$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b8118dcf-938b-3b61-969a-234da348456c.roa File: b8118dcf-938b-3b61-969a-234da348456c.roa (raw, json) Hash identifier: Ece58MCZ9YKBCST+IbMeitIIMI/U3GkWL+GDyRFgbvw= Subject key identifier: 3F:98:EF:88:69:E7:57:20:9B:62:7C:9B:C3:AA:D2:6E:C9:CD:A8:43 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1EF2D942EAF675896926C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b8118dcf-938b-3b61-969a-234da348456c.roa Signing time: Fri 24 Apr 2026 23:21:39 +0000 ROA not before: Fri 24 Apr 2026 23:21:39 +0000 ROA not after: Thu 23 Jul 2026 23:21:39 +0000 asID: 20001 IP address blocks: 64.16.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:f2:d9:42:ea:f6:75:89:69:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:39 2026 GMT Not After : Jul 23 23:21:39 2026 GMT Subject: CN=3b395c12-8bb3-4787-bf4e-4edb6433e0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:79:c4:2f:66:20:81:5c:ab:21:05:6b:6d: 58:c5:22:77:78:1a:c9:c9:ea:d9:75:46:51:60:2b: 4a:f1:dd:55:16:f5:fc:a3:0c:db:07:ba:73:e5:65: 13:61:4d:bb:29:b3:ed:08:11:a8:05:67:3e:4c:5a: d1:96:ef:6b:8b:10:56:50:85:06:06:09:03:2b:e6: 7c:0d:c6:b8:c4:bf:f4:24:69:91:3b:bd:67:a1:59: 72:71:8c:f2:0a:dc:ae:ac:82:e0:95:ac:0c:06:ae: 58:b0:da:04:62:56:0e:00:2c:02:45:b7:db:8f:96: 2e:4f:78:e2:bf:28:1d:05:31:0c:58:0e:f1:40:5a: e5:ba:32:7f:bb:91:bb:0a:f3:23:0d:79:c3:e3:c8: 6e:5b:c4:47:0a:f2:df:7a:d0:af:92:fd:32:bb:ab: 50:34:59:dd:3a:43:b5:76:fa:a2:e1:9e:a8:3b:d8: 9b:f6:e3:b3:10:71:09:ad:ca:a7:df:fe:d8:29:8b: 32:6f:76:0e:a0:7a:e9:3f:33:3c:ea:4a:0f:55:21: 5b:27:a1:06:8f:25:36:9a:4b:99:42:22:21:6d:a9: a2:c5:8a:33:ce:c0:6f:e2:be:d6:06:d8:ea:e6:30: 32:3e:3d:24:a6:0c:11:cc:f9:b3:b3:e1:b1:fc:18: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:98:EF:88:69:E7:57:20:9B:62:7C:9B:C3:AA:D2:6E:C9:CD:A8:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b8118dcf-938b-3b61-969a-234da348456c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ef:d7:8a:68:63:04:d8:bc:5b:ef:a5:63:7d:38:5e:a5:18: 0c:4a:09:23:51:44:44:27:87:77:86:8a:67:1a:7f:67:5d:62: 3d:3a:5f:49:00:af:41:fb:b6:b8:4f:5e:61:0a:7d:eb:82:2d: ff:05:89:25:b0:e6:cd:e7:e5:f9:9a:fc:4d:78:a2:9e:51:62: f2:f2:b6:a9:41:b9:c4:8e:f1:de:57:6a:78:33:3e:db:68:80: 9b:10:e4:59:42:90:19:bc:a7:20:cc:d1:99:3c:41:1c:3a:f9: f5:ad:ff:ee:d2:ea:75:34:16:36:95:76:c4:c7:ac:b8:f3:46: e6:6d:59:da:46:1a:05:52:d3:31:a3:cb:92:b9:7d:1d:04:31: 65:7a:ec:01:1f:b8:f1:cc:96:d3:b0:85:b0:82:9a:6c:f1:fd: 72:eb:90:4e:ad:62:3e:7f:28:ee:92:38:a1:b6:3d:81:ec:d3: 41:00:d8:25:42:98:f2:10:1f:85:27:50:ff:ed:02:f5:b8:48: 8f:09:5c:c3:ee:a3:3b:23:fc:07:2d:d8:a9:e4:f5:97:82:35: a9:36:5d:c2:e4:f3:5d:31:22:19:6b:1d:35:eb:3e:63:fc:d9: a8:6a:b7:a9:b8:19:82:00:be:22:14:17:b3:d1:a9:3b:2d:5d: b6:58:b7:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHvLZQur2dYlpJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjEzOVoXDTI2MDcyMzIzMjEzOVowLzEtMCsGA1UEAxMk M2IzOTVjMTItOGJiMy00Nzg3LWJmNGUtNGVkYjY0MzNlMGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0J5xC9mIIFcqyEFa21YxSJ3eBrJyerZdUZR YCtK8d1VFvX8owzbB7pz5WUTYU27KbPtCBGoBWc+TFrRlu9rixBWUIUGBgkDK+Z8 Dca4xL/0JGmRO71noVlycYzyCtyurILglawMBq5YsNoEYlYOACwCRbfbj5YuT3ji vygdBTEMWA7xQFrlujJ/u5G7CvMjDXnD48huW8RHCvLfetCvkv0yu6tQNFndOkO1 dvqi4Z6oO9ib9uOzEHEJrcqn3/7YKYsyb3YOoHrpPzM86koPVSFbJ6EGjyU2mkuZ QiIhbamixYozzsBv4r7WBtjq5jAyPj0kpgwRzPmzs+Gx/Bj8MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+Y74hp51cgm2J8m8Oq0m7JzahDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYjgxMThkY2YtOTM4Yi0z YjYxLTk2OWEtMjM0ZGEzNDg0NTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3v14poYwTYvFvvpWN9OF6lGAxKCSNRREQnh3eGimcaf2ddYj06X0kA r0H7trhPXmEKfeuCLf8FiSWw5s3n5fma/E14op5RYvLytqlBucSO8d5XangzPtto gJsQ5FlCkBm8pyDM0Zk8QRw6+fWt/+7S6nU0FjaVdsTHrLjzRuZtWdpGGgVS0zGj y5K5fR0EMWV67AEfuPHMltOwhbCCmmzx/XLrkE6tYj5/KO6SOKG2PYHs00EA2CVC mPIQH4UnUP/tAvW4SI8JXMPuozsj/Act2Knk9ZeCNak2XcLk810xIhlrHTXrPmP8 2ahqt6m4GYIAviIUF7PRqTstXbZYt7g= -----END CERTIFICATE-----Generated at Wed May 13 15:24:44 2026 by rpki-client