$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a3796f5c-d560-3ed2-b2b1-b7e0af94121e.roa File: a3796f5c-d560-3ed2-b2b1-b7e0af94121e.roa (raw, json) Hash identifier: dT/GE1nnhSeQswGb2X0PR+OdADjQ+1e0/DCfZ/CK8dY= Subject key identifier: 6A:3C:53:BA:C8:13:A4:BD:EE:BA:BE:C8:1C:76:81:2B:8B:53:5A:AE Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E2032CFA034A6E21D7E2C60 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a3796f5c-d560-3ed2-b2b1-b7e0af94121e.roa Signing time: Fri 24 Apr 2026 23:24:10 +0000 ROA not before: Fri 24 Apr 2026 23:24:10 +0000 ROA not after: Thu 23 Jul 2026 23:24:10 +0000 asID: 397630 IP address blocks: 64.16.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:20:32:cf:a0:34:a6:e2:1d:7e:2c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:24:10 2026 GMT Not After : Jul 23 23:24:10 2026 GMT Subject: CN=1e8e5cdd-7180-4fb6-9039-d9d298f0e533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:10:b3:5b:a3:f0:15:c2:05:18:92:92:d0: 04:09:bd:4e:f0:66:93:a6:c9:10:ee:8d:46:87:04: 8e:16:ff:be:ff:b2:76:04:9d:72:47:9e:e6:fe:07: 07:cb:26:56:90:69:b2:1a:dd:c9:91:75:3c:8e:0c: 64:18:d0:74:89:34:2c:ab:cf:8a:77:bd:5f:8d:2c: df:2f:2a:6d:b8:62:c9:ab:ee:14:1c:cc:39:ed:25: 0c:f0:11:19:10:c1:20:e3:48:75:91:a6:0d:48:34: 0f:82:d1:23:d7:71:0c:74:19:7d:fe:11:f5:dc:13: 00:c0:a2:9f:9f:99:cc:bc:0d:b9:a0:c4:ec:a6:53: 49:2d:71:ac:45:46:8f:5c:50:d8:1e:a6:7d:de:2e: 6d:26:6c:f2:3b:9f:57:03:b8:34:29:5d:6b:db:0c: dc:0e:50:ef:12:90:17:0d:6a:c5:ed:42:fd:b3:ed: 7e:fe:e2:8a:b1:92:ff:d3:d0:d4:0a:95:81:c5:73: 97:8e:7a:03:7a:18:79:67:0f:19:b7:1d:dd:fa:d4: 31:37:eb:f5:6b:66:83:8b:ea:9b:e4:3b:5c:35:9e: 89:3b:0e:e7:64:1f:fc:05:5c:08:88:71:cb:5c:9d: e7:55:c3:02:0d:7e:cd:1b:eb:89:14:3f:64:31:c7: 60:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3C:53:BA:C8:13:A4:BD:EE:BA:BE:C8:1C:76:81:2B:8B:53:5A:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a3796f5c-d560-3ed2-b2b1-b7e0af94121e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:bf:3c:d6:bb:ae:fc:d7:c5:11:0e:06:e9:46:e0:63:d5:3f: 0f:ee:64:1e:df:89:8f:b0:d4:fa:da:88:af:b7:9f:85:00:db: a7:c0:23:32:dd:56:cb:86:54:5e:51:fc:bf:1b:a4:8a:00:ba: 2a:30:87:4a:01:c2:68:c7:96:d0:62:c2:11:83:91:ec:70:18: 3c:a1:dc:1b:fb:4f:c2:12:71:f4:4f:3c:f0:4c:6d:b5:77:04: 25:21:bb:50:de:a8:fc:b9:94:34:ef:80:02:b9:9c:2a:ef:1a: f6:94:13:b3:dd:27:e4:75:d2:89:3a:d7:32:df:16:43:b9:45: 47:fb:4f:32:69:60:12:6b:72:42:5e:02:88:7f:51:7e:93:8d: eb:20:d4:70:12:69:9c:3d:4c:19:13:5f:47:bb:ab:17:28:88: ea:40:30:4a:b4:16:8b:73:23:31:02:90:06:cf:fe:46:51:6a: 9c:f9:18:42:f8:11:9f:d1:bc:36:fc:af:b7:75:d0:69:03:9b: b8:c5:fd:8d:f0:83:a6:78:26:b6:04:1b:ab:18:66:b7:1e:10: 0d:25:09:ef:2d:0b:54:cd:22:b4:a3:89:79:77:5d:04:67:14: fa:97:19:d1:62:2c:5c:88:8b:2c:9a:96:de:08:9a:f8:39:e6: 99:ee:f9:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eIDLPoDSm4h1+LGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjQxMFoXDTI2MDcyMzIzMjQxMFowLzEtMCsGA1UEAxMk MWU4ZTVjZGQtNzE4MC00ZmI2LTkwMzktZDlkMjk4ZjBlNTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQoQs1uj8BXCBRiSktAECb1O8GaTpskQ7o1G hwSOFv++/7J2BJ1yR57m/gcHyyZWkGmyGt3JkXU8jgxkGNB0iTQsq8+Kd71fjSzf LyptuGLJq+4UHMw57SUM8BEZEMEg40h1kaYNSDQPgtEj13EMdBl9/hH13BMAwKKf n5nMvA25oMTsplNJLXGsRUaPXFDYHqZ93i5tJmzyO59XA7g0KV1r2wzcDlDvEpAX DWrF7UL9s+1+/uKKsZL/09DUCpWBxXOXjnoDehh5Zw8Ztx3d+tQxN+v1a2aDi+qb 5DtcNZ6JOw7nZB/8BVwIiHHLXJ3nVcMCDX7NG+uJFD9kMcdg+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGo8U7rIE6S97rq+yBx2gSuLU1quMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTM3OTZmNWMtZDU2MC0z ZWQyLWIyYjEtYjdlMGFmOTQxMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2/PNa7rvzXxREOBulG4GPVPw/uZB7fiY+w1PraiK+3n4UA26fAIzLd VsuGVF5R/L8bpIoAuiowh0oBwmjHltBiwhGDkexwGDyh3Bv7T8IScfRPPPBMbbV3 BCUhu1DeqPy5lDTvgAK5nCrvGvaUE7PdJ+R10ok61zLfFkO5RUf7TzJpYBJrckJe Aoh/UX6Tjesg1HASaZw9TBkTX0e7qxcoiOpAMEq0FotzIzECkAbP/kZRapz5GEL4 EZ/RvDb8r7d10GkDm7jF/Y3wg6Z4JrYEG6sYZrceEA0lCe8tC1TNIrSjiXl3XQRn FPqXGdFiLFyIiyyalt4Imvg55pnu+cU= -----END CERTIFICATE-----Generated at Wed May 13 10:20:49 2026 by rpki-client