$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c2bbbf5c-8486-3cc9-9800-c31a3c482d72.roa File: c2bbbf5c-8486-3cc9-9800-c31a3c482d72.roa (raw, json) Hash identifier: MzieTz4j4/Xfj8qr1dcy+gmWl9HIIS8VISeNj5y7duQ= Subject key identifier: B6:31:D8:E1:4C:D1:70:01:84:F1:4E:34:78:57:61:AC:00:41:25:5F Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E202ABDB322C4105C370F80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c2bbbf5c-8486-3cc9-9800-c31a3c482d72.roa Signing time: Fri 24 Apr 2026 23:24:06 +0000 ROA not before: Fri 24 Apr 2026 23:24:06 +0000 ROA not after: Thu 23 Jul 2026 23:24:06 +0000 asID: 397630 IP address blocks: 64.16.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:20:2a:bd:b3:22:c4:10:5c:37:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:24:06 2026 GMT Not After : Jul 23 23:24:06 2026 GMT Subject: CN=ab109008-7d01-4b3c-84bd-0b07048cb72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:17:d4:93:61:d1:16:6a:21:2f:6b:0c:79:a5: 48:13:ba:3b:0f:5f:2c:96:3c:77:28:54:42:4a:f1: 64:9d:4d:be:63:3e:8b:cc:d5:5b:50:fb:7a:6b:b5: 0d:95:23:39:ee:26:14:aa:59:41:a3:8d:48:cd:22: a5:71:51:a8:b5:ea:d4:8d:ff:db:ff:e0:f1:a2:ea: 37:63:fb:0a:2c:f2:84:1d:6e:93:51:6b:ba:d8:39: 9e:8f:3d:55:eb:04:fd:78:3c:a2:c8:32:cf:44:6a: 84:6a:00:0e:14:56:33:41:0b:57:ba:66:bf:19:fe: 7b:e1:38:42:98:92:88:40:f0:ad:41:62:a6:c5:e8: c0:80:a3:9c:4c:8b:b3:68:9c:25:66:56:62:ad:73: 14:9e:df:9d:fa:eb:09:74:3a:32:6f:1a:cf:70:65: 52:7e:32:3e:b6:e6:45:dc:47:0d:b2:a9:7f:e6:b2: 97:b6:04:d9:3a:48:65:4c:4f:bb:bb:a7:e5:1c:4f: ca:05:61:54:3b:67:14:ca:35:8c:c5:5d:f3:d2:e4: c7:a0:f2:20:12:e3:25:ed:d4:9a:81:9a:a5:2f:51: c1:85:6c:24:a3:37:4f:d5:eb:1a:ec:13:eb:35:0e: d5:a3:4a:99:69:1f:b8:4e:bc:6c:58:be:df:17:cd: f6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:31:D8:E1:4C:D1:70:01:84:F1:4E:34:78:57:61:AC:00:41:25:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c2bbbf5c-8486-3cc9-9800-c31a3c482d72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d0:01:9b:eb:3f:4e:30:24:42:92:ee:5e:dc:20:3e:78:5a: 06:63:cf:6a:4c:d9:8d:e8:06:61:93:b5:11:16:2c:03:5a:18: 47:00:77:c5:60:fa:c6:e1:89:d2:30:61:34:64:b1:3d:55:9b: 4a:11:97:7c:ce:54:61:04:08:91:97:e7:32:98:96:5a:04:cb: 09:b5:ac:de:f2:4d:31:2a:c4:65:2f:00:67:3b:60:56:50:c1: 32:86:69:5e:64:a9:30:9e:67:bd:6b:d1:42:cd:31:4e:d9:d2: 3b:f2:08:83:c4:a1:51:83:30:3c:52:6e:e1:88:b5:bd:63:76: b1:52:e3:48:19:e7:7b:3a:6a:0a:b2:8a:9d:b9:58:63:9f:fe: 42:3c:81:e6:96:4f:54:ca:a3:1b:f3:70:aa:98:5f:35:8e:f6: d4:12:fe:aa:ff:b8:79:42:7c:4f:13:fa:f3:bb:93:f5:27:ac: a6:f6:f3:61:97:3c:a9:c1:04:eb:76:d7:09:c4:33:aa:3a:17: 4c:00:ad:4f:e1:d4:27:40:bd:42:3e:4a:66:96:7a:8b:31:0d: 39:f1:74:e7:64:ec:6b:28:d3:8e:24:80:0a:4c:fa:28:54:93: 8d:47:a2:e1:8c:95:f9:3e:af:bb:59:44:d0:42:43:cf:e2:10: 7f:13:88:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eICq9syLEEFw3D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjQwNloXDTI2MDcyMzIzMjQwNlowLzEtMCsGA1UEAxMk YWIxMDkwMDgtN2QwMS00YjNjLTg0YmQtMGIwNzA0OGNiNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxfUk2HRFmohL2sMeaVIE7o7D18sljx3KFRC SvFknU2+Yz6LzNVbUPt6a7UNlSM57iYUqllBo41IzSKlcVGoterUjf/b/+Dxouo3 Y/sKLPKEHW6TUWu62Dmejz1V6wT9eDyiyDLPRGqEagAOFFYzQQtXuma/Gf574ThC mJKIQPCtQWKmxejAgKOcTIuzaJwlZlZirXMUnt+d+usJdDoybxrPcGVSfjI+tuZF 3EcNsql/5rKXtgTZOkhlTE+7u6flHE/KBWFUO2cUyjWMxV3z0uTHoPIgEuMl7dSa gZqlL1HBhWwkozdP1esa7BPrNQ7Vo0qZaR+4TrxsWL7fF832KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYx2OFM0XABhPFONHhXYawAQSVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvYzJiYmJmNWMtODQ4Ni0z Y2M5LTk4MDAtYzMxYTNjNDgyZDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITQAZvrP04wJEKS7l7cID54WgZjz2pM2Y3oBmGTtREWLANaGEcAd8Vg +sbhidIwYTRksT1Vm0oRl3zOVGEECJGX5zKYlloEywm1rN7yTTEqxGUvAGc7YFZQ wTKGaV5kqTCeZ71r0ULNMU7Z0jvyCIPEoVGDMDxSbuGItb1jdrFS40gZ53s6agqy ip25WGOf/kI8geaWT1TKoxvzcKqYXzWO9tQS/qr/uHlCfE8T+vO7k/UnrKb282GX PKnBBOt21wnEM6o6F0wArU/h1CdAvUI+SmaWeosxDTnxdOdk7Gso044kgApM+ihU k41HouGMlfk+r7tZRNBCQ8/iEH8TiA0= -----END CERTIFICATE-----Generated at Wed May 13 12:24:30 2026 by rpki-client