$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a23941ce-43cb-38ba-914d-71b01a1cf4e8.roa File: a23941ce-43cb-38ba-914d-71b01a1cf4e8.roa (raw, json) Hash identifier: fVk6GrEhG5OG8SrVQUTPL8CSuL71BDObfrWK3VVR/JQ= Subject key identifier: 8B:6A:EE:14:FE:D6:01:A2:2E:DE:70:ED:A7:20:D5:1B:7A:A8:8D:E3 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F92E87DA061D814CE2020 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a23941ce-43cb-38ba-914d-71b01a1cf4e8.roa Signing time: Fri 24 Apr 2026 23:22:55 +0000 ROA not before: Fri 24 Apr 2026 23:22:55 +0000 ROA not after: Thu 23 Jul 2026 23:22:55 +0000 asID: 20001 IP address blocks: 64.16.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:92:e8:7d:a0:61:d8:14:ce:20:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:55 2026 GMT Not After : Jul 23 23:22:55 2026 GMT Subject: CN=4bebc53a-089e-440b-915f-06d82c8b5669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a3:51:f9:80:d0:55:74:26:54:a4:f0:8a:66: e2:e3:9e:81:c0:f2:2b:06:45:9f:cc:df:00:1c:69: 00:c4:d9:7c:4e:4c:e4:d9:56:c9:15:ba:90:94:9c: c8:c1:17:91:e6:ed:8b:b0:90:0e:1c:90:44:4b:bb: 32:3c:46:6c:b0:2a:fa:ba:05:ca:d0:99:47:59:aa: 5b:57:35:1d:20:70:d4:67:8e:c3:f3:3a:1f:dd:e4: f8:16:1c:10:93:4c:3d:f7:aa:d2:76:83:67:10:44: 25:e4:f6:b8:05:99:2f:3b:dc:80:8c:33:a1:f4:25: 28:e7:c2:76:eb:50:45:31:a5:34:8b:00:a4:02:0b: f5:59:05:6b:07:07:8d:6e:38:f0:f3:9e:1e:27:d4: ed:01:bb:19:af:92:4c:73:80:45:4f:1e:c6:af:2d: df:0d:7a:a0:2a:9b:f9:a3:7b:2a:af:0b:69:28:f7: 7f:3b:4f:48:02:ac:12:69:10:b5:57:93:ed:16:dc: 82:50:f1:b5:3f:b4:7f:f9:8f:a9:92:fb:e9:fb:b7: ff:75:5f:34:a8:a6:c5:07:fe:a1:eb:db:aa:15:9e: af:c7:48:62:26:ac:ec:cf:d4:8a:e4:36:14:c8:8c: fb:da:ca:fa:93:68:d2:fb:33:26:00:70:47:d7:aa: 9a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6A:EE:14:FE:D6:01:A2:2E:DE:70:ED:A7:20:D5:1B:7A:A8:8D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a23941ce-43cb-38ba-914d-71b01a1cf4e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:bc:d6:06:47:6b:b8:f4:6a:78:63:c9:6e:ea:0c:46:37:cb: 20:bc:2e:d1:a4:85:f9:4c:40:76:f4:95:28:8c:19:b3:89:fa: 98:e5:60:54:cc:ae:4c:73:76:7b:0a:84:2b:67:57:45:79:6e: a2:71:a5:58:34:fc:fb:9c:6d:26:e9:33:79:18:47:2b:23:27: 91:4f:13:4f:7e:4b:58:1a:bc:eb:63:97:c0:48:3f:fb:23:f9: 8a:93:1b:31:ae:6a:76:18:7d:91:cd:27:28:17:9e:81:0e:3e: 02:43:2b:ce:b4:ba:4b:97:0d:05:01:c4:a7:d9:40:3a:98:a6: 87:dc:b8:86:92:29:f3:7c:9e:f9:20:98:7f:38:a6:86:d8:7c: db:4e:f8:59:d4:e0:d0:ad:37:46:ff:89:6e:05:f4:27:6c:55: b5:d8:4c:dc:57:69:24:13:3c:e8:8c:6f:27:0b:ba:da:37:c6: 76:d4:7e:1c:eb:9c:28:fe:b4:fe:3a:c1:a3:fd:58:ba:d2:25: a7:31:0b:6c:dd:06:90:ff:0b:ec:04:98:63:42:58:f9:87:e1: 71:3a:95:4d:a4:c3:23:a6:7b:0f:ed:21:0a:f5:20:e9:66:59: 73:03:9d:f5:2a:34:cd:c2:95:c7:d5:aa:a8:34:5b:a5:2b:a6: 84:0a:23:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH5LofaBh2BTOICAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjI1NVoXDTI2MDcyMzIzMjI1NVowLzEtMCsGA1UEAxMk NGJlYmM1M2EtMDg5ZS00NDBiLTkxNWYtMDZkODJjOGI1NjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKNR+YDQVXQmVKTwimbi456BwPIrBkWfzN8A HGkAxNl8Tkzk2VbJFbqQlJzIwReR5u2LsJAOHJBES7syPEZssCr6ugXK0JlHWapb VzUdIHDUZ47D8zof3eT4FhwQk0w996rSdoNnEEQl5Pa4BZkvO9yAjDOh9CUo58J2 61BFMaU0iwCkAgv1WQVrBweNbjjw854eJ9TtAbsZr5JMc4BFTx7Gry3fDXqgKpv5 o3sqrwtpKPd/O09IAqwSaRC1V5PtFtyCUPG1P7R/+Y+pkvvp+7f/dV80qKbFB/6h 69uqFZ6vx0hiJqzsz9SK5DYUyIz72sr6k2jS+zMmAHBH16qabQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItq7hT+1gGiLt5w7acg1Rt6qI3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTIzOTQxY2UtNDNjYi0z OGJhLTkxNGQtNzFiMDFhMWNmNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm81gZHa7j0anhjyW7qDEY3yyC8LtGkhflMQHb0lSiMGbOJ+pjlYFTM rkxzdnsKhCtnV0V5bqJxpVg0/PucbSbpM3kYRysjJ5FPE09+S1gavOtjl8BIP/sj +YqTGzGuanYYfZHNJygXnoEOPgJDK860ukuXDQUBxKfZQDqYpofcuIaSKfN8nvkg mH84pobYfNtO+FnU4NCtN0b/iW4F9CdsVbXYTNxXaSQTPOiMbycLuto3xnbUfhzr nCj+tP46waP9WLrSJacxC2zdBpD/C+wEmGNCWPmH4XE6lU2kwyOmew/tIQr1IOlm WXMDnfUqNM3ClcfVqqg0W6UrpoQKIzA= -----END CERTIFICATE-----Generated at Wed May 13 08:35:30 2026 by rpki-client