$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b35db7d9-3bc5-3839-a1c5-59a3f75194cb.roa File: b35db7d9-3bc5-3839-a1c5-59a3f75194cb.roa (raw, json) Hash identifier: H6s2zxgZCM36k8MaZLNAcu133scCxkDZefDImUCKnhg= Subject key identifier: 0B:75:07:4F:2D:B3:A0:5A:BD:67:0E:2E:85:9E:20:30:1C:75:42:C5 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1FF71A024746FABF214220 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b35db7d9-3bc5-3839-a1c5-59a3f75194cb.roa Signing time: Fri 24 Apr 2026 23:23:42 +0000 ROA not before: Fri 24 Apr 2026 23:23:42 +0000 ROA not after: Thu 23 Jul 2026 23:23:42 +0000 asID: 397630 IP address blocks: 64.16.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:f7:1a:02:47:46:fa:bf:21:42:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:42 2026 GMT Not After : Jul 23 23:23:42 2026 GMT Subject: CN=b6f2f9b1-ec19-4815-a8ce-6348b27c8056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bf:6f:28:ea:b0:fa:a9:ed:93:d7:d9:64:b7: ef:92:6f:f3:a2:cc:56:31:8b:d6:f6:83:15:69:f1: 7c:32:b1:a9:22:a2:5d:3f:a3:a2:f5:d4:c4:c0:e0: 1f:ba:0e:dd:2e:d6:aa:7c:ac:04:dd:17:1e:1b:dd: 19:6a:ef:ec:89:ed:19:51:b1:46:0e:99:b0:79:fc: 26:5a:6b:35:6d:fd:ba:ef:e6:8c:48:51:b7:17:80: 1c:d6:b2:cf:09:10:d6:b2:e3:a8:54:4c:a3:dc:a7: be:5c:59:d1:e5:38:68:70:fa:54:54:c2:7a:84:f3: 1c:ec:4f:96:b7:c1:2f:c9:03:10:aa:b6:d0:a3:ff: a6:3c:19:26:32:e9:ac:48:b6:cc:11:a4:da:3f:ed: a8:0a:96:de:d1:36:88:8e:fe:bf:01:48:13:26:44: 03:9f:28:10:2e:08:5b:92:ce:8b:cd:73:de:16:b3: ab:18:5f:70:4e:f4:98:e4:9f:c1:36:0d:d4:6c:eb: a7:b2:67:61:83:49:cb:38:19:3e:7f:b8:98:01:f0: d2:22:63:c9:08:3a:9d:b5:e7:b8:2f:ae:c1:ed:59: 29:c0:b9:df:35:7a:78:ba:9e:46:39:6b:3b:e1:3f: 15:44:03:23:4d:96:fe:3b:05:91:f8:f3:b7:b8:11: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:75:07:4F:2D:B3:A0:5A:BD:67:0E:2E:85:9E:20:30:1C:75:42:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b35db7d9-3bc5-3839-a1c5-59a3f75194cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:3c:41:22:05:a2:f4:b4:1a:96:85:74:a2:d5:77:34:05:0c: 7d:ca:39:90:0b:c6:e3:ab:17:c6:78:da:17:ac:ff:d3:e2:3b: f4:5d:85:b7:0b:c8:81:14:1b:ff:3a:87:8f:1e:f7:b5:84:5e: 40:01:ea:20:69:1c:a1:9d:e5:9b:18:39:59:1f:c6:d1:d4:71: 89:f6:3f:61:cc:86:21:21:80:b7:16:be:e5:37:8b:04:cd:18: 21:eb:23:50:38:f5:ac:a8:47:5b:f0:44:e9:6d:a4:3f:a7:86: 25:e5:9b:1f:da:dc:58:28:62:22:40:8d:4f:67:72:fc:49:82: 50:1a:04:f5:65:9f:d4:4a:9c:22:54:be:44:35:22:80:4c:30: 0c:3a:32:55:45:3e:61:27:9f:b0:c9:c2:29:5a:06:26:15:bd: 99:d2:74:df:28:72:ad:c1:f5:1f:89:62:a9:f5:22:0b:8a:2b: d6:a9:97:92:e1:9c:12:b8:71:fc:3e:f2:d7:17:24:36:81:89: 8f:01:92:5b:87:96:41:f0:e2:ae:6b:bc:68:31:07:36:94:bb: a9:e7:d6:14:22:ab:74:51:9c:3a:a5:32:14:64:74:d8:3f:c8: 62:7f:20:33:fc:de:65:d6:78:7c:ff:ff:9c:d3:b2:42:d7:05: 95:32:bc:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH/caAkdG+r8hQiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjM0MloXDTI2MDcyMzIzMjM0MlowLzEtMCsGA1UEAxMk YjZmMmY5YjEtZWMxOS00ODE1LWE4Y2UtNjM0OGIyN2M4MDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm79vKOqw+qntk9fZZLfvkm/zosxWMYvW9oMV afF8MrGpIqJdP6Oi9dTEwOAfug7dLtaqfKwE3RceG90Zau/sie0ZUbFGDpmwefwm Wms1bf267+aMSFG3F4Ac1rLPCRDWsuOoVEyj3Ke+XFnR5ThocPpUVMJ6hPMc7E+W t8EvyQMQqrbQo/+mPBkmMumsSLbMEaTaP+2oCpbe0TaIjv6/AUgTJkQDnygQLghb ks6LzXPeFrOrGF9wTvSY5J/BNg3UbOunsmdhg0nLOBk+f7iYAfDSImPJCDqdtee4 L67B7VkpwLnfNXp4up5GOWs74T8VRAMjTZb+OwWR+PO3uBGtiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAt1B08ts6BavWcOLoWeIDAcdULFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYjM1ZGI3ZDktM2JjNS0z ODM5LWExYzUtNTlhM2Y3NTE5NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQ8QSIFovS0GpaFdKLVdzQFDH3KOZALxuOrF8Z42hes/9PiO/RdhbcL yIEUG/86h48e97WEXkAB6iBpHKGd5ZsYOVkfxtHUcYn2P2HMhiEhgLcWvuU3iwTN GCHrI1A49ayoR1vwROltpD+nhiXlmx/a3FgoYiJAjU9ncvxJglAaBPVln9RKnCJU vkQ1IoBMMAw6MlVFPmEnn7DJwilaBiYVvZnSdN8ocq3B9R+JYqn1IguKK9apl5Lh nBK4cfw+8tcXJDaBiY8BkluHlkHw4q5rvGgxBzaUu6nn1hQiq3RRnDqlMhRkdNg/ yGJ/IDP83mXWeHz//5zTskLXBZUyvMI= -----END CERTIFICATE-----Generated at Wed May 13 11:47:30 2026 by rpki-client