$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b99d1726-265e-331d-912b-00ce0f133e0a.roa File: b99d1726-265e-331d-912b-00ce0f133e0a.roa (raw, json) Hash identifier: SVsKRNGPFcxF+S0qxKqnA7wQ1pTBHszPfhkRSvZ4NfU= Subject key identifier: 65:2A:D1:7B:FD:9D:7C:E7:19:09:31:8A:20:9A:88:C9:0B:42:0B:30 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F41D5A05C63F959D46C00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b99d1726-265e-331d-912b-00ce0f133e0a.roa Signing time: Fri 24 Apr 2026 23:22:16 +0000 ROA not before: Fri 24 Apr 2026 23:22:16 +0000 ROA not after: Thu 23 Jul 2026 23:22:16 +0000 asID: 20001 IP address blocks: 64.16.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:41:d5:a0:5c:63:f9:59:d4:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:16 2026 GMT Not After : Jul 23 23:22:16 2026 GMT Subject: CN=2f163888-1b46-4edb-85e0-bc970d22db73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a1:15:c2:33:cd:5d:71:c3:72:10:2f:10:8f: 69:77:ed:4c:9a:f7:a7:f8:ea:90:75:d9:5b:2e:0f: 6d:c8:b1:2d:ac:87:88:ed:1a:27:0a:27:09:d9:04: ab:37:8f:70:61:9e:96:b9:38:3c:c9:fd:de:bb:6b: a5:91:99:57:bf:f8:33:5c:66:cb:7d:0d:e2:e3:f6: ae:fb:4a:ad:3d:29:4c:5b:d4:2d:3f:88:37:9b:77: 6c:c1:f8:f4:4d:1c:e4:0e:c4:7a:14:3c:e1:a3:2e: bc:6b:9e:46:53:84:3a:94:c7:6d:66:bf:39:02:3b: f8:d2:0c:01:3f:88:34:f8:95:75:1c:c2:21:bf:4b: 61:d3:09:40:7e:fb:74:7a:53:6b:aa:82:17:40:50: 25:77:06:f8:32:97:65:48:62:03:b9:a0:85:57:31: 35:4d:1c:bc:26:4c:57:52:1c:03:c6:e6:f3:ea:5e: 1f:0d:cb:f7:a5:2d:97:33:03:74:f5:75:c4:92:6f: c4:4b:f0:b6:1c:83:34:26:7d:9f:bd:8f:45:2c:46: 73:f7:89:68:e0:7b:68:66:b5:29:d1:57:7d:02:7f: d6:9a:04:eb:cc:50:6c:19:b4:4a:93:57:f0:ca:31: b8:68:e8:d7:c2:8d:9a:ea:91:23:ab:48:ad:09:1d: e4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2A:D1:7B:FD:9D:7C:E7:19:09:31:8A:20:9A:88:C9:0B:42:0B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/b99d1726-265e-331d-912b-00ce0f133e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5b:7d:27:d4:f7:c8:bb:fa:5a:52:54:25:f7:2b:ff:ee:90: fb:17:82:e1:71:a1:a3:9d:f3:8f:61:99:d8:8c:34:78:10:26: f1:20:20:98:96:10:dc:75:09:43:83:dc:ff:96:49:a9:ea:09: ef:18:2e:59:9e:06:83:b8:71:33:fd:f3:86:fe:b6:c8:e0:13: 2e:d0:56:c9:9a:81:82:8e:7a:97:ff:fa:2b:3d:55:61:12:f7: 9f:10:cb:ea:35:65:3f:13:39:83:b0:ea:f2:ed:99:cf:eb:38: f7:bc:1c:87:69:3b:32:63:5f:36:e6:38:94:80:24:05:73:03: 73:3b:02:d3:c2:2e:c1:77:9d:49:74:0a:3b:48:54:5e:bb:b1: 50:1f:14:81:ae:b3:7f:78:93:67:8a:a5:60:79:bb:72:2f:cb: 6c:b7:b9:ed:d8:82:86:5b:c0:f4:50:5c:5d:5b:96:da:d3:ca: 16:6c:b5:b5:96:3f:01:e2:25:3b:8f:02:cb:52:bf:eb:c7:af: d6:f4:91:ae:43:bb:64:61:7b:9e:69:d0:d0:5b:5e:4c:b5:74: 6a:74:00:1f:a0:78:58:79:63:cc:7f:ef:1c:5d:3f:23:bf:68: 96:45:75:1a:39:d8:ff:c4:82:f2:21:e9:86:06:eb:65:05:a6: 87:b2:3e:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH0HVoFxj+VnUbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIxNloXDTI2MDcyMzIzMjIxNlowLzEtMCsGA1UEAxMk MmYxNjM4ODgtMWI0Ni00ZWRiLTg1ZTAtYmM5NzBkMjJkYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqEVwjPNXXHDchAvEI9pd+1Mmven+OqQddlb Lg9tyLEtrIeI7RonCicJ2QSrN49wYZ6WuTg8yf3eu2ulkZlXv/gzXGbLfQ3i4/au +0qtPSlMW9QtP4g3m3dswfj0TRzkDsR6FDzhoy68a55GU4Q6lMdtZr85Ajv40gwB P4g0+JV1HMIhv0th0wlAfvt0elNrqoIXQFAldwb4MpdlSGIDuaCFVzE1TRy8JkxX UhwDxubz6l4fDcv3pS2XMwN09XXEkm/ES/C2HIM0Jn2fvY9FLEZz94lo4HtoZrUp 0Vd9An/WmgTrzFBsGbRKk1fwyjG4aOjXwo2a6pEjq0itCR3keQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUq0Xv9nXznGQkxiiCaiMkLQgswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYjk5ZDE3MjYtMjY1ZS0z MzFkLTkxMmItMDBjZTBmMTMzZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5bfSfU98i7+lpSVCX3K//ukPsXguFxoaOd849hmdiMNHgQJvEgIJiW ENx1CUOD3P+WSanqCe8YLlmeBoO4cTP984b+tsjgEy7QVsmagYKOepf/+is9VWES 958Qy+o1ZT8TOYOw6vLtmc/rOPe8HIdpOzJjXzbmOJSAJAVzA3M7AtPCLsF3nUl0 CjtIVF67sVAfFIGus394k2eKpWB5u3Ivy2y3ue3YgoZbwPRQXF1bltrTyhZstbWW PwHiJTuPAstSv+vHr9b0ka5Du2Rhe55p0NBbXky1dGp0AB+geFh5Y8x/7xxdPyO/ aJZFdRo52P/EgvIh6YYG62UFpoeyPkE= -----END CERTIFICATE-----Generated at Wed May 13 12:01:58 2026 by rpki-client