$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b45981b6-4e28-32f6-91d4-6276d57a7c1a.roa File: b45981b6-4e28-32f6-91d4-6276d57a7c1a.roa (raw, json) Hash identifier: RJQ3UURnJAGm00jX/BAU8T61XltHhcydTQs9P5bmsMk= Subject key identifier: 39:86:E0:E6:1E:59:BD:33:EC:5E:52:F7:0C:DC:67:6B:EA:FF:78:1C Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F088F6B34304AFEA700C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b45981b6-4e28-32f6-91d4-6276d57a7c1a.roa Signing time: Fri 24 Apr 2026 23:21:49 +0000 ROA not before: Fri 24 Apr 2026 23:21:49 +0000 ROA not after: Thu 23 Jul 2026 23:21:49 +0000 asID: 20001 IP address blocks: 64.16.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:08:8f:6b:34:30:4a:fe:a7:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:49 2026 GMT Not After : Jul 23 23:21:49 2026 GMT Subject: CN=a22dd5f9-db17-4dfa-a57f-5fe06a022764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:05:e7:7e:4a:ca:53:76:71:2c:af:39:e5: d1:48:6a:23:44:a0:19:25:f2:23:f4:2e:2d:e5:3f: 48:80:b6:82:44:6e:76:30:e6:aa:ae:e3:88:bc:88: 57:50:12:ff:0c:9a:b7:a9:30:b7:97:10:a3:af:a4: cb:23:9f:f7:eb:ac:c9:e2:c0:55:10:ec:bb:96:3e: f5:45:c0:35:a6:44:a7:90:70:3c:7a:40:c9:26:d9: fd:f9:92:7e:e4:9d:75:01:aa:5a:1a:11:4e:99:1c: 6c:fc:97:0d:90:ef:15:6e:c3:52:6a:42:76:3b:09: 45:f2:37:33:b1:12:08:5a:68:a1:01:05:92:c2:c7: 7c:e1:af:e4:9e:94:e1:ae:85:1f:f5:2d:9d:cf:b0: 64:93:4f:1c:e3:7e:49:11:aa:e3:f2:4c:0e:c5:5d: a0:79:d6:29:04:49:0f:a8:e0:2a:ce:fd:c3:9d:26: ff:b8:e0:d9:d4:2a:9a:08:c7:93:45:26:83:0d:ba: c2:9a:2d:9c:5c:75:9c:f6:e9:39:74:46:65:8e:df: 2c:7d:57:ef:cf:73:5a:2c:be:7f:f6:b4:78:b4:06: 3b:fa:de:02:29:e7:60:82:1b:95:95:c4:e4:b3:f0: 92:5b:b9:79:2a:41:14:12:66:e6:ee:a3:18:1c:7d: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:86:E0:E6:1E:59:BD:33:EC:5E:52:F7:0C:DC:67:6B:EA:FF:78:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b45981b6-4e28-32f6-91d4-6276d57a7c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:9d:af:99:d5:d4:52:24:92:33:b0:03:a7:65:4a:33:66:25: 8e:38:0e:8f:3f:74:4b:6e:31:f4:18:a4:22:24:95:1d:ff:5e: 02:f2:bb:44:02:a2:c5:c6:97:13:8e:fa:57:46:e6:d0:17:e4: 8a:e1:3f:28:f8:f0:00:89:48:a5:ec:46:53:1a:e3:cd:ac:03: ad:53:7e:fc:0a:59:5e:b5:8f:40:e3:86:2b:85:05:b4:a0:2f: 35:40:ef:21:53:d7:85:a2:e1:8a:ef:6a:f8:24:2b:9d:fb:e4: 0d:0b:c0:68:17:09:fd:a6:d9:74:e8:b9:36:c6:4a:61:d8:c7: 9f:b5:a0:c3:7b:63:71:87:24:19:07:fb:1b:0f:3e:1a:4e:02: e6:65:74:fe:a0:32:77:4d:ef:63:18:1b:6a:5b:f9:61:b2:dd: 3a:5e:5e:a8:9f:6b:98:31:40:c1:cc:19:75:5a:71:02:b6:e7: 2b:c1:3e:ae:bc:45:ab:68:e6:18:ba:73:8b:3d:60:6d:cd:39: 52:22:b2:6e:9c:7e:90:ff:0a:07:34:75:e3:57:32:78:48:86: 39:fe:d2:47:6f:40:8a:0c:fe:85:79:e8:eb:9c:32:16:2f:03: 09:5a:42:64:52:7c:84:05:e0:ae:4a:03:f8:00:4f:a9:18:a0: d3:09:65:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHwiPazQwSv6nAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjE0OVoXDTI2MDcyMzIzMjE0OVowLzEtMCsGA1UEAxMk YTIyZGQ1ZjktZGIxNy00ZGZhLWE1N2YtNWZlMDZhMDIyNzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1oF535KylN2cSyvOeXRSGojRKAZJfIj9C4t 5T9IgLaCRG52MOaqruOIvIhXUBL/DJq3qTC3lxCjr6TLI5/366zJ4sBVEOy7lj71 RcA1pkSnkHA8ekDJJtn9+ZJ+5J11AapaGhFOmRxs/JcNkO8VbsNSakJ2OwlF8jcz sRIIWmihAQWSwsd84a/knpThroUf9S2dz7Bkk08c435JEarj8kwOxV2gedYpBEkP qOAqzv3DnSb/uODZ1CqaCMeTRSaDDbrCmi2cXHWc9uk5dEZljt8sfVfvz3NaLL5/ 9rR4tAY7+t4CKedgghuVlcTks/CSW7l5KkEUEmbm7qMYHH270QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmG4OYeWb0z7F5S9wzcZ2vq/3gcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYjQ1OTgxYjYtNGUyOC0z MmY2LTkxZDQtNjI3NmQ1N2E3YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2dr5nV1FIkkjOwA6dlSjNmJY44Do8/dEtuMfQYpCIklR3/XgLyu0QC osXGlxOO+ldG5tAX5IrhPyj48ACJSKXsRlMa482sA61TfvwKWV61j0DjhiuFBbSg LzVA7yFT14Wi4YrvavgkK5375A0LwGgXCf2m2XTouTbGSmHYx5+1oMN7Y3GHJBkH +xsPPhpOAuZldP6gMndN72MYG2pb+WGy3TpeXqifa5gxQMHMGXVacQK25yvBPq68 Rato5hi6c4s9YG3NOVIism6cfpD/Cgc0deNXMnhIhjn+0kdvQIoM/oV56OucMhYv AwlaQmRSfIQF4K5KA/gAT6kYoNMJZfE= -----END CERTIFICATE-----Generated at Wed May 13 11:22:08 2026 by rpki-client