$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c18d3e3d-a373-313a-99ad-9c2273519a7d.roa File: c18d3e3d-a373-313a-99ad-9c2273519a7d.roa (raw, json) Hash identifier: InYZJVgZquVA0a1eXmAlfoW68vlvYm2KGdBi0ZvS8bU= Subject key identifier: DD:EF:0C:01:66:D1:68:ED:E8:C5:6F:F2:A9:77:02:44:E3:96:3C:1A Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1E4E6B19A25B3CDE2803C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c18d3e3d-a373-313a-99ad-9c2273519a7d.roa Signing time: Fri 24 Apr 2026 23:20:21 +0000 ROA not before: Fri 24 Apr 2026 23:20:21 +0000 ROA not after: Thu 23 Jul 2026 23:20:21 +0000 asID: 7029 IP address blocks: 64.16.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:4e:6b:19:a2:5b:3c:de:28:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:20:21 2026 GMT Not After : Jul 23 23:20:21 2026 GMT Subject: CN=59adec65-ebe0-4b09-816d-7223752ec7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:98:4c:ff:d5:02:73:eb:a5:63:18:9d:34:d4: 64:0e:5d:67:4c:d6:6c:e5:35:88:96:6b:7d:3b:ce: 66:8c:7e:35:25:0b:e6:43:ff:46:a8:bc:6f:3c:ef: 03:0f:82:7d:4a:17:7f:a1:46:ac:06:5c:7a:7f:bc: 0d:3b:fd:8e:39:6e:c1:53:c7:85:06:a5:52:d2:d9: 40:b0:ba:2c:ca:e6:17:56:02:c6:24:52:00:76:23: 86:c0:68:aa:47:0e:2d:70:9e:a0:5f:16:67:34:75: 94:af:9e:84:a9:31:23:d9:d4:19:ec:aa:52:23:d8: 73:04:83:64:6e:40:40:fd:63:2d:de:85:a5:35:e6: 94:d7:1e:c1:00:a7:91:8c:4f:08:86:88:ad:9d:b1: e8:7d:fa:42:31:a3:ef:59:c1:29:e3:97:5b:16:d3: 16:94:3a:7f:63:b5:72:5e:7d:0d:71:7e:ed:f5:25: 2e:ca:86:8f:37:4c:72:71:20:e0:37:53:ce:81:0b: 66:b5:55:a4:c3:6a:22:19:0f:a4:b9:2e:f1:b6:8a: 07:52:bf:f4:4c:72:41:54:40:fc:0c:c5:21:26:9d: b3:2e:27:cb:9c:cd:69:5c:34:41:fe:4c:89:20:d9: 89:4f:7f:f0:1d:a9:57:b5:e6:f6:f8:a4:91:f2:ec: 08:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EF:0C:01:66:D1:68:ED:E8:C5:6F:F2:A9:77:02:44:E3:96:3C:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c18d3e3d-a373-313a-99ad-9c2273519a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7f:fc:c5:54:f4:f5:ec:88:18:12:78:51:8e:7e:4a:ae:f7: 81:fa:b6:4b:63:ed:64:13:3d:00:38:2e:07:41:51:b4:4e:b9: 0e:3d:30:87:09:81:6f:bc:68:2b:69:eb:f2:1c:fc:14:37:cb: 40:38:20:80:de:85:4b:cf:fb:22:f1:80:09:45:11:0a:cf:d8: 1f:d1:ab:70:65:69:dc:44:a6:34:62:7c:61:83:e0:c1:c1:d9: 6c:ff:aa:a8:e8:17:cf:47:55:62:38:d4:7c:be:c7:e8:74:11: bc:a8:fc:70:71:c4:9d:9b:4a:d5:12:c7:15:c6:f1:41:89:04: eb:97:61:0c:dc:d2:42:89:ba:67:56:f4:46:13:58:c8:ec:25: e7:58:a4:b1:9c:ca:4e:47:11:13:25:12:d5:c6:0e:aa:e4:92: 8f:e9:16:67:da:be:56:4a:f1:48:80:4d:3a:b7:54:d7:a9:d7: 91:f4:29:17:0d:0a:6e:d1:58:9d:80:6b:62:2e:7f:23:ef:8b: ca:48:8e:1c:10:91:e5:30:c3:b2:03:15:2d:6d:b1:43:64:0c: e8:44:d7:b9:67:0c:cf:ba:18:93:4b:b0:28:4d:d9:fd:56:47: 7f:05:eb:75:de:00:ca:80:2f:30:9d:f6:8c:85:ed:f0:51:3c: 00:b3:11:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHk5rGaJbPN4oA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjAyMVoXDTI2MDcyMzIzMjAyMVowLzEtMCsGA1UEAxMk NTlhZGVjNjUtZWJlMC00YjA5LTgxNmQtNzIyMzc1MmVjN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJhM/9UCc+ulYxidNNRkDl1nTNZs5TWIlmt9 O85mjH41JQvmQ/9GqLxvPO8DD4J9Shd/oUasBlx6f7wNO/2OOW7BU8eFBqVS0tlA sLosyuYXVgLGJFIAdiOGwGiqRw4tcJ6gXxZnNHWUr56EqTEj2dQZ7KpSI9hzBINk bkBA/WMt3oWlNeaU1x7BAKeRjE8IhoitnbHoffpCMaPvWcEp45dbFtMWlDp/Y7Vy Xn0NcX7t9SUuyoaPN0xycSDgN1POgQtmtVWkw2oiGQ+kuS7xtooHUr/0THJBVED8 DMUhJp2zLifLnM1pXDRB/kyJINmJT3/wHalXteb2+KSR8uwIKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3vDAFm0Wjt6MVv8ql3AkTjljwaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYzE4ZDNlM2QtYTM3My0z MTNhLTk5YWQtOWMyMjczNTE5YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp//MVU9PXsiBgSeFGOfkqu94H6tktj7WQTPQA4LgdBUbROuQ49MIcJ gW+8aCtp6/Ic/BQ3y0A4IIDehUvP+yLxgAlFEQrP2B/Rq3BladxEpjRifGGD4MHB 2Wz/qqjoF89HVWI41Hy+x+h0Ebyo/HBxxJ2bStUSxxXG8UGJBOuXYQzc0kKJumdW 9EYTWMjsJedYpLGcyk5HERMlEtXGDqrkko/pFmfavlZK8UiATTq3VNep15H0KRcN Cm7RWJ2Aa2IufyPvi8pIjhwQkeUww7IDFS1tsUNkDOhE17lnDM+6GJNLsChN2f1W R38F63XeAMqALzCd9oyF7fBRPACzEZY= -----END CERTIFICATE-----Generated at Wed May 13 12:46:43 2026 by rpki-client