$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/abf4f35a-af0f-3ff9-abe6-a9a54ea2031d.roa File: abf4f35a-af0f-3ff9-abe6-a9a54ea2031d.roa (raw, json) Hash identifier: nFv7EcK5ftFQW9adPZp/CeiD/4ExU6DX3espTM/HMPE= Subject key identifier: 74:EB:9E:0D:07:C1:55:C2:D5:87:99:E6:FB:E7:8D:C5:B0:43:02:57 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1FA88C43BCDAC4D40B4380 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/abf4f35a-af0f-3ff9-abe6-a9a54ea2031d.roa Signing time: Fri 24 Apr 2026 23:23:05 +0000 ROA not before: Fri 24 Apr 2026 23:23:05 +0000 ROA not after: Thu 23 Jul 2026 23:23:05 +0000 asID: 397630 IP address blocks: 64.16.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:a8:8c:43:bc:da:c4:d4:0b:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:05 2026 GMT Not After : Jul 23 23:23:05 2026 GMT Subject: CN=4d1b2da1-e1f3-443e-b99f-8b56456dbe51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:36:1c:f7:4b:d9:6a:1e:c3:9b:d0:98:39:e0: 77:79:00:2d:f2:65:28:f5:c5:df:63:7d:ae:2f:cf: 0d:c3:3f:df:a4:33:ad:6b:99:55:81:aa:22:10:5b: d8:72:60:51:fc:37:bf:79:5a:a2:ae:c5:cc:2c:1b: e2:4e:6d:b6:df:91:da:59:a1:fa:de:f9:7c:59:24: 9d:9a:bc:69:dc:88:46:7e:52:d1:8a:04:f5:9a:93: 1e:8d:4e:e7:89:03:18:2b:ab:0f:5d:75:b5:07:a0: ae:b9:a7:cd:5c:e2:cb:6b:0b:1b:23:d2:0d:86:1f: 2e:61:1a:5e:4b:1a:1a:57:46:18:02:f2:38:43:45: 90:97:d4:72:70:2f:d8:71:2a:cc:e1:df:db:f6:48: 08:2c:e0:07:4e:49:94:4f:57:af:21:9e:b9:17:ba: 30:c8:01:5d:e8:3f:25:95:b9:a4:68:3b:c9:50:bb: d1:17:f0:25:89:60:00:99:ca:ed:d4:07:cb:0f:40: c4:be:18:3e:66:f8:da:f8:b6:d3:6c:f0:40:a8:0a: 3f:6b:6f:59:b5:c1:6e:04:eb:64:75:95:05:b2:20: ee:ea:97:3c:d1:f5:bb:58:ae:a1:53:c1:6d:82:8e: 3c:72:f5:f2:43:11:d7:54:9b:5d:2d:3e:4e:ac:df: cb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EB:9E:0D:07:C1:55:C2:D5:87:99:E6:FB:E7:8D:C5:B0:43:02:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/abf4f35a-af0f-3ff9-abe6-a9a54ea2031d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e3:76:e3:65:f7:c3:7f:e7:31:60:50:ca:5b:e3:a5:cf:46: 4f:c2:b4:69:e7:fa:be:63:35:9c:81:43:a7:6a:97:eb:28:2b: 4b:84:01:35:f5:9d:e0:bc:88:e0:a6:b8:b6:f9:a4:c0:96:45: 7a:37:c2:c7:9d:7e:6f:15:78:19:8b:4f:8c:11:6a:8a:1b:a9: 8a:57:c8:30:ed:a7:67:0a:bd:ea:60:b2:0a:1e:db:03:7b:f7: 70:7e:e2:92:31:e6:ca:da:6c:f4:f9:bd:64:f0:1c:87:fc:4d: 45:ed:43:4f:4e:9e:65:67:77:ed:b0:33:d8:fa:be:04:1e:69: 1c:91:d8:68:05:f6:07:47:e5:c9:42:39:ae:94:db:05:af:da: 3c:1a:75:82:de:d1:09:30:ae:f9:b4:9f:21:1e:82:35:29:bc: 1f:2b:37:84:55:d0:0e:4d:4e:2d:85:78:e1:33:e4:9d:70:0d: 52:89:74:e0:9c:2e:22:53:8b:a7:02:ad:44:12:74:18:91:b0: e5:56:77:25:92:7c:8a:9d:62:5a:90:02:a8:57:d1:f8:0a:58: 11:43:64:ec:91:83:f7:8e:fe:d0:a5:93:57:42:4f:37:26:cb: 74:35:4b:95:92:1f:18:39:48:c4:38:47:86:27:27:87:4e:e1: 2a:1d:04:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH6iMQ7zaxNQLQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjMwNVoXDTI2MDcyMzIzMjMwNVowLzEtMCsGA1UEAxMk NGQxYjJkYTEtZTFmMy00NDNlLWI5OWYtOGI1NjQ1NmRiZTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTYc90vZah7Dm9CYOeB3eQAt8mUo9cXfY32u L88Nwz/fpDOta5lVgaoiEFvYcmBR/De/eVqirsXMLBviTm2235HaWaH63vl8WSSd mrxp3IhGflLRigT1mpMejU7niQMYK6sPXXW1B6CuuafNXOLLawsbI9INhh8uYRpe SxoaV0YYAvI4Q0WQl9RycC/YcSrM4d/b9kgILOAHTkmUT1evIZ65F7owyAFd6D8l lbmkaDvJULvRF/AliWAAmcrt1AfLD0DEvhg+Zvja+LbTbPBAqAo/a29ZtcFuBOtk dZUFsiDu6pc80fW7WK6hU8Ftgo48cvXyQxHXVJtdLT5OrN/LEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTrng0HwVXC1YeZ5vvnjcWwQwJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYWJmNGYzNWEtYWYwZi0z ZmY5LWFiZTYtYTlhNTRlYTIwMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbjduNl98N/5zFgUMpb46XPRk/CtGnn+r5jNZyBQ6dql+soK0uEATX1 neC8iOCmuLb5pMCWRXo3wsedfm8VeBmLT4wRaoobqYpXyDDtp2cKvepgsgoe2wN7 93B+4pIx5srabPT5vWTwHIf8TUXtQ09OnmVnd+2wM9j6vgQeaRyR2GgF9gdH5clC Oa6U2wWv2jwadYLe0Qkwrvm0nyEegjUpvB8rN4RV0A5NTi2FeOEz5J1wDVKJdOCc LiJTi6cCrUQSdBiRsOVWdyWSfIqdYlqQAqhX0fgKWBFDZOyRg/eO/tClk1dCTzcm y3Q1S5WSHxg5SMQ4R4YnJ4dO4SodBFc= -----END CERTIFICATE-----Generated at Wed May 13 12:25:04 2026 by rpki-client