$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a59d35f4-475c-3111-bfe5-3dc5741fa2aa.roa File: a59d35f4-475c-3111-bfe5-3dc5741fa2aa.roa (raw, json) Hash identifier: h5xUoo9fjJrZI+bz8nIyrhVkn1K/gX/+pRh1x322uuM= Subject key identifier: 06:7C:C1:1E:30:A5:38:10:81:06:8A:FD:A7:9F:37:0A:4D:D8:A2:7F Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F3C6355E1398184E762C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a59d35f4-475c-3111-bfe5-3dc5741fa2aa.roa Signing time: Fri 24 Apr 2026 23:22:14 +0000 ROA not before: Fri 24 Apr 2026 23:22:14 +0000 ROA not after: Thu 23 Jul 2026 23:22:14 +0000 asID: 20001 IP address blocks: 64.16.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:3c:63:55:e1:39:81:84:e7:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:14 2026 GMT Not After : Jul 23 23:22:14 2026 GMT Subject: CN=1f1f20b3-2d51-4c13-bfc6-e62c45225510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:87:ab:ac:29:ad:63:22:ea:4e:2c:c0:6a:69: f3:95:8f:0d:3c:a4:b2:9f:1d:03:70:be:c7:98:77: 1f:db:25:66:10:2e:2d:40:6e:49:42:e4:ac:a3:97: 60:43:7f:3a:b7:f6:49:fa:7d:d9:f5:49:96:fc:fe: cc:bd:37:15:71:4a:a5:36:67:98:3a:fb:ce:5f:6f: b1:e1:b7:9d:3a:c0:98:ff:ae:0b:57:24:32:3c:bf: 4a:f0:02:58:9e:39:98:d7:ec:f0:5c:97:14:db:1e: 95:bb:72:43:5d:ac:b7:f6:d3:c5:00:32:27:c6:3f: 94:53:cf:8b:73:cd:95:99:1f:b3:fe:44:ff:b6:b8: bf:c2:a3:58:17:eb:07:fd:7d:42:ad:7c:94:62:d0: e3:cb:92:7b:7a:61:13:a9:a2:2c:91:12:16:ad:a0: bc:b1:5f:b0:28:be:8a:38:9e:f2:6a:56:66:af:d2: 4e:15:aa:3a:88:1f:99:9b:ca:c7:cf:95:bf:fc:4a: 62:52:b2:15:21:07:ff:8a:e6:16:44:85:79:8c:23: 25:0f:af:22:3a:b9:3e:46:fc:51:8e:de:56:4b:a2: f2:20:6a:44:01:ba:5a:13:7b:38:25:b0:01:7e:32: ef:3f:27:fc:45:7a:ff:1e:98:78:44:45:80:83:60: da:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7C:C1:1E:30:A5:38:10:81:06:8A:FD:A7:9F:37:0A:4D:D8:A2:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a59d35f4-475c-3111-bfe5-3dc5741fa2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1f:e7:2e:ae:c0:12:68:39:e3:23:ad:c5:81:6a:67:13:ad: eb:b4:c1:41:27:db:e0:b0:e3:32:cc:25:fc:ea:c7:bd:ed:1d: 31:cb:2e:95:80:8e:d5:81:09:b8:c6:77:6e:73:d9:99:e9:d7: f1:60:47:b1:38:13:98:49:43:d1:89:15:14:20:c7:69:16:ef: 24:ab:9a:1f:f8:57:71:2e:ec:0e:47:2e:74:68:9d:c5:e9:6d: dc:b1:65:7b:2f:a9:d3:1d:13:80:e9:db:48:6b:b7:88:7a:a6: 35:fc:77:37:ff:7a:b8:9d:25:97:86:c1:84:7f:53:46:e3:79: 59:bc:da:f9:b1:e6:97:b6:7c:4b:f1:8c:bc:1b:69:5b:5d:06: 68:31:a0:75:81:d9:1a:41:4d:06:12:e1:59:78:d9:8f:a7:f7: 0a:36:c7:bb:fa:22:7e:0e:66:52:0d:b4:e0:a9:d6:95:2a:d5: 2c:98:6c:67:10:9b:7a:06:13:dc:10:7f:80:9d:64:4e:73:ca: 18:03:f4:67:4e:0f:b7:e0:b6:67:13:d4:5e:19:58:6f:57:b5: 2c:b5:32:e5:46:79:30:36:f4:c7:cc:b3:c1:05:c8:67:99:99: e0:7e:2a:c9:6e:98:f9:d8:32:4c:6a:09:f4:aa:6a:04:97:8c: 12:11:bb:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHzxjVeE5gYTnYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIxNFoXDTI2MDcyMzIzMjIxNFowLzEtMCsGA1UEAxMk MWYxZjIwYjMtMmQ1MS00YzEzLWJmYzYtZTYyYzQ1MjI1NTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4errCmtYyLqTizAamnzlY8NPKSynx0DcL7H mHcf2yVmEC4tQG5JQuSso5dgQ386t/ZJ+n3Z9UmW/P7MvTcVcUqlNmeYOvvOX2+x 4bedOsCY/64LVyQyPL9K8AJYnjmY1+zwXJcU2x6Vu3JDXay39tPFADInxj+UU8+L c82VmR+z/kT/tri/wqNYF+sH/X1CrXyUYtDjy5J7emETqaIskRIWraC8sV+wKL6K OJ7yalZmr9JOFao6iB+Zm8rHz5W//EpiUrIVIQf/iuYWRIV5jCMlD68iOrk+RvxR jt5WS6LyIGpEAbpaE3s4JbABfjLvPyf8RXr/Hph4REWAg2DaCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZ8wR4wpTgQgQaK/aefNwpN2KJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTU5ZDM1ZjQtNDc1Yy0z MTExLWJmZTUtM2RjNTc0MWZhMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYf5y6uwBJoOeMjrcWBamcTreu0wUEn2+Cw4zLMJfzqx73tHTHLLpWA jtWBCbjGd25z2Znp1/FgR7E4E5hJQ9GJFRQgx2kW7ySrmh/4V3Eu7A5HLnRoncXp bdyxZXsvqdMdE4Dp20hrt4h6pjX8dzf/eridJZeGwYR/U0bjeVm82vmx5pe2fEvx jLwbaVtdBmgxoHWB2RpBTQYS4Vl42Y+n9wo2x7v6In4OZlINtOCp1pUq1SyYbGcQ m3oGE9wQf4CdZE5zyhgD9GdOD7fgtmcT1F4ZWG9XtSy1MuVGeTA29MfMs8EFyGeZ meB+KslumPnYMkxqCfSqagSXjBIRu4w= -----END CERTIFICATE-----Generated at Wed May 13 06:56:16 2026 by rpki-client