6c:b9:e3:c5:59:20:78:36:53:25:be:a6:82:bc:20:f9:16: b8:5b:b2:3a:84:bd:69:97:02:27:b5:53:7b:f9:ee:41:4b:a6: fe:19:be:39:27:d0:1f:57:c3:bb:98:50:7b:66:45:1c:f7:b1: 72:4e:6f:7a:4a:b5:3c:17:ff:b7:c9:e2:d3:05:74:30:e9:ac: 7a:62:92:71:e7:08:81:50:91:a9:35:86:7e:17:59:78:e5:27: c4:e0:d5:34:52:51:4b:0f:41:dd:f0:65:55:a9:de:d1:ab:43: 06:49:e2:7f:13:22:51:9c:7a:2a:07:c6:1a:a8:de:8f:a0:bc: 20:ec:66:00:8b:05:a7:bd:f9:14:dd:e0:9a:1f:f2:96:b9:0b: 68:6b:7e:74:62:cb:00:8e:5b:d2:58:3c:a5:16:c9:af:f7:53: f5:84:55:98:8d:0b:03:df:71:10:30:f1:00:20:03:37:b0:64: 9c:33:4a:fe:0b:d4:34:3c:0f:62:d5:8c:4c:6f:3c:50:c4:7b: 6e:40:4c:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHo0vivrl90x3eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjA1MVoXDTI2MDcyMzIzMjA1MVowLzEtMCsGA1UEAxMk Yjk0ZDYzNjUtODYzZC00YTkwLWJmNGUtMGI3YzFlNmNlY2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjREUbmYoU5JUZevgWs1fA8nNCa24iOFugTi IBOuyD4pIrCZJC0bb3nOf9Jj4SajzvzAV5+ZvFj6g9z/6YSnOcPJqiCpAadX2tBz T5mGtRKlW57HLdYaiR6easg8kNDo+QVZ7V6JacnH6lRO8zjtBziTCO+4A6/66N4j 97VG8px161ygcOwP7xS4KuvyOcGa3Z/N+rd35gYO0vtCDaZak5fB4Ia2DD6MKs7e U1f8peOB59JnwCenjHj3SXmOz2x+fxXovbLJlmiDG4S4d+cyqwh/sf/LVDZL46Y0 MqAB93aLUrrlTeuesOAngC1BoZOqf9vZaBFFCIozz8J+e4SFCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzXfDdmDO+17rLYTzGXiV0EvFDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOTE4YWVjY2QtMTEzNS0z NmVmLTkxNzItYmNmOThhNDA0YjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNU9jU5fm0k4YcxZlZ5r4Z8B3f8wHI1VBqlpuu+7tJcYzBU4fL5Y6hM 35+kme1yqVUXQFGQ5QVsuePFWSB4NlMlvqaCvCD5FrhbsjqEvWmXAie1U3v57kFL pv4Zvjkn0B9Xw7uYUHtmRRz3sXJOb3pKtTwX/7fJ4tMFdDDprHpiknHnCIFQkak1 hn4XWXjlJ8Tg1TRSUUsPQd3wZVWp3tGrQwZJ4n8TIlGceioHxhqo3o+gvCDsZgCL Bae9+RTd4Jof8pa5C2hrfnRiywCOW9JYPKUWya/3U/WEVZiNCwPfcRAw8QAgAzew ZJwzSv4L1DQ8D2LVjExvPFDEe25ATBc= -----END CERTIFICATE-----Generated at Wed May 13 11:58:55 2026 by rpki-client