$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a907043d-8870-3f2e-966e-1be6a52817cc.roa File: a907043d-8870-3f2e-966e-1be6a52817cc.roa (raw, json) Hash identifier: HmS2W3IJXL9EMja7l+DAnmrPFnYjPK5R5/rfaKSXcpI= Subject key identifier: 59:E8:83:70:07:78:10:E6:99:42:5E:C7:0B:EF:F2:59:4A:EC:E1:F2 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E20126F76BF868C9320FCC0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a907043d-8870-3f2e-966e-1be6a52817cc.roa Signing time: Fri 24 Apr 2026 23:23:55 +0000 ROA not before: Fri 24 Apr 2026 23:23:55 +0000 ROA not after: Thu 23 Jul 2026 23:23:55 +0000 asID: 397630 IP address blocks: 64.16.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:20:12:6f:76:bf:86:8c:93:20:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:55 2026 GMT Not After : Jul 23 23:23:55 2026 GMT Subject: CN=ba25426e-e2cd-4b57-9524-651ca9ab1885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:ab:2f:47:51:4f:d9:70:43:2c:a9:ef:bc: a7:1f:56:97:25:1d:33:8c:c3:63:e2:57:4f:b8:0f: c4:9f:09:1f:92:5f:73:22:63:03:36:27:86:95:46: 78:22:50:a3:6f:07:83:87:13:45:9f:5e:33:7c:93: 5e:76:c0:e2:82:17:d5:08:4e:ce:4b:36:af:49:87: 12:37:49:23:c7:3f:20:aa:6c:11:bb:55:e5:92:2d: 63:4a:17:01:a7:b2:3f:98:f3:ab:56:6f:4a:1a:c6: 2a:b1:23:88:67:6b:21:77:0c:95:32:a9:2d:6e:49: 4e:77:55:52:45:ce:93:77:4c:db:2c:8b:b7:f8:bd: b0:f9:94:04:ee:10:25:73:dd:da:88:18:c9:b8:e7: 6f:01:c6:3e:f5:d3:6b:73:8b:d1:f6:63:79:0c:34: 6a:14:3a:81:a6:a6:7a:a1:d8:fe:7b:e2:f3:cd:16: f7:8c:1d:cd:6f:09:30:45:fa:0f:ae:f5:2f:19:ae: ee:c5:8b:4e:47:fd:c2:ea:39:f6:3a:51:66:eb:3d: 03:d2:91:63:3d:a7:31:eb:0f:29:b1:19:b2:6c:63: 2e:84:cd:31:d2:1d:3c:3d:35:bf:8c:df:97:3f:13: 2c:cf:d0:12:9d:e1:9c:a1:0f:6b:28:b7:8a:be:b0: 88:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E8:83:70:07:78:10:E6:99:42:5E:C7:0B:EF:F2:59:4A:EC:E1:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/a907043d-8870-3f2e-966e-1be6a52817cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:42:29:54:22:ab:e9:53:ff:4b:08:e9:17:11:8e:22:c0:c5: ba:37:10:38:95:13:e5:ce:2f:2e:1e:cc:8a:d7:aa:56:cf:d2: 13:fa:4a:99:b1:85:09:01:5e:ca:95:b0:af:7b:7a:0e:85:c7: 99:ee:a3:be:cf:98:96:a1:bd:3d:a3:86:d4:27:37:1d:c7:dc: e6:92:4b:22:da:94:4f:45:66:34:88:09:9b:f7:3b:5a:af:5c: c6:45:55:c0:ad:57:dd:12:de:56:33:58:22:53:88:d6:e5:f0: 1d:5d:70:ce:a1:3c:fb:fa:b9:5c:d4:1d:7e:f9:6f:74:c2:61: fa:5e:dc:45:37:29:f8:2a:97:a1:6d:b0:ed:f8:8e:3d:b0:45: 34:e3:ec:cf:95:e8:63:7e:d1:97:73:52:33:f9:ec:0b:e8:2f: 0b:b6:2c:e5:8a:84:57:21:cd:11:2a:7b:51:09:de:dd:97:4e: 56:19:ac:6b:f9:92:01:a6:9b:35:94:22:5b:5c:a8:0c:33:6a: 49:d8:e6:78:78:7e:a2:d3:38:8d:16:ce:35:f1:94:27:d2:b4: 93:9d:a7:3b:90:3b:02:d8:0d:ef:90:2e:09:a0:48:e0:6b:0d: 6c:ca:23:b2:c1:f7:a8:a1:a4:29:3b:55:16:5b:46:b3:4b:18: 37:ce:6b:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eIBJvdr+GjJMg/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjM1NVoXDTI2MDcyMzIzMjM1NVowLzEtMCsGA1UEAxMk YmEyNTQyNmUtZTJjZC00YjU3LTk1MjQtNjUxY2E5YWIxODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8WrL0dRT9lwQyyp77ynH1aXJR0zjMNj4ldP uA/Enwkfkl9zImMDNieGlUZ4IlCjbweDhxNFn14zfJNedsDighfVCE7OSzavSYcS N0kjxz8gqmwRu1Xlki1jShcBp7I/mPOrVm9KGsYqsSOIZ2shdwyVMqktbklOd1VS Rc6Td0zbLIu3+L2w+ZQE7hAlc93aiBjJuOdvAcY+9dNrc4vR9mN5DDRqFDqBpqZ6 odj+e+LzzRb3jB3NbwkwRfoPrvUvGa7uxYtOR/3C6jn2OlFm6z0D0pFjPacx6w8p sRmybGMuhM0x0h08PTW/jN+XPxMsz9ASneGcoQ9rKLeKvrCICQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnog3AHeBDmmUJexwvv8llK7OHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYTkwNzA0M2QtODg3MC0z ZjJlLTk2NmUtMWJlNmE1MjgxN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxCKVQiq+lT/0sI6RcRjiLAxbo3EDiVE+XOLy4ezIrXqlbP0hP6Spmx hQkBXsqVsK97eg6Fx5nuo77PmJahvT2jhtQnNx3H3OaSSyLalE9FZjSICZv3O1qv XMZFVcCtV90S3lYzWCJTiNbl8B1dcM6hPPv6uVzUHX75b3TCYfpe3EU3Kfgql6Ft sO34jj2wRTTj7M+V6GN+0ZdzUjP57AvoLwu2LOWKhFchzREqe1EJ3t2XTlYZrGv5 kgGmmzWUIltcqAwzaknY5nh4fqLTOI0WzjXxlCfStJOdpzuQOwLYDe+QLgmgSOBr DWzKI7LB96ihpCk7VRZbRrNLGDfOa3s= -----END CERTIFICATE-----Generated at Wed May 13 11:55:38 2026 by rpki-client