$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b7f4aeb0-8342-3c43-836c-68b8e6b66737.roa File: b7f4aeb0-8342-3c43-836c-68b8e6b66737.roa (raw, json) Hash identifier: XFXYDRP60zrGrAZbOitHjXbjE/5sJ+OAK7HnmWn2Y8s= Subject key identifier: 33:DD:AB:E8:9E:AA:25:8F:03:51:6A:F2:CC:E4:1F:D9:48:41:6A:4C Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F881204232E9A8A518770 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b7f4aeb0-8342-3c43-836c-68b8e6b66737.roa Signing time: Fri 24 Apr 2026 23:22:50 +0000 ROA not before: Fri 24 Apr 2026 23:22:50 +0000 ROA not after: Thu 23 Jul 2026 23:22:50 +0000 asID: 20001 IP address blocks: 64.16.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:88:12:04:23:2e:9a:8a:51:87:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:50 2026 GMT Not After : Jul 23 23:22:50 2026 GMT Subject: CN=1e0247b8-045b-4afb-9772-18d64b69519f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ce:b0:ef:b5:e7:5d:79:4b:14:a6:97:af:0f: a5:cf:53:6d:e5:41:69:db:e9:ce:6e:8c:12:3d:0f: 22:1c:91:29:41:ac:fd:db:8f:6b:d2:6e:72:05:68: 82:01:c3:6e:9d:8a:a4:9f:35:30:3d:2f:f3:bc:10: 44:e7:72:08:bf:08:57:fe:fa:18:62:4b:b8:7e:68: 9f:7b:65:2a:8d:d1:3b:2c:54:02:9d:1f:fb:77:c0: 30:b9:d9:2e:eb:50:de:e1:46:22:53:98:11:ab:58: 34:f8:a7:bd:e9:ac:28:c8:dd:97:25:5c:a9:7a:bc: ef:7f:28:1c:dd:83:bf:9f:ae:18:fa:77:00:94:46: e1:f4:c8:a7:30:6d:fe:f5:e9:c9:50:30:85:1b:c4: cf:08:a0:d5:82:50:5e:54:03:7f:d3:60:a6:29:b4: c8:39:8f:a9:51:21:35:1f:14:fb:13:3b:9d:73:36: 67:cc:49:cd:4a:44:27:99:af:ad:6f:fb:f8:ee:16: 6d:c4:88:82:16:ca:65:2f:34:c2:0a:de:55:cd:d9: 69:69:93:2e:0a:ae:03:81:84:cd:7c:f3:37:9c:43: 80:e0:94:be:69:64:c5:85:ce:4b:87:76:54:3e:d6: 5b:dd:b0:e0:3e:8c:b0:48:1c:64:11:be:1f:ec:9f: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DD:AB:E8:9E:AA:25:8F:03:51:6A:F2:CC:E4:1F:D9:48:41:6A:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b7f4aeb0-8342-3c43-836c-68b8e6b66737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:03:f8:0f:d1:a9:cc:08:25:e6:45:2f:e5:f7:59:bc:27:a2: 97:e7:84:25:59:83:a2:42:10:52:e7:53:d0:87:82:ce:c1:4e: 98:8a:7e:fc:9f:b1:bd:5a:49:0d:08:37:59:b5:69:e6:b6:c2: 3c:9d:c3:86:bd:7b:42:94:b1:0c:2f:88:de:3f:89:23:22:07: 0d:00:2d:50:9b:0b:bf:81:f8:d4:0f:6f:ed:2b:f2:41:ee:4a: f3:78:1f:c6:21:80:8a:d4:b7:d9:a9:33:5d:e7:b1:af:d5:d6: 2a:0e:62:d2:97:fa:1f:41:7b:9b:34:62:39:f0:6d:05:e6:3d: c5:03:4e:75:dd:8c:e5:db:86:38:d5:97:01:2e:04:3a:44:de: 99:fb:f5:cf:d9:3e:d3:f3:3e:0c:d8:d8:de:6f:4d:b4:7e:f1: 35:97:3b:9d:ef:14:d7:7c:ac:4a:25:1a:66:86:ca:89:33:35: 30:8e:c5:c9:65:91:8f:4b:a6:41:be:7b:07:3d:f7:12:ef:74: 59:d1:40:27:5f:68:15:58:4c:8e:8c:d5:e9:19:02:43:ee:4d: ef:0f:6d:1f:21:ce:dd:5d:25:e8:a2:08:18:aa:d3:c3:72:f3: 21:56:19:92:bd:82:ac:bd:f2:6b:af:84:c3:af:ef:12:41:76: fb:79:82:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH4gSBCMumopRh3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjI1MFoXDTI2MDcyMzIzMjI1MFowLzEtMCsGA1UEAxMk MWUwMjQ3YjgtMDQ1Yi00YWZiLTk3NzItMThkNjRiNjk1MTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+c6w77XnXXlLFKaXrw+lz1Nt5UFp2+nObowS PQ8iHJEpQaz9249r0m5yBWiCAcNunYqknzUwPS/zvBBE53IIvwhX/voYYku4fmif e2UqjdE7LFQCnR/7d8Awudku61De4UYiU5gRq1g0+Ke96awoyN2XJVyperzvfygc 3YO/n64Y+ncAlEbh9MinMG3+9enJUDCFG8TPCKDVglBeVAN/02CmKbTIOY+pUSE1 HxT7EzudczZnzEnNSkQnma+tb/v47hZtxIiCFsplLzTCCt5VzdlpaZMuCq4DgYTN fPM3nEOA4JS+aWTFhc5Lh3ZUPtZb3bDgPoywSBxkEb4f7J/5JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPdq+ieqiWPA1Fq8szkH9lIQWpMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYjdmNGFlYjAtODM0Mi0z YzQzLTgzNmMtNjhiOGU2YjY2NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgD+A/RqcwIJeZFL+X3WbwnopfnhCVZg6JCEFLnU9CHgs7BTpiKfvyf sb1aSQ0IN1m1aea2wjydw4a9e0KUsQwviN4/iSMiBw0ALVCbC7+B+NQPb+0r8kHu SvN4H8YhgIrUt9mpM13nsa/V1ioOYtKX+h9Be5s0YjnwbQXmPcUDTnXdjOXbhjjV lwEuBDpE3pn79c/ZPtPzPgzY2N5vTbR+8TWXO53vFNd8rEolGmaGyokzNTCOxcll kY9LpkG+ewc99xLvdFnRQCdfaBVYTI6M1ekZAkPuTe8PbR8hzt1dJeiiCBiq08Ny 8yFWGZK9gqy98muvhMOv7xJBdvt5gt4= -----END CERTIFICATE-----Generated at Wed May 13 12:06:38 2026 by rpki-client