$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/95eeffe8-b216-3dac-a287-037547a3c92f.roa File: 95eeffe8-b216-3dac-a287-037547a3c92f.roa (raw, json) Hash identifier: aH4JvPpH8posOCYe5+TJEm+AaMCx5qBrG+d1zYnvGU8= Subject key identifier: 18:DC:4B:07:DA:A3:27:B1:DB:62:26:25:15:A6:0E:12:A0:DF:11:00 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F2EBF1F80E48ACD457E00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/95eeffe8-b216-3dac-a287-037547a3c92f.roa Signing time: Fri 24 Apr 2026 23:22:07 +0000 ROA not before: Fri 24 Apr 2026 23:22:07 +0000 ROA not after: Thu 23 Jul 2026 23:22:07 +0000 asID: 20001 IP address blocks: 64.16.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:2e:bf:1f:80:e4:8a:cd:45:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:07 2026 GMT Not After : Jul 23 23:22:07 2026 GMT Subject: CN=636ce2a1-5b13-400f-90aa-6ad5c5cabe65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:ad:9a:22:0a:3d:41:4a:e2:4a:51:35:af: 61:7a:77:e1:09:27:77:db:93:f5:8c:16:8a:29:6f: 8e:42:6a:ca:e7:80:95:48:a8:7e:91:4a:e4:f3:e3: d8:56:b3:67:ad:92:61:ab:5a:0b:a3:b2:cf:a5:4d: 59:3d:55:b8:54:37:84:ed:18:1a:6c:77:cd:61:9c: af:51:75:0e:60:36:b2:d3:b9:93:69:51:ed:91:f7: ca:ed:19:26:13:39:89:81:cf:aa:1a:d4:29:d5:df: 40:8a:0a:e5:47:d7:b5:7f:47:d1:90:78:e0:2e:2e: 3b:62:3b:27:27:3d:2e:97:e0:9b:81:c2:5b:6e:23: 60:f9:15:bc:10:23:f3:35:47:8e:f7:18:00:ec:23: b6:bc:f3:72:c0:f6:3a:2e:1f:33:1d:3f:51:2d:be: 59:b4:b6:38:87:0a:5c:c3:8d:04:39:a0:dd:0f:01: 53:4f:72:90:ab:34:bc:e7:67:7d:7e:be:40:32:69: ce:99:23:10:e6:1e:0e:3c:58:e0:f7:4a:66:2b:ab: 49:35:44:9f:1d:ba:12:49:f2:76:10:41:e1:f5:2f: 6b:99:85:5d:8f:bd:18:ed:9d:90:2d:b3:77:be:24: a4:a8:b7:e2:18:ee:8b:fc:5e:b6:72:b1:62:a7:97: e4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DC:4B:07:DA:A3:27:B1:DB:62:26:25:15:A6:0E:12:A0:DF:11:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/95eeffe8-b216-3dac-a287-037547a3c92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:84:29:50:14:6c:3c:5d:2c:30:d4:a4:28:30:61:cc:89:bc: 16:e4:3a:37:56:9d:1a:de:55:31:e2:4e:f4:7b:11:da:96:81: 8a:1a:03:8a:ff:59:db:25:91:9c:b0:97:8b:98:d8:77:ac:ac: c4:e9:3d:47:c5:f6:7a:bc:0a:4f:45:62:db:d6:b6:e0:84:df: ad:af:c5:a9:28:f3:b8:f6:38:f1:94:21:77:ff:c0:f3:d2:ba: 9d:28:7d:7a:7b:12:c1:85:9b:44:00:19:fc:78:27:08:72:84: 06:d0:9e:84:2e:7f:ef:6f:4f:f9:22:b2:d1:46:07:c8:a8:fe: 78:9a:70:4e:bb:62:d2:ac:bd:f6:08:d8:6c:7e:5c:72:ab:9d: d5:61:94:11:aa:88:a9:11:6f:58:eb:c2:7e:32:c1:bf:07:3a: 01:2c:3b:81:1f:73:71:42:a1:81:94:54:24:1a:c3:dd:cf:93: 4e:29:62:bd:e0:f5:85:98:2e:4c:36:cf:69:69:23:90:d7:28: 8a:b0:a8:80:9f:30:fe:9f:19:c0:ba:b1:9b:d0:d1:8f:b5:a9: 9f:d5:72:6c:2e:1f:16:4a:fb:0f:9f:61:3d:db:8a:d5:36:4d: 0a:37:a6:05:8f:0c:60:c9:0f:bd:8d:b2:2b:85:04:4b:39:4e: d3:53:26:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHy6/H4Dkis1FfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIwN1oXDTI2MDcyMzIzMjIwN1owLzEtMCsGA1UEAxMk NjM2Y2UyYTEtNWIxMy00MDBmLTkwYWEtNmFkNWM1Y2FiZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1KtmiIKPUFK4kpRNa9henfhCSd325P1jBaK KW+OQmrK54CVSKh+kUrk8+PYVrNnrZJhq1oLo7LPpU1ZPVW4VDeE7RgabHfNYZyv UXUOYDay07mTaVHtkffK7RkmEzmJgc+qGtQp1d9AigrlR9e1f0fRkHjgLi47Yjsn Jz0ul+CbgcJbbiNg+RW8ECPzNUeO9xgA7CO2vPNywPY6Lh8zHT9RLb5ZtLY4hwpc w40EOaDdDwFTT3KQqzS852d9fr5AMmnOmSMQ5h4OPFjg90pmK6tJNUSfHboSSfJ2 EEHh9S9rmYVdj70Y7Z2QLbN3viSkqLfiGO6L/F62crFip5fkEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjcSwfaoyex22ImJRWmDhKg3xEAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOTVlZWZmZTgtYjIxNi0z ZGFjLWEyODctMDM3NTQ3YTNjOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeEKVAUbDxdLDDUpCgwYcyJvBbkOjdWnRreVTHiTvR7EdqWgYoaA4r/ WdslkZywl4uY2HesrMTpPUfF9nq8Ck9FYtvWtuCE362vxako87j2OPGUIXf/wPPS up0ofXp7EsGFm0QAGfx4JwhyhAbQnoQuf+9vT/kistFGB8io/niacE67YtKsvfYI 2Gx+XHKrndVhlBGqiKkRb1jrwn4ywb8HOgEsO4Efc3FCoYGUVCQaw93Pk04pYr3g 9YWYLkw2z2lpI5DXKIqwqICfMP6fGcC6sZvQ0Y+1qZ/VcmwuHxZK+w+fYT3bitU2 TQo3pgWPDGDJD72NsiuFBEs5TtNTJqA= -----END CERTIFICATE-----Generated at Wed May 13 12:18:19 2026 by rpki-client