$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a83d5989-d430-31f8-981f-0a240528c7b0.roa File: a83d5989-d430-31f8-981f-0a240528c7b0.roa (raw, json) Hash identifier: qIdYL8MzacC+x052SMZxazyUIhCke1FlDzjGEkqQino= Subject key identifier: 81:29:14:F4:B7:C6:66:73:7A:CE:4F:DA:47:D9:2C:3A:64:95:C9:A8 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1E74BD89AA7A53952B5700 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a83d5989-d430-31f8-981f-0a240528c7b0.roa Signing time: Fri 24 Apr 2026 23:20:40 +0000 ROA not before: Fri 24 Apr 2026 23:20:40 +0000 ROA not after: Thu 23 Jul 2026 23:20:40 +0000 asID: 7029 IP address blocks: 64.16.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:74:bd:89:aa:7a:53:95:2b:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:20:40 2026 GMT Not After : Jul 23 23:20:40 2026 GMT Subject: CN=0ea0410e-83f4-496a-9415-71c7174edcee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7a:45:bf:1b:94:47:02:fd:a3:e3:09:9e:22: 2a:da:ae:7f:7f:ab:a5:93:42:38:fd:e9:17:9e:0e: e3:25:b9:38:4a:89:9b:66:9d:e8:32:ba:de:04:3f: 48:98:28:74:27:ab:15:85:07:80:70:d5:25:e1:fb: af:43:09:99:6f:d3:24:5f:cf:d6:02:e9:a9:b0:71: 57:9f:db:24:a6:a1:ae:83:35:ba:b2:40:44:14:24: 91:8f:31:39:9e:09:bc:87:42:87:a3:87:97:03:f2: 3f:1f:fd:e0:e8:63:51:98:9d:7e:9a:65:f4:ad:66: 9d:55:9b:8d:4b:36:95:94:2c:d9:87:54:b2:3f:c3: dd:93:72:93:6c:73:8b:b1:11:e9:d1:63:f7:70:7b: cd:98:53:5a:14:60:95:00:49:36:15:f1:f2:ac:f5: ce:40:1e:3c:5e:b2:06:60:30:e8:78:bb:c1:92:46: 09:9f:e9:74:ef:23:65:83:b0:90:ba:07:ce:29:91: e8:65:c2:07:02:9a:62:17:89:8d:2a:0b:65:88:1d: d1:40:fa:a5:c1:0f:ef:91:7b:e5:0b:c3:34:7c:7b: e2:41:8e:ea:95:fa:cd:e1:66:f6:da:a8:9f:04:12: 4f:3b:8c:f5:3b:ab:cd:64:b8:67:ba:da:46:52:9d: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:29:14:F4:B7:C6:66:73:7A:CE:4F:DA:47:D9:2C:3A:64:95:C9:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a83d5989-d430-31f8-981f-0a240528c7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:5f:3e:92:b0:2f:44:e7:2b:54:e2:53:29:28:7d:c3:99:f0: ed:98:9e:26:1a:f6:ee:9d:b2:1c:11:58:1a:7d:e3:36:f3:a5: b9:19:8a:c8:4b:b7:96:53:83:27:df:bf:5e:ac:c1:c3:39:19: 66:d6:38:20:e6:21:2b:f9:3a:5e:03:28:34:7f:f3:0f:aa:2b: 71:30:5e:f0:3d:3a:62:fc:75:d7:58:ed:d2:34:28:78:43:b2: 2b:a3:1d:b6:8e:2f:e9:dc:f9:c8:a7:a0:95:27:72:75:db:6b: 48:81:72:af:5e:f5:30:9f:9b:59:7a:9d:e6:6e:48:38:7b:17: 17:f8:a1:09:3a:de:f5:04:ae:6a:d4:4e:18:de:a4:15:f4:55: 1a:20:0b:b2:c1:4a:a3:94:0f:39:96:1f:df:cc:a3:5f:0a:87: 82:5a:d7:c7:37:2c:fe:b8:37:b3:6d:66:2c:d7:94:5d:27:5a: da:b5:71:3b:76:22:4f:76:28:aa:ac:b2:65:07:b0:d5:5a:66: 8b:18:d7:f7:c3:fc:4c:41:09:a5:ef:de:4f:69:91:47:2d:86: 3b:fb:17:ec:56:db:a1:23:d1:ca:63:04:7c:3c:1f:1f:d9:5e: 5e:e6:84:b9:f3:ea:64:cd:82:42:37:70:e3:fc:b9:8b:10:6a: 17:17:0b:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHnS9iap6U5UrVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjA0MFoXDTI2MDcyMzIzMjA0MFowLzEtMCsGA1UEAxMk MGVhMDQxMGUtODNmNC00OTZhLTk0MTUtNzFjNzE3NGVkY2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXpFvxuURwL9o+MJniIq2q5/f6ulk0I4/ekX ng7jJbk4SombZp3oMrreBD9ImCh0J6sVhQeAcNUl4fuvQwmZb9MkX8/WAumpsHFX n9skpqGugzW6skBEFCSRjzE5ngm8h0KHo4eXA/I/H/3g6GNRmJ1+mmX0rWadVZuN SzaVlCzZh1SyP8Pdk3KTbHOLsRHp0WP3cHvNmFNaFGCVAEk2FfHyrPXOQB48XrIG YDDoeLvBkkYJn+l07yNlg7CQugfOKZHoZcIHAppiF4mNKgtliB3RQPqlwQ/vkXvl C8M0fHviQY7qlfrN4Wb22qifBBJPO4z1O6vNZLhnutpGUp21JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEpFPS3xmZzes5P2kfZLDpklcmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTgzZDU5ODktZDQzMC0z MWY4LTk4MWYtMGEyNDA1MjhjN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBfPpKwL0TnK1TiUykofcOZ8O2YniYa9u6dshwRWBp94zbzpbkZishL t5ZTgyffv16swcM5GWbWOCDmISv5Ol4DKDR/8w+qK3EwXvA9OmL8dddY7dI0KHhD siujHbaOL+nc+cinoJUncnXba0iBcq9e9TCfm1l6neZuSDh7Fxf4oQk63vUErmrU ThjepBX0VRogC7LBSqOUDzmWH9/Mo18Kh4Ja18c3LP64N7NtZizXlF0nWtq1cTt2 Ik92KKqssmUHsNVaZosY1/fD/ExBCaXv3k9pkUcthjv7F+xW26Ej0cpjBHw8Hx/Z Xl7mhLnz6mTNgkI3cOP8uYsQahcXC9Q= -----END CERTIFICATE-----Generated at Wed May 13 13:45:51 2026 by rpki-client