$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a09bde37-5a9e-350b-bbc8-6724e8866d49.roa File: a09bde37-5a9e-350b-bbc8-6724e8866d49.roa (raw, json) Hash identifier: uLaUO+jd2ePHS6hI3WugV7xHi0APh+TF5FJWGmxodm8= Subject key identifier: 08:53:73:C4:43:A7:1A:5A:25:8C:D2:BE:86:2F:99:B2:74:EE:EC:90 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F9DB87968D71D96A356C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a09bde37-5a9e-350b-bbc8-6724e8866d49.roa Signing time: Fri 24 Apr 2026 23:23:00 +0000 ROA not before: Fri 24 Apr 2026 23:23:00 +0000 ROA not after: Thu 23 Jul 2026 23:23:00 +0000 asID: 397630 IP address blocks: 64.16.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:9d:b8:79:68:d7:1d:96:a3:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:00 2026 GMT Not After : Jul 23 23:23:00 2026 GMT Subject: CN=c9b6bf18-4077-495a-ab6d-af28bf57052f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ea:0b:07:d6:53:47:73:ba:8f:4c:fc:3a:b0: 08:e1:29:76:0f:57:74:4e:72:27:15:ad:8a:f2:3b: 7b:e8:67:31:8e:3c:4c:cf:76:0f:95:20:3d:f3:a7: 8a:bd:82:f8:df:a4:bc:03:79:27:ae:49:03:e2:1d: ea:17:ca:3f:07:bd:03:2c:84:3e:20:ee:8e:86:1b: 71:20:b0:16:f9:e6:99:ca:84:2f:df:e3:f9:d6:4d: 05:70:92:b7:e1:75:8a:23:ee:77:81:d3:61:ee:15: 8f:b0:8b:93:be:0c:2b:1d:10:48:48:62:e7:80:44: 97:99:1a:1d:18:7f:06:df:0e:01:2d:8b:31:45:40: 66:e9:ca:ea:f1:74:10:d4:18:36:69:c1:d8:88:a9: b7:08:b9:ec:6f:12:1d:85:56:a8:14:0c:1c:43:c3: 78:42:c2:9e:f6:7c:6d:c9:7e:1d:f4:b2:86:8d:7c: 8e:b4:9e:b8:77:fd:7c:90:dd:b0:13:a3:97:f7:8f: cf:43:67:8c:dc:89:d8:42:f0:fd:2d:fc:c6:5f:df: 7d:f2:c5:ef:e3:66:a1:69:8c:ed:01:45:ee:c6:75: 0b:c1:2b:f4:82:5b:b8:a0:82:66:40:c1:34:7e:dc: f1:10:e7:18:95:2f:fd:9f:1f:73:74:0a:31:c2:31: 51:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:53:73:C4:43:A7:1A:5A:25:8C:D2:BE:86:2F:99:B2:74:EE:EC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a09bde37-5a9e-350b-bbc8-6724e8866d49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:63:99:69:61:c8:ba:87:ed:1a:ea:bf:0c:12:95:e9:29:cc: c5:d0:78:ea:f1:3d:79:75:30:5e:6d:69:f9:0e:7c:4f:cf:e5: 17:93:f6:ba:53:ed:4a:c7:6f:9b:65:0e:5c:54:c1:f7:c6:43: 12:3e:d7:73:73:07:92:7e:86:58:e8:63:74:53:f6:90:0a:93: ad:ff:0a:bc:5a:d8:9a:f2:91:88:31:91:87:9e:64:cb:f6:9c: 6f:95:b6:e0:dd:4a:86:e9:e3:3c:46:38:5f:ca:6d:6b:a6:41: 11:9e:ef:97:9e:07:75:02:31:4c:87:6f:b8:cc:7c:9a:fc:63: e3:43:a2:d1:50:e9:f4:8c:e9:38:a3:66:f9:d8:8b:79:9f:ab: a2:ba:3b:bf:08:4d:de:30:53:19:2f:b7:13:9b:8d:95:66:ff: cc:0e:15:c4:aa:fb:d3:e4:ca:fa:bb:a8:d0:90:21:60:f7:11: b3:d5:ac:c9:76:0e:bd:8b:fa:f8:8b:cd:ef:26:f8:1b:eb:f7: b9:ef:b4:08:81:6e:f9:11:fa:60:e6:6d:d4:0b:a2:2e:b1:4a: fe:a3:e6:f8:83:2a:02:7c:bb:3b:3a:e5:da:3d:88:f1:9a:8f: 8a:20:4c:66:16:52:7a:20:75:0e:db:ab:98:a6:a6:66:3f:92: 25:c7:c0:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH524eWjXHZajVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjMwMFoXDTI2MDcyMzIzMjMwMFowLzEtMCsGA1UEAxMk YzliNmJmMTgtNDA3Ny00OTVhLWFiNmQtYWYyOGJmNTcwNTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+oLB9ZTR3O6j0z8OrAI4Sl2D1d0TnInFa2K 8jt76GcxjjxMz3YPlSA986eKvYL436S8A3knrkkD4h3qF8o/B70DLIQ+IO6Ohhtx ILAW+eaZyoQv3+P51k0FcJK34XWKI+53gdNh7hWPsIuTvgwrHRBISGLngESXmRod GH8G3w4BLYsxRUBm6crq8XQQ1Bg2acHYiKm3CLnsbxIdhVaoFAwcQ8N4QsKe9nxt yX4d9LKGjXyOtJ64d/18kN2wE6OX94/PQ2eM3InYQvD9LfzGX9998sXv42ahaYzt AUXuxnULwSv0glu4oIJmQME0ftzxEOcYlS/9nx9zdAoxwjFRfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhTc8RDpxpaJYzSvoYvmbJ07uyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTA5YmRlMzctNWE5ZS0z NTBiLWJiYzgtNjcyNGU4ODY2ZDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5jmWlhyLqH7RrqvwwSlekpzMXQeOrxPXl1MF5tafkOfE/P5ReT9rpT 7UrHb5tlDlxUwffGQxI+13NzB5J+hljoY3RT9pAKk63/Crxa2JrykYgxkYeeZMv2 nG+VtuDdSobp4zxGOF/KbWumQRGe75eeB3UCMUyHb7jMfJr8Y+NDotFQ6fSM6Tij ZvnYi3mfq6K6O78ITd4wUxkvtxObjZVm/8wOFcSq+9Pkyvq7qNCQIWD3EbPVrMl2 Dr2L+viLze8m+Bvr97nvtAiBbvkR+mDmbdQLoi6xSv6j5viDKgJ8uzs65do9iPGa j4ogTGYWUnogdQ7bq5impmY/kiXHwLE= -----END CERTIFICATE-----Generated at Wed May 13 09:54:26 2026 by rpki-client