$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/adf9349d-bef8-3006-8826-0a570987e422.roa File: adf9349d-bef8-3006-8826-0a570987e422.roa (raw, json) Hash identifier: ThCIPxURCdK8v16oUniK0UE6SVKHu8tPFj97ToXtOx8= Subject key identifier: 0C:3B:84:E6:8D:A2:55:71:94:E9:19:FB:76:95:93:73:54:FA:0F:B7 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1FBB68306239388DCD95C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/adf9349d-bef8-3006-8826-0a570987e422.roa Signing time: Fri 24 Apr 2026 23:23:14 +0000 ROA not before: Fri 24 Apr 2026 23:23:14 +0000 ROA not after: Thu 23 Jul 2026 23:23:14 +0000 asID: 397630 IP address blocks: 64.16.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:bb:68:30:62:39:38:8d:cd:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:14 2026 GMT Not After : Jul 23 23:23:14 2026 GMT Subject: CN=317988b7-0e98-4dbd-b114-c301ca669d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f7:e9:b0:2e:46:a4:e4:59:87:e6:7f:59:8f: 36:ca:0f:0b:22:2b:52:bd:3c:68:8a:04:65:0b:91: fe:69:3b:54:02:86:5f:85:80:50:14:b1:77:2a:11: 41:13:67:b5:fd:ac:70:a2:1a:4e:25:ed:6b:64:df: 32:af:b5:be:6c:ce:f0:b7:e1:ed:6a:a5:35:9e:6d: 6b:b5:93:51:41:ed:74:1d:a1:9e:58:a0:66:55:e4: dc:f0:1f:d0:00:41:b4:db:4c:60:ed:a0:6b:0b:7e: 8b:04:8f:01:69:e0:dc:a6:95:5b:99:a9:a0:32:58: 59:cb:77:f3:56:56:b8:7f:89:38:dc:ba:86:9c:1c: fa:3f:34:31:6d:3e:58:f7:ba:14:19:46:43:71:b1: a0:1d:b4:fa:fd:17:c7:40:21:a2:7c:68:17:ab:54: cc:b0:e3:69:85:2f:07:cb:91:64:48:c5:95:76:a4: f5:7a:18:09:40:73:c6:ad:21:d4:30:97:6f:a0:1d: 22:04:af:c6:8c:a8:b5:93:ca:94:ee:fd:2d:55:33: 78:1d:a5:f2:9c:0d:7d:f1:85:f4:53:f8:1c:1a:51: ef:35:00:41:bf:a3:a0:3f:e9:90:85:f2:79:dc:3c: 5f:fe:29:e5:6a:f3:a7:82:d1:7c:59:6f:38:fc:46: 93:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3B:84:E6:8D:A2:55:71:94:E9:19:FB:76:95:93:73:54:FA:0F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/adf9349d-bef8-3006-8826-0a570987e422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e5:fe:9e:3e:84:3c:3a:4d:8c:47:f8:b5:79:be:5d:b0:0c: 93:1e:d0:ba:aa:a9:96:05:04:38:0b:98:8f:bf:59:e8:e9:3f: c2:95:24:50:e9:d0:86:92:3f:25:1d:af:ff:99:b9:6e:58:68: 1f:40:6e:98:ea:fa:c7:45:15:d4:3b:e1:66:f4:2f:f6:9c:8e: ed:4e:b6:9e:04:c4:b7:c4:bc:63:72:db:97:d8:a9:81:df:77: 31:e3:ca:83:ef:42:8d:65:f5:95:3c:56:37:b5:bd:5f:e1:06: c0:2d:6f:8a:1d:5d:b8:03:35:4f:3f:ed:0e:cc:5d:36:53:17: a3:a4:a9:e0:fd:25:60:e0:b2:62:73:03:1d:ad:80:4f:c4:23: e4:f5:8c:ca:d4:c1:5f:d8:fb:35:59:77:75:e5:99:c5:7a:3c: 75:ce:fb:aa:01:8c:8c:1c:73:44:99:b3:37:5d:64:58:66:16: 63:67:ef:db:3e:86:ba:34:84:93:0e:fb:ea:6e:bc:59:f6:2e: ba:24:ad:b7:26:06:f9:3d:8f:20:b2:1e:8b:f5:67:1c:5b:cb: 82:9e:31:d7:5f:c0:38:c3:a4:aa:b3:bc:46:ba:93:02:81:4a: 7b:b2:ae:bd:a5:f3:cf:64:d2:7e:2b:da:ac:e5:48:d7:a3:84: c3:6e:ac:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH7toMGI5OI3NlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjMxNFoXDTI2MDcyMzIzMjMxNFowLzEtMCsGA1UEAxMk MzE3OTg4YjctMGU5OC00ZGJkLWIxMTQtYzMwMWNhNjY5ZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvfpsC5GpORZh+Z/WY82yg8LIitSvTxoigRl C5H+aTtUAoZfhYBQFLF3KhFBE2e1/axwohpOJe1rZN8yr7W+bM7wt+HtaqU1nm1r tZNRQe10HaGeWKBmVeTc8B/QAEG020xg7aBrC36LBI8BaeDcppVbmamgMlhZy3fz Vla4f4k43LqGnBz6PzQxbT5Y97oUGUZDcbGgHbT6/RfHQCGifGgXq1TMsONphS8H y5FkSMWVdqT1ehgJQHPGrSHUMJdvoB0iBK/GjKi1k8qU7v0tVTN4HaXynA198YX0 U/gcGlHvNQBBv6OgP+mQhfJ53Dxf/inlavOngtF8WW84/EaT7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAw7hOaNolVxlOkZ+3aVk3NU+g+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYWRmOTM0OWQtYmVmOC0z MDA2LTg4MjYtMGE1NzA5ODdlNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbl/p4+hDw6TYxH+LV5vl2wDJMe0LqqqZYFBDgLmI+/WejpP8KVJFDp 0IaSPyUdr/+ZuW5YaB9Abpjq+sdFFdQ74Wb0L/acju1Otp4ExLfEvGNy25fYqYHf dzHjyoPvQo1l9ZU8Vje1vV/hBsAtb4odXbgDNU8/7Q7MXTZTF6OkqeD9JWDgsmJz Ax2tgE/EI+T1jMrUwV/Y+zVZd3XlmcV6PHXO+6oBjIwcc0SZszddZFhmFmNn79s+ hro0hJMO++puvFn2LrokrbcmBvk9jyCyHov1Zxxby4KeMddfwDjDpKqzvEa6kwKB Snuyrr2l889k0n4r2qzlSNejhMNurBQ= -----END CERTIFICATE-----Generated at Wed May 13 14:40:22 2026 by rpki-client