$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a22d29b4-17d2-3588-90c1-8a717e103076.roa File: a22d29b4-17d2-3588-90c1-8a717e103076.roa (raw, json) Hash identifier: ua2nOD2AQSI7924rCqvJj2L/x2JZC+tiXczqzKwOzow= Subject key identifier: 3D:46:78:1E:C5:31:BC:FC:02:BC:00:03:AB:57:5F:B9:3B:97:9E:61 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1E6735826222B4C186CE00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a22d29b4-17d2-3588-90c1-8a717e103076.roa Signing time: Fri 24 Apr 2026 23:20:33 +0000 ROA not before: Fri 24 Apr 2026 23:20:33 +0000 ROA not after: Thu 23 Jul 2026 23:20:33 +0000 asID: 7029 IP address blocks: 64.16.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:67:35:82:62:22:b4:c1:86:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:20:33 2026 GMT Not After : Jul 23 23:20:33 2026 GMT Subject: CN=21adaaf2-7c14-4816-9e29-b45fca396d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:36:c3:e5:dd:d2:9a:43:f4:be:52:3f:20: 05:2b:96:fc:fc:7b:3a:36:5a:5e:fc:9a:5a:bc:c1: c8:1a:6a:6a:3a:a5:1b:8f:45:6e:dd:d9:7a:67:3f: 95:27:7f:57:4b:14:47:6e:e4:73:05:fe:4b:32:75: ce:3f:e8:dd:fa:05:3c:73:ca:2e:c4:9e:6a:91:ae: 36:9a:63:e5:9b:d5:81:e9:f1:16:75:d5:fa:30:5b: d0:cc:1d:60:b5:7b:b2:9f:56:70:37:dd:81:04:5e: 20:c8:33:61:5e:b1:39:85:1b:17:cb:75:63:e4:24: 6a:4a:ff:2a:1e:40:cc:94:3a:0d:49:ed:83:5b:07: fc:13:db:b1:f6:0a:70:f4:81:9c:ca:45:95:4c:37: 1b:3b:67:e7:3b:bf:88:7b:8e:d1:fd:0e:93:9c:8d: 62:ff:33:6d:b1:81:1d:35:de:ae:68:9d:72:06:2a: cf:d0:10:51:82:e1:f0:33:2d:5f:74:8a:ec:ac:4a: 54:78:45:1e:ef:f4:03:b8:df:98:b4:85:4f:51:4f: 12:c1:f4:25:61:23:08:36:ec:14:df:c9:1b:0d:69: 9c:81:c0:ad:03:d5:3d:ce:fd:f2:dd:5e:a6:c7:26: af:70:4d:0b:bf:a6:e6:76:f4:3b:1f:07:cf:72:3b: 84:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:46:78:1E:C5:31:BC:FC:02:BC:00:03:AB:57:5F:B9:3B:97:9E:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a22d29b4-17d2-3588-90c1-8a717e103076.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a1:96:29:0d:ee:ad:0d:2c:d9:4e:7a:67:62:e8:e4:38:fe: 07:c1:1f:70:00:a3:70:f3:96:8c:78:a2:bc:1d:f3:2e:19:03: 43:6d:5e:9d:ed:94:ed:dc:54:0c:c4:86:2b:66:62:e7:8e:04: d3:a8:bc:54:4e:f4:8d:8b:b4:9f:bf:6a:87:5b:ef:93:e7:4e: d6:2d:ac:63:6b:8b:71:13:25:68:ca:f0:31:03:90:a5:63:d9: 13:1a:e1:61:7f:91:6f:2f:60:91:ce:c3:c2:6a:cc:d2:f6:77: 8d:e1:51:31:76:0f:46:d4:a5:37:38:72:34:80:f6:08:53:1a: aa:1d:34:a5:d0:d0:6c:20:bd:b8:c1:4b:59:29:a1:a3:c8:ba: 57:5a:89:d3:6e:87:5c:50:6a:56:d7:5b:f3:48:4a:59:f0:37: b2:f5:72:17:d7:c0:8e:1a:39:d1:84:e3:2e:72:01:89:95:87: 12:60:b4:66:b2:00:43:80:4c:a9:d0:6e:b6:08:69:0e:67:5a: 54:4e:31:dd:7f:96:7f:c2:ec:3c:bb:ec:8e:0e:f4:17:5b:94: 44:7d:6c:44:f6:2a:c6:32:08:c8:8a:22:1e:55:1b:2d:de:ad: c9:58:8e:66:01:b0:98:7a:fb:d7:e1:e9:5b:ea:f3:68:86:5b: 1e:2f:4a:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHmc1gmIitMGGzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjAzM1oXDTI2MDcyMzIzMjAzM1owLzEtMCsGA1UEAxMk MjFhZGFhZjItN2MxNC00ODE2LTllMjktYjQ1ZmNhMzk2ZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCw2w+Xd0ppD9L5SPyAFK5b8/Hs6Nlpe/Jpa vMHIGmpqOqUbj0Vu3dl6Zz+VJ39XSxRHbuRzBf5LMnXOP+jd+gU8c8ouxJ5qka42 mmPlm9WB6fEWddX6MFvQzB1gtXuyn1ZwN92BBF4gyDNhXrE5hRsXy3Vj5CRqSv8q HkDMlDoNSe2DWwf8E9ux9gpw9IGcykWVTDcbO2fnO7+Ie47R/Q6TnI1i/zNtsYEd Nd6uaJ1yBirP0BBRguHwMy1fdIrsrEpUeEUe7/QDuN+YtIVPUU8SwfQlYSMINuwU 38kbDWmcgcCtA9U9zv3y3V6mxyavcE0Lv6bmdvQ7HwfPcjuEpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1GeB7FMbz8ArwAA6tXX7k7l55hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTIyZDI5YjQtMTdkMi0z NTg4LTkwYzEtOGE3MTdlMTAzMDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIihlikN7q0NLNlOemdi6OQ4/gfBH3AAo3Dzlox4orwd8y4ZA0NtXp3t lO3cVAzEhitmYueOBNOovFRO9I2LtJ+/aodb75PnTtYtrGNri3ETJWjK8DEDkKVj 2RMa4WF/kW8vYJHOw8JqzNL2d43hUTF2D0bUpTc4cjSA9ghTGqodNKXQ0GwgvbjB S1kpoaPIuldaidNuh1xQalbXW/NISlnwN7L1chfXwI4aOdGE4y5yAYmVhxJgtGay AEOATKnQbrYIaQ5nWlROMd1/ln/C7Dy77I4O9BdblER9bET2KsYyCMiKIh5VGy3e rclYjmYBsJh6+9fh6Vvq82iGWx4vStI= -----END CERTIFICATE-----Generated at Wed May 13 12:08:27 2026 by rpki-client