$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9f03d0c3-fc9d-35c8-a52f-c6c51c838608.roa File: 9f03d0c3-fc9d-35c8-a52f-c6c51c838608.roa (raw, json) Hash identifier: ekbYSncJODztguZK0L1/k1ljWTUeEfIxMJ4vA0XaR50= Subject key identifier: 2F:20:6F:ED:AF:93:03:FE:D8:87:44:AC:C8:28:A2:21:8D:F7:77:15 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D96AD7800AFE2D305C5532240 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9f03d0c3-fc9d-35c8-a52f-c6c51c838608.roa Signing time: Wed 22 Apr 2026 07:22:21 +0000 ROA not before: Wed 22 Apr 2026 07:22:21 +0000 ROA not after: Tue 21 Jul 2026 07:22:21 +0000 asID: 397630 IP address blocks: 64.16.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:96:ad:78:00:af:e2:d3:05:c5:53:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 22 07:22:21 2026 GMT Not After : Jul 21 07:22:21 2026 GMT Subject: CN=0cfe1f40-c705-4279-90f9-eea9a42dc906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:96:3b:73:a4:39:bc:9d:5c:00:27:03:a2:26: 7d:37:d3:61:1a:04:3c:e1:41:99:fe:de:fe:2f:d8: 94:72:82:66:0b:ed:a1:75:64:af:29:71:ca:1b:82: 53:d9:f0:60:4f:78:d0:c6:be:57:42:a6:8c:7e:9d: ce:99:be:89:76:81:ed:26:51:9f:6b:7f:2c:1e:e1: 22:4c:2c:bc:88:35:5f:4d:e1:2d:f5:4e:9b:b0:4c: f3:98:03:43:42:7b:95:2d:2b:ac:23:8e:c8:6b:8e: 64:8d:80:bb:2e:91:ad:3b:f0:57:74:31:58:d7:73: 31:a6:81:6b:c0:3c:cc:25:ec:3c:ae:08:a2:86:6e: 2f:e3:33:04:e4:a5:9d:33:10:01:76:ea:16:5c:44: be:f7:03:47:40:c9:36:cc:44:c8:95:8a:87:d3:54: 2c:31:65:44:bb:e5:0a:bc:38:ad:fe:c4:04:ea:70: ad:e2:79:68:25:57:a8:4f:52:99:b3:5f:e2:9d:3d: 84:f1:9b:a8:ca:39:a4:a4:d8:a3:23:b1:be:75:e1: b3:4a:55:ca:05:ba:31:34:84:52:d4:e0:9e:d6:40: 4e:72:ca:b0:7d:e8:3d:96:07:d4:d4:4f:cb:ad:3c: 8b:6c:ca:60:71:90:31:9a:5c:4e:e2:69:25:ea:1c: 42:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:20:6F:ED:AF:93:03:FE:D8:87:44:AC:C8:28:A2:21:8D:F7:77:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9f03d0c3-fc9d-35c8-a52f-c6c51c838608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:01:19:e0:a6:33:92:50:8b:16:f1:6f:df:37:a2:ce:f5:3a: f9:6f:b8:dd:d9:7a:2c:38:f5:b1:45:bd:f4:d6:0d:2c:e2:fb: b6:2f:fb:bf:66:34:39:4e:f3:13:55:e7:c5:47:94:7f:2e:a3: cd:96:41:91:79:e3:2c:9e:c1:82:a9:95:c8:1c:a7:9b:ea:fb: 94:80:5e:ab:45:3e:ac:17:2f:0f:ab:79:6c:cb:6f:82:13:04: be:75:e7:cd:52:96:58:1e:c2:35:42:b9:5a:75:67:d6:cc:7e: 55:a8:17:73:51:bf:5f:6f:03:bb:a2:36:fe:68:6e:28:be:ac: 1d:84:3c:b3:7c:fe:52:20:55:be:72:bc:df:5d:1d:47:05:4c: 7f:72:45:c3:e7:a5:9e:a3:a0:52:05:b5:2c:d9:95:76:0c:dc: ed:74:d5:49:e7:c7:79:94:88:75:0c:40:89:25:e8:34:57:d1: 55:d0:40:1d:62:a4:17:72:3d:50:36:50:9a:0a:e1:10:e4:8e: 91:2c:d7:9e:cb:17:5e:f8:1c:c6:76:14:17:80:1a:3a:5e:b9: 52:79:82:ea:70:c4:14:9e:ec:f3:94:97:d1:18:02:37:3e:84: 50:f4:29:85:5b:f4:98:5c:5f:8d:98:93:8d:06:9d:52:1a:95: d5:44:8d:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2WrXgAr+LTBcVTIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyMjA3MjIyMVoXDTI2MDcyMTA3MjIyMVowLzEtMCsGA1UEAxMk MGNmZTFmNDAtYzcwNS00Mjc5LTkwZjktZWVhOWE0MmRjOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZY7c6Q5vJ1cACcDoiZ9N9NhGgQ84UGZ/t7+ L9iUcoJmC+2hdWSvKXHKG4JT2fBgT3jQxr5XQqaMfp3Omb6JdoHtJlGfa38sHuEi TCy8iDVfTeEt9U6bsEzzmANDQnuVLSusI47Ia45kjYC7LpGtO/BXdDFY13MxpoFr wDzMJew8rgiihm4v4zME5KWdMxABduoWXES+9wNHQMk2zETIlYqH01QsMWVEu+UK vDit/sQE6nCt4nloJVeoT1KZs1/inT2E8ZuoyjmkpNijI7G+deGzSlXKBboxNIRS 1OCe1kBOcsqwfeg9lgfU1E/LrTyLbMpgcZAxmlxO4mkl6hxCkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8gb+2vkwP+2IdErMgooiGN93cVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvOWYwM2QwYzMtZmM5ZC0z NWM4LWE1MmYtYzZjNTFjODM4NjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMBGeCmM5JQixbxb983os71OvlvuN3Zeiw49bFFvfTWDSzi+7Yv+79m NDlO8xNV58VHlH8uo82WQZF54yyewYKplcgcp5vq+5SAXqtFPqwXLw+reWzLb4IT BL51581SllgewjVCuVp1Z9bMflWoF3NRv19vA7uiNv5obii+rB2EPLN8/lIgVb5y vN9dHUcFTH9yRcPnpZ6joFIFtSzZlXYM3O101Unnx3mUiHUMQIkl6DRX0VXQQB1i pBdyPVA2UJoK4RDkjpEs157LF174HMZ2FBeAGjpeuVJ5gupwxBSe7POUl9EYAjc+ hFD0KYVb9JhcX42Yk40GnVIaldVEjcU= -----END CERTIFICATE-----Generated at Wed May 13 14:10:32 2026 by rpki-client