$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/99d10086-0651-30a8-947b-7d34fac86add.roa File: 99d10086-0651-30a8-947b-7d34fac86add.roa (raw, json) Hash identifier: JG0E03C8oFpjz/H1DnS9DfXnQbcahCa/MQlnBoAa2HA= Subject key identifier: 6B:0B:2D:F9:FC:72:CA:96:60:88:BE:82:0F:22:CA:62:0A:B6:8B:40 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1EF01AB0D0C3BFC6135BC0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/99d10086-0651-30a8-947b-7d34fac86add.roa Signing time: Fri 24 Apr 2026 23:21:38 +0000 ROA not before: Fri 24 Apr 2026 23:21:38 +0000 ROA not after: Thu 23 Jul 2026 23:21:38 +0000 asID: 20001 IP address blocks: 64.16.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:f0:1a:b0:d0:c3:bf:c6:13:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:38 2026 GMT Not After : Jul 23 23:21:38 2026 GMT Subject: CN=d2b9801e-fe01-4ebc-a2e0-569f6d36f4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:d0:f9:fb:ef:9b:d5:20:ad:8a:54:f2:7a: c9:15:7a:92:ad:09:51:34:09:0b:c7:83:d6:83:27: 2b:9f:00:87:2d:7a:a3:db:d1:51:a2:15:72:2c:ee: 0f:5e:96:c9:84:d3:95:21:64:42:1e:0f:36:a2:0d: 7c:ad:c8:bf:ec:67:eb:f2:1a:de:4f:ee:47:22:11: 9d:4d:3a:ee:4f:50:ba:c9:49:32:4e:0d:a9:bc:4e: cf:bf:04:b9:04:73:48:d5:24:8f:8e:7a:9b:e6:ff: 79:38:c4:4c:ba:e2:cb:67:c2:e1:fa:35:b0:75:21: 91:77:4d:c6:64:da:40:ae:75:18:c5:3d:94:e5:69: b0:b4:6e:74:95:b7:23:7a:e7:7d:da:e0:d7:04:dd: f9:0c:e2:74:9f:35:48:38:f0:26:7c:73:e7:06:b4: 3e:5a:36:79:45:6f:1b:9b:bf:98:5e:99:61:ce:f6: 3a:12:16:16:bf:91:18:02:22:cd:dc:5f:16:e9:43: 4b:84:b4:ad:18:80:be:63:00:26:b4:8d:8e:e0:93: dd:4f:af:f7:77:4f:e3:a7:c0:69:08:f2:14:28:9c: 6b:da:c3:6c:81:01:23:b4:c6:ca:3a:d2:68:07:0c: 90:e8:4a:49:8f:15:79:9e:f0:18:e1:db:ab:b7:1f: 63:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0B:2D:F9:FC:72:CA:96:60:88:BE:82:0F:22:CA:62:0A:B6:8B:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/99d10086-0651-30a8-947b-7d34fac86add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:62:87:fe:74:35:81:45:64:fe:4f:b8:f4:2f:56:73:b5:5f: c4:0f:02:e7:0b:f0:34:2e:00:fc:f5:1d:de:76:56:71:2c:53: 43:5d:d2:38:14:0b:4f:c5:5d:c0:2e:71:c0:14:80:03:a4:d6: b3:50:18:ca:32:da:9c:63:24:ab:36:17:dc:bc:eb:54:fb:63: 6d:f4:ac:03:80:25:bf:e2:20:55:c5:3d:73:b7:05:6f:cb:4b: 7a:9f:f9:c2:ca:3e:ba:86:01:a0:ec:3e:d9:b2:14:68:3b:a9: d5:b1:f4:a6:a0:b8:00:25:bc:dd:2a:fe:a4:6c:00:7d:e7:8e: a5:39:91:c9:3c:21:43:b7:9d:23:31:9b:7c:7b:8a:c5:f4:c1: a2:c2:97:c3:3b:e5:98:b8:ab:e3:94:e0:58:54:0a:8d:f5:41: 40:8e:05:01:66:24:e1:df:c9:9f:58:65:70:5e:50:b3:9a:97: 2e:aa:c9:64:e4:52:bb:af:e6:53:46:b6:8e:a7:16:c6:a5:97: c0:cf:a0:63:d1:9b:85:68:58:27:a0:f7:e1:62:2c:b3:ec:61: 75:93:ec:86:20:07:14:52:96:07:15:e5:8c:9e:ce:4c:03:cb: 81:75:31:c1:e5:d1:a4:41:e6:3b:83:22:48:7f:70:c4:f0:da: d3:f3:f6:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHvAasNDDv8YTW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjEzOFoXDTI2MDcyMzIzMjEzOFowLzEtMCsGA1UEAxMk ZDJiOTgwMWUtZmUwMS00ZWJjLWEyZTAtNTY5ZjZkMzZmNGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC3Q+fvvm9UgrYpU8nrJFXqSrQlRNAkLx4PW gycrnwCHLXqj29FRohVyLO4PXpbJhNOVIWRCHg82og18rci/7Gfr8hreT+5HIhGd TTruT1C6yUkyTg2pvE7PvwS5BHNI1SSPjnqb5v95OMRMuuLLZ8Lh+jWwdSGRd03G ZNpArnUYxT2U5WmwtG50lbcjeud92uDXBN35DOJ0nzVIOPAmfHPnBrQ+WjZ5RW8b m7+YXplhzvY6EhYWv5EYAiLN3F8W6UNLhLStGIC+YwAmtI2O4JPdT6/3d0/jp8Bp CPIUKJxr2sNsgQEjtMbKOtJoBwyQ6EpJjxV5nvAY4durtx9jzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsLLfn8csqWYIi+gg8iymIKtotAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOTlkMTAwODYtMDY1MS0z MGE4LTk0N2ItN2QzNGZhYzg2YWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1ih/50NYFFZP5PuPQvVnO1X8QPAucL8DQuAPz1Hd52VnEsU0Nd0jgU C0/FXcAuccAUgAOk1rNQGMoy2pxjJKs2F9y861T7Y230rAOAJb/iIFXFPXO3BW/L S3qf+cLKPrqGAaDsPtmyFGg7qdWx9KaguAAlvN0q/qRsAH3njqU5kck8IUO3nSMx m3x7isX0waLCl8M75Zi4q+OU4FhUCo31QUCOBQFmJOHfyZ9YZXBeULOaly6qyWTk Uruv5lNGto6nFsall8DPoGPRm4VoWCeg9+FiLLPsYXWT7IYgBxRSlgcV5YyezkwD y4F1McHl0aRB5juDIkh/cMTw2tPz9oE= -----END CERTIFICATE-----Generated at Wed May 13 14:50:06 2026 by rpki-client