$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a49d0180-d5c9-3a29-8d7a-9eca74c4b314.roa File: a49d0180-d5c9-3a29-8d7a-9eca74c4b314.roa (raw, json) Hash identifier: LJQ2CVu/qsS4xE3+EdXM0oZUyMn0LMwXrI0hh4ST66w= Subject key identifier: 38:83:B1:D8:B8:40:AB:A1:AD:9F:AB:62:F8:A7:E7:07:D8:B6:1C:69 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1FC915A6C2FE2AC17AA700 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a49d0180-d5c9-3a29-8d7a-9eca74c4b314.roa Signing time: Fri 24 Apr 2026 23:23:20 +0000 ROA not before: Fri 24 Apr 2026 23:23:20 +0000 ROA not after: Thu 23 Jul 2026 23:23:20 +0000 asID: 397630 IP address blocks: 64.16.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:c9:15:a6:c2:fe:2a:c1:7a:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:20 2026 GMT Not After : Jul 23 23:23:20 2026 GMT Subject: CN=225abba4-560d-410d-9915-8909b973e9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:90:c3:26:f5:d0:08:69:70:e1:bc:42:af: e7:92:ea:bc:9d:36:8c:e8:f7:8b:ef:c2:55:9f:3d: 7b:02:4f:5b:6d:92:7f:3f:63:5e:7d:80:ff:11:d0: e5:d5:ff:7f:dd:cc:19:56:ba:15:03:01:b0:a7:06: 0e:c0:e0:1b:17:db:84:5d:5d:97:3f:0d:d4:6c:b5: bf:dc:87:13:83:95:1e:8a:37:b1:01:41:58:85:c2: 7b:32:33:82:c3:1b:63:60:49:19:6d:ea:f5:27:1e: 47:62:2b:9f:51:84:1d:3c:22:22:da:81:db:e4:75: 9e:3d:13:00:82:e1:8d:14:40:2b:9e:2d:28:ff:0f: 4d:c0:df:0d:56:57:3a:e2:52:fe:c6:8f:39:68:e4: 4c:93:21:ee:8d:f7:df:38:a8:d4:02:d7:4e:b2:f9: 3c:45:84:d2:90:f4:87:63:b2:b5:22:3e:77:b8:c1: 00:b7:d2:25:fa:06:7a:d0:34:05:d3:8e:de:bd:4b: 0b:ad:7c:96:63:37:1d:86:93:74:17:d6:67:8a:d1: 02:d1:a8:67:16:fa:2d:cc:28:a1:2e:9b:8e:76:d4: 51:88:cb:7c:5f:d4:08:5f:88:95:de:e0:c1:bc:38: 10:9e:30:4f:d2:18:d0:7e:ab:1c:be:9f:79:00:b2: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:83:B1:D8:B8:40:AB:A1:AD:9F:AB:62:F8:A7:E7:07:D8:B6:1C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a49d0180-d5c9-3a29-8d7a-9eca74c4b314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d1:42:d4:ea:ae:8a:3b:33:7e:67:db:55:fb:8f:04:93:a5: db:f2:c9:1c:2a:87:35:f9:d4:1e:00:38:c9:4c:e4:ea:22:ba: b9:d5:81:4b:e2:78:ab:32:dc:80:e5:d6:0f:39:f5:bd:03:99: 57:18:ca:b2:89:7a:0f:33:b0:b9:17:11:68:1b:a4:ba:c5:ef: 92:4c:02:f0:30:e4:b8:20:79:1f:49:2b:0b:3e:2a:b6:0d:1b: a8:3f:b4:24:f9:17:da:0c:e1:a1:78:b4:57:0f:86:54:06:ce: 3c:5b:cb:09:a5:10:2b:34:bd:dd:5f:ec:64:3f:aa:94:6c:74: 39:b7:b8:02:a5:a4:c7:84:09:fe:c0:d0:f1:1f:b7:ff:a1:ef: 2d:3e:8e:a6:6c:28:1b:e1:2b:75:47:48:ba:2e:bf:e3:ff:ae: 88:58:d1:5b:56:9f:41:57:d4:e4:b7:e9:5b:65:c8:f6:0f:f3: d1:71:cb:6a:17:a5:c7:1f:79:08:a0:80:71:05:ca:79:b9:cd: 48:41:3e:04:8f:2d:1e:93:25:11:4c:31:23:80:af:50:39:22: 65:bf:df:f2:88:e1:f7:d9:46:27:40:51:4c:90:af:8e:a4:40: e7:6f:30:c0:ca:e4:cd:20:d8:f7:1a:11:af:cd:c3:6c:e8:22: 38:33:87:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH8kVpsL+KsF6pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjMyMFoXDTI2MDcyMzIzMjMyMFowLzEtMCsGA1UEAxMk MjI1YWJiYTQtNTYwZC00MTBkLTk5MTUtODkwOWI5NzNlOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6iQwyb10AhpcOG8Qq/nkuq8nTaM6PeL78JV nz17Ak9bbZJ/P2NefYD/EdDl1f9/3cwZVroVAwGwpwYOwOAbF9uEXV2XPw3UbLW/ 3IcTg5UeijexAUFYhcJ7MjOCwxtjYEkZber1Jx5HYiufUYQdPCIi2oHb5HWePRMA guGNFEArni0o/w9NwN8NVlc64lL+xo85aORMkyHujfffOKjUAtdOsvk8RYTSkPSH Y7K1Ij53uMEAt9Il+gZ60DQF047evUsLrXyWYzcdhpN0F9ZnitEC0ahnFvotzCih LpuOdtRRiMt8X9QIX4iV3uDBvDgQnjBP0hjQfqscvp95ALKOkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiDsdi4QKuhrZ+rYvin5wfYthxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTQ5ZDAxODAtZDVjOS0z YTI5LThkN2EtOWVjYTc0YzRiMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7RQtTqroo7M35n21X7jwSTpdvyyRwqhzX51B4AOMlM5OoiurnVgUvi eKsy3IDl1g859b0DmVcYyrKJeg8zsLkXEWgbpLrF75JMAvAw5LggeR9JKws+KrYN G6g/tCT5F9oM4aF4tFcPhlQGzjxbywmlECs0vd1f7GQ/qpRsdDm3uAKlpMeECf7A 0PEft/+h7y0+jqZsKBvhK3VHSLouv+P/rohY0VtWn0FX1OS36VtlyPYP89Fxy2oX pccfeQiggHEFynm5zUhBPgSPLR6TJRFMMSOAr1A5ImW/3/KI4ffZRidAUUyQr46k QOdvMMDK5M0g2PcaEa/Nw2zoIjgzh2o= -----END CERTIFICATE-----Generated at Wed May 13 10:36:52 2026 by rpki-client