$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b4847082-e52e-3a9c-9ec7-f7f6605c0ab2.roa File: b4847082-e52e-3a9c-9ec7-f7f6605c0ab2.roa (raw, json) Hash identifier: ntBWk5atFzcaMtwBOQB5ShcPaRSQrGTSPXP+gT/R8/c= Subject key identifier: 4F:16:97:2F:75:9A:C9:C7:F7:31:85:4A:55:E2:97:E4:14:29:F5:D2 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F752A2308B2A97050D940 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b4847082-e52e-3a9c-9ec7-f7f6605c0ab2.roa Signing time: Fri 24 Apr 2026 23:22:41 +0000 ROA not before: Fri 24 Apr 2026 23:22:41 +0000 ROA not after: Thu 23 Jul 2026 23:22:41 +0000 asID: 20001 IP address blocks: 64.16.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:75:2a:23:08:b2:a9:70:50:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:41 2026 GMT Not After : Jul 23 23:22:41 2026 GMT Subject: CN=609c7d79-52ce-402e-927a-c49779cdebc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:49:40:72:12:cc:a0:d8:3d:d9:5e:63:36: 85:b3:cd:ce:8a:18:72:ec:cd:94:ac:5f:66:24:79: 4d:f2:5d:46:14:5b:40:ce:42:59:e6:6a:2f:f3:df: 88:a1:1d:d8:b3:49:12:17:a3:86:96:ff:fe:03:75: eb:3e:61:d1:79:e7:e1:2d:c4:26:ad:8d:e9:be:21: 95:ba:67:01:fe:4f:b8:23:bb:15:ea:a3:96:63:bd: 98:ae:be:b0:58:72:5b:63:81:43:0d:d8:5a:fd:16: 61:bc:df:32:41:04:03:32:b2:bb:18:db:90:4d:02: 9f:bf:a9:10:f6:8f:5a:43:51:f6:7a:a5:39:95:a8: 43:21:d0:8c:5d:05:78:67:bd:c3:13:25:3f:3b:56: ca:7f:b4:cb:2a:fc:b9:43:60:e6:85:09:0d:36:0b: e0:b7:ff:4f:75:dc:3f:09:e9:6a:5d:94:57:6b:79: c9:0c:57:62:d2:0d:b7:c5:bb:db:78:8d:d5:c3:e2: 87:d6:1d:fe:e3:2c:18:ca:66:74:c0:41:c6:b2:71: 76:66:11:87:c3:b9:66:61:e1:eb:0c:7d:2b:02:1d: b8:14:94:ea:5e:c2:62:ac:06:94:6c:26:c5:d5:f1: 83:aa:ba:3b:ac:8c:f9:55:b8:53:b9:72:9d:d0:f7: 9c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:16:97:2F:75:9A:C9:C7:F7:31:85:4A:55:E2:97:E4:14:29:F5:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b4847082-e52e-3a9c-9ec7-f7f6605c0ab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:75:92:d9:4e:aa:5b:c6:f5:d9:c4:e8:85:fd:3d:78:6c:f8: 87:0e:65:9d:38:82:c6:5f:e2:21:c7:e2:0d:d5:23:c2:9a:e7: e0:3b:11:18:2d:b7:e4:38:ad:a2:eb:d1:fb:ea:8e:70:10:9d: 29:b8:73:7b:85:b2:de:cf:0d:ba:42:2b:50:2d:ba:72:93:cf: cd:89:e0:7a:ae:c0:13:0f:08:e1:0f:3a:87:f0:64:e0:51:a0: 8a:5a:c3:e0:d2:75:5e:f1:ab:91:1e:d1:4e:7c:3f:75:ff:64: f1:12:62:66:ec:3d:08:59:b2:60:8f:c1:04:70:70:aa:02:3d: 0c:93:b0:45:f6:ad:5f:e3:d3:e3:03:ad:cf:13:69:8e:6f:8e: e5:45:c9:14:86:07:5f:94:84:38:d3:ea:19:3e:fb:2d:9a:5d: d9:90:64:07:23:68:ea:4b:18:d0:34:77:ad:07:9d:96:a3:b9: ac:f2:01:de:2e:7c:bf:e5:b8:f1:36:1c:df:57:9b:5d:de:6e: 28:71:39:3d:5d:3f:bf:d9:fe:9b:0a:4d:54:d5:94:8d:51:be: ff:81:ea:34:7f:f7:b6:ce:f7:27:10:0e:88:54:88:16:30:16: fa:e4:e0:06:bb:e9:15:07:0c:15:4b:fe:72:75:ee:0a:c5:f3: 2d:7e:4b:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH3UqIwiyqXBQ2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjI0MVoXDTI2MDcyMzIzMjI0MVowLzEtMCsGA1UEAxMk NjA5YzdkNzktNTJjZS00MDJlLTkyN2EtYzQ5Nzc5Y2RlYmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseRJQHISzKDYPdleYzaFs83Oihhy7M2UrF9m JHlN8l1GFFtAzkJZ5mov89+IoR3Ys0kSF6OGlv/+A3XrPmHReefhLcQmrY3pviGV umcB/k+4I7sV6qOWY72Yrr6wWHJbY4FDDdha/RZhvN8yQQQDMrK7GNuQTQKfv6kQ 9o9aQ1H2eqU5lahDIdCMXQV4Z73DEyU/O1bKf7TLKvy5Q2DmhQkNNgvgt/9Pddw/ CelqXZRXa3nJDFdi0g23xbvbeI3Vw+KH1h3+4ywYymZ0wEHGsnF2ZhGHw7lmYeHr DH0rAh24FJTqXsJirAaUbCbF1fGDqro7rIz5VbhTuXKd0PeclwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8Wly91msnH9zGFSlXil+QUKfXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYjQ4NDcwODItZTUyZS0z YTljLTllYzctZjdmNjYwNWMwYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKh1ktlOqlvG9dnE6IX9PXhs+IcOZZ04gsZf4iHH4g3VI8Ka5+A7ERgt t+Q4raLr0fvqjnAQnSm4c3uFst7PDbpCK1AtunKTz82J4HquwBMPCOEPOofwZOBR oIpaw+DSdV7xq5Ee0U58P3X/ZPESYmbsPQhZsmCPwQRwcKoCPQyTsEX2rV/j0+MD rc8TaY5vjuVFyRSGB1+UhDjT6hk++y2aXdmQZAcjaOpLGNA0d60HnZajuazyAd4u fL/luPE2HN9Xm13ebihxOT1dP7/Z/psKTVTVlI1Rvv+B6jR/97bO9ycQDohUiBYw Fvrk4Aa76RUHDBVL/nJ17grF8y1+SyU= -----END CERTIFICATE-----Generated at Wed May 13 13:30:20 2026 by rpki-client