$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/bc5d4f49-e748-329d-bd9b-4f941981b39b.roa File: bc5d4f49-e748-329d-bd9b-4f941981b39b.roa (raw, json) Hash identifier: TbW5tvmHNoWP0iGToa34E6dVPr/o+QW5Nnaan0zkqgw= Subject key identifier: 85:97:09:E5:A4:49:73:02:DE:32:6B:AC:BE:D7:4C:66:A7:7A:13:A4 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F577478A64B96483FA040 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/bc5d4f49-e748-329d-bd9b-4f941981b39b.roa Signing time: Fri 24 Apr 2026 23:22:27 +0000 ROA not before: Fri 24 Apr 2026 23:22:27 +0000 ROA not after: Thu 23 Jul 2026 23:22:27 +0000 asID: 20001 IP address blocks: 64.16.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:57:74:78:a6:4b:96:48:3f:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:27 2026 GMT Not After : Jul 23 23:22:27 2026 GMT Subject: CN=21a25f24-893e-4ab3-9868-8975d72ca9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:b1:60:33:57:b4:3c:dc:1c:18:0f:d8:2a: 05:3c:78:b5:e7:1b:5f:45:a3:dd:a7:54:94:d2:2c: d0:cd:fb:a5:14:24:09:3e:23:2f:e2:9e:6a:61:26: 53:4b:36:9c:30:d6:35:56:60:df:9a:0a:52:bd:6c: 44:b2:5c:ca:40:a2:84:c3:67:2e:f4:9a:e3:d8:a7: 63:69:47:25:05:2b:a6:71:72:71:b5:64:29:7f:7d: 96:ba:2f:61:2c:43:a0:b1:eb:b7:30:38:96:fb:52: f7:61:8c:a7:cf:74:c0:b9:a0:d0:c4:ce:1c:cb:64: 55:b9:a0:b1:98:dc:28:7b:47:5f:3d:cc:51:94:40: 8a:65:6a:92:09:2f:90:55:04:b5:b4:e6:f2:0a:c8: 85:98:5d:e4:d9:7a:9a:4a:6e:15:8c:ab:91:5e:ac: 27:14:37:ea:2e:d6:78:24:b9:8f:ed:f3:b9:8c:93: 1b:10:b1:05:f4:9b:4e:76:97:ac:bb:84:5a:1c:ee: 96:f4:a2:60:12:48:1e:18:7c:93:84:4f:a9:d2:74: 63:c0:b8:fd:28:a6:4e:1f:92:e7:f0:9d:5d:0d:63: 12:aa:84:c4:76:d9:45:0f:20:43:f3:9d:45:2a:93: dd:a5:40:bb:78:d3:15:ab:b4:46:cb:7b:3b:fb:40: c6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:97:09:E5:A4:49:73:02:DE:32:6B:AC:BE:D7:4C:66:A7:7A:13:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/bc5d4f49-e748-329d-bd9b-4f941981b39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:cb:27:43:6b:1c:25:9e:7f:9a:a7:71:11:53:49:25:c4:a5: 2e:0f:fa:fc:cc:5f:65:2d:e5:97:90:08:30:d5:5c:3a:ba:62: da:c6:73:27:ff:dd:e5:91:7e:67:45:a9:1e:c8:bc:27:0a:3a: ff:cd:0c:2d:a4:61:ab:9c:b7:3c:0f:f7:e6:86:43:e2:c2:9a: ad:88:2c:97:06:64:97:de:05:ec:af:2c:ed:57:b8:e0:b4:60: 64:e9:1a:57:51:cb:db:40:84:39:e1:5e:30:52:50:ca:87:88: 5d:32:e1:ad:5f:e6:a4:31:e8:a2:7e:c9:da:4e:e0:b9:8a:8f: 4b:85:bf:fb:4f:14:89:20:a0:b0:6b:07:ff:1a:9d:0b:fa:9d: f2:1a:ec:22:9b:fb:9b:89:cf:0a:1e:c3:6b:22:d4:c8:6e:fa: 10:11:d7:21:4a:3d:8a:55:fa:25:0f:bd:0a:dc:f0:3f:3e:19: 5b:01:37:e7:82:79:54:7d:79:98:42:91:15:2d:eb:59:da:18: c8:ce:0a:c2:78:19:b0:64:49:c2:24:81:72:52:3b:eb:5e:d8: 1b:ca:19:40:d5:d9:bc:d5:69:96:7c:41:ab:be:6b:16:0b:65: 10:90:d4:92:8e:7d:77:97:b2:3b:0d:78:81:46:57:d1:18:ca: b7:07:f5:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH1d0eKZLlkg/oEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIyN1oXDTI2MDcyMzIzMjIyN1owLzEtMCsGA1UEAxMk MjFhMjVmMjQtODkzZS00YWIzLTk4NjgtODk3NWQ3MmNhOWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAqxYDNXtDzcHBgP2CoFPHi15xtfRaPdp1SU 0izQzfulFCQJPiMv4p5qYSZTSzacMNY1VmDfmgpSvWxEslzKQKKEw2cu9Jrj2Kdj aUclBSumcXJxtWQpf32Wui9hLEOgseu3MDiW+1L3YYynz3TAuaDQxM4cy2RVuaCx mNwoe0dfPcxRlECKZWqSCS+QVQS1tObyCsiFmF3k2XqaSm4VjKuRXqwnFDfqLtZ4 JLmP7fO5jJMbELEF9JtOdpesu4RaHO6W9KJgEkgeGHyThE+p0nRjwLj9KKZOH5Ln 8J1dDWMSqoTEdtlFDyBD851FKpPdpUC7eNMVq7RGy3s7+0DGPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWXCeWkSXMC3jJrrL7XTGanehOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYmM1ZDRmNDktZTc0OC0z MjlkLWJkOWItNGY5NDE5ODFiMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnLJ0NrHCWef5qncRFTSSXEpS4P+vzMX2Ut5ZeQCDDVXDq6YtrGcyf/ 3eWRfmdFqR7IvCcKOv/NDC2kYauctzwP9+aGQ+LCmq2ILJcGZJfeBeyvLO1XuOC0 YGTpGldRy9tAhDnhXjBSUMqHiF0y4a1f5qQx6KJ+ydpO4LmKj0uFv/tPFIkgoLBr B/8anQv6nfIa7CKb+5uJzwoew2si1Mhu+hAR1yFKPYpV+iUPvQrc8D8+GVsBN+eC eVR9eZhCkRUt61naGMjOCsJ4GbBkScIkgXJSO+te2BvKGUDV2bzVaZZ8Qau+axYL ZRCQ1JKOfXeXsjsNeIFGV9EYyrcH9Rc= -----END CERTIFICATE-----Generated at Wed May 13 05:24:52 2026 by rpki-client