$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a5f393d2-3dfc-365d-b786-29802417a9a8.roa File: a5f393d2-3dfc-365d-b786-29802417a9a8.roa (raw, json) Hash identifier: UMfVHmXEKqdMH+DxCDYoRVIFvzti9je7EJCASWkuuzg= Subject key identifier: FE:87:EC:40:97:95:C8:E8:11:7B:44:B2:0A:18:12:75:F8:20:BC:E9 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F49EFAEAEACC27E550250 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a5f393d2-3dfc-365d-b786-29802417a9a8.roa Signing time: Fri 24 Apr 2026 23:22:20 +0000 ROA not before: Fri 24 Apr 2026 23:22:20 +0000 ROA not after: Thu 23 Jul 2026 23:22:20 +0000 asID: 20001 IP address blocks: 64.16.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:49:ef:ae:ae:ac:c2:7e:55:02:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:20 2026 GMT Not After : Jul 23 23:22:20 2026 GMT Subject: CN=76f12f3c-925e-4511-95ba-18bf1b9c8aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5b:67:b1:e5:05:33:2f:6a:48:ac:a2:bb:6d: f5:18:97:80:f7:c9:a1:44:97:74:e0:a1:ca:cc:96: 72:e0:61:5e:37:26:13:01:56:1b:92:c3:7d:22:14: 40:9e:56:06:bc:8f:6b:6d:85:26:cd:de:da:8c:0d: 3b:1d:99:04:16:b2:bf:42:01:84:7c:8e:b3:4f:23: 24:1f:bf:73:72:d4:eb:9e:9c:07:28:bd:58:1f:e7: 60:20:33:1b:8b:0f:97:5c:85:52:7a:9e:9e:d5:56: 1c:13:61:d7:34:e4:1e:88:09:6a:33:77:9a:11:78: e5:dd:a6:c2:c1:bd:20:88:0d:0c:c4:e3:aa:f1:26: c9:ff:89:1f:f5:92:62:5b:91:d7:01:d5:01:4f:49: 26:05:58:46:e8:f4:59:71:24:18:ec:5e:0f:d6:8c: 2f:61:65:df:e8:a4:c3:e1:02:97:ec:14:fc:cd:eb: a1:46:16:4e:41:ce:21:ff:0d:ff:2f:fe:a4:5b:58: 00:6e:d5:39:c3:a5:98:ef:9c:ba:16:29:ea:d8:f4: ae:9a:50:ea:51:58:62:2d:25:0e:3e:ee:e5:49:d1: 45:16:d3:9d:89:6f:68:2c:bb:ce:60:7e:32:b2:50: b2:75:c8:11:0d:81:97:72:53:d7:63:8d:23:a8:48: bd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:87:EC:40:97:95:C8:E8:11:7B:44:B2:0A:18:12:75:F8:20:BC:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a5f393d2-3dfc-365d-b786-29802417a9a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d4:87:d8:49:6e:5c:52:39:7c:f0:37:73:fe:c3:76:4f:e4: 53:7e:26:86:bb:4a:f4:2b:f2:10:55:56:ae:b6:23:95:7b:38: 56:53:96:25:90:66:c4:4c:1c:36:08:4f:bf:b2:62:cc:6a:af: 6b:94:30:f3:60:1b:2a:f4:6d:b4:ab:ee:fd:67:0d:89:08:ea: a0:3a:f8:6d:04:5d:17:d4:3c:e9:af:27:0a:b1:87:8a:3c:73: ed:6b:2a:45:79:6e:ee:4d:fb:c4:76:fc:a5:91:16:e4:ff:62: 29:31:73:a7:1e:cc:c1:15:41:05:ef:3e:24:6d:dc:b6:5f:2a: d3:0f:61:56:c6:6a:05:7c:7d:2f:2e:ec:fc:e9:b6:0a:e5:6c: 2f:e0:02:99:22:f3:56:2b:ac:0c:81:37:d4:19:71:ba:37:79: 16:fd:a3:7f:c8:90:cb:64:86:a6:27:71:b7:0b:6b:cc:e5:cb: a3:1c:8d:24:bf:dc:e0:8c:0a:75:3a:32:97:8a:7e:49:ca:73: 8c:26:2f:bc:0c:f9:0c:c9:de:e7:7e:3c:c4:b7:4e:36:bd:10: f3:5a:eb:5d:bf:ff:84:87:26:47:45:58:70:9b:2d:e2:9f:f6: 95:99:f7:9f:90:14:28:9d:d7:26:02:cd:65:b5:7d:2b:1e:d1: e5:7d:52:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH0nvrq6swn5VAlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIyMFoXDTI2MDcyMzIzMjIyMFowLzEtMCsGA1UEAxMk NzZmMTJmM2MtOTI1ZS00NTExLTk1YmEtMThiZjFiOWM4YWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVtnseUFMy9qSKyiu231GJeA98mhRJd04KHK zJZy4GFeNyYTAVYbksN9IhRAnlYGvI9rbYUmzd7ajA07HZkEFrK/QgGEfI6zTyMk H79zctTrnpwHKL1YH+dgIDMbiw+XXIVSep6e1VYcE2HXNOQeiAlqM3eaEXjl3abC wb0giA0MxOOq8SbJ/4kf9ZJiW5HXAdUBT0kmBVhG6PRZcSQY7F4P1owvYWXf6KTD 4QKX7BT8zeuhRhZOQc4h/w3/L/6kW1gAbtU5w6WY75y6Finq2PSumlDqUVhiLSUO Pu7lSdFFFtOdiW9oLLvOYH4yslCydcgRDYGXclPXY40jqEi9OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6H7ECXlcjoEXtEsgoYEnX4ILzpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTVmMzkzZDItM2RmYy0z NjVkLWI3ODYtMjk4MDI0MTdhOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBClMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/Uh9hJblxSOXzwN3P+w3ZP5FN+Joa7SvQr8hBVVq62I5V7OFZTliWQ ZsRMHDYIT7+yYsxqr2uUMPNgGyr0bbSr7v1nDYkI6qA6+G0EXRfUPOmvJwqxh4o8 c+1rKkV5bu5N+8R2/KWRFuT/Yikxc6cezMEVQQXvPiRt3LZfKtMPYVbGagV8fS8u 7PzptgrlbC/gApki81YrrAyBN9QZcbo3eRb9o3/IkMtkhqYncbcLa8zly6McjSS/ 3OCMCnU6MpeKfknKc4wmL7wM+QzJ3ud+PMS3Tja9EPNa612//4SHJkdFWHCbLeKf 9pWZ95+QFCid1yYCzWW1fSse0eV9Uhs= -----END CERTIFICATE-----Generated at Wed May 13 09:54:47 2026 by rpki-client