$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/cbb5abe5-a287-3408-8d6f-dec332884a33.roa File: cbb5abe5-a287-3408-8d6f-dec332884a33.roa (raw, json) Hash identifier: 21vtNVnJ6Lgqckncrmf7KLDTofjAMO0R21dYnLigxrY= Subject key identifier: CF:C9:E9:B6:08:69:E2:D4:2A:B4:9B:05:F5:4E:26:82:4F:71:F6:74 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F727A3F9CD25F2F225880 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/cbb5abe5-a287-3408-8d6f-dec332884a33.roa Signing time: Fri 24 Apr 2026 23:22:39 +0000 ROA not before: Fri 24 Apr 2026 23:22:39 +0000 ROA not after: Thu 23 Jul 2026 23:22:39 +0000 asID: 20001 IP address blocks: 64.16.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:72:7a:3f:9c:d2:5f:2f:22:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:39 2026 GMT Not After : Jul 23 23:22:39 2026 GMT Subject: CN=f9f5b22f-7af1-405f-ac43-197a1b0fbd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0c:e6:7b:1c:8e:ea:28:73:6a:f2:8b:79:1f: 6a:a9:68:4e:68:84:7a:63:73:7d:40:b1:ea:3b:4e: 7b:66:23:95:e0:ad:6d:b7:70:3a:9b:47:e1:cd:5d: fb:75:d1:46:17:85:8d:8e:f1:0d:59:57:e5:c0:f7: 5d:63:fd:67:1b:84:8d:59:84:08:31:97:bd:c4:11: 16:d6:94:63:8e:2f:eb:de:93:45:7a:84:ed:e8:5a: 91:72:8e:dd:93:48:c8:7c:d9:1c:c2:62:11:ed:de: 6b:15:6f:b9:32:c5:38:3d:a0:43:c7:b6:c3:4a:29: 30:0f:74:27:f8:80:64:93:aa:6f:00:27:37:c2:ed: 0d:a2:55:86:c3:fe:ef:1e:d0:14:60:92:8b:9c:3a: 5a:44:0a:17:f2:1f:90:3b:eb:38:f2:66:7b:6c:6d: 87:c6:22:1d:cd:14:44:1b:8d:aa:63:6a:2e:78:f9: 32:50:f7:79:10:fa:d2:00:1a:a7:82:34:b3:f4:f4: ec:06:16:43:82:a6:ee:02:06:32:9d:69:f0:24:7c: b5:b3:93:dc:6c:b9:9c:14:44:a4:44:ce:a4:6b:90: 63:54:29:ef:ad:2e:55:bd:58:1a:4b:9f:5b:ad:ec: ac:a1:18:be:eb:de:8a:02:d5:59:74:08:92:fb:9a: 71:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C9:E9:B6:08:69:E2:D4:2A:B4:9B:05:F5:4E:26:82:4F:71:F6:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/cbb5abe5-a287-3408-8d6f-dec332884a33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:14:eb:c7:f6:d4:c5:3c:1e:c9:3a:b9:96:8b:b7:8c:5c:68: bc:3d:70:a2:6a:7b:a2:a1:85:53:47:7d:f8:18:7e:55:c9:94: 5c:b6:b8:de:cf:73:b9:c0:a8:b5:6e:99:cb:61:49:af:db:32: 7d:eb:8e:77:6e:b4:5e:71:70:a3:79:46:0a:82:9d:97:09:6c: 7a:7a:60:cd:67:80:2f:6f:b2:a2:fa:c9:92:ce:5f:10:8c:c2: 4d:08:be:95:0d:78:82:88:2e:19:08:46:8e:d2:10:05:f0:70: 06:a4:ab:10:41:d6:6b:46:c1:f3:16:02:c5:70:fc:88:66:8a: 7d:65:a9:c7:8b:04:01:5b:5e:ca:14:f8:c3:d7:f2:99:ed:39: e1:94:f5:24:77:fe:5c:82:0b:76:6c:39:45:56:3a:43:7c:d8: 6c:ed:94:8c:6b:24:5a:c4:d9:15:06:7f:a4:d2:9f:2d:f0:84: f9:d9:3d:10:d8:f6:32:8b:f5:62:6b:c3:50:54:ab:25:f2:9c: 15:b0:4e:97:d3:ad:db:8e:cb:9f:3d:09:c0:fa:4a:89:0b:6d: 90:51:e3:86:ee:fa:5f:cf:6a:1b:8d:08:9d:03:fa:b3:fc:42: 55:a9:a0:90:e5:a4:03:be:29:3a:33:bc:79:a5:a3:2b:07:4c: 66:a1:55:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH3J6P5zSXy8iWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIzOVoXDTI2MDcyMzIzMjIzOVowLzEtMCsGA1UEAxMk ZjlmNWIyMmYtN2FmMS00MDVmLWFjNDMtMTk3YTFiMGZiZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQzmexyO6ihzavKLeR9qqWhOaIR6Y3N9QLHq O057ZiOV4K1tt3A6m0fhzV37ddFGF4WNjvENWVflwPddY/1nG4SNWYQIMZe9xBEW 1pRjji/r3pNFeoTt6FqRco7dk0jIfNkcwmIR7d5rFW+5MsU4PaBDx7bDSikwD3Qn +IBkk6pvACc3wu0NolWGw/7vHtAUYJKLnDpaRAoX8h+QO+s48mZ7bG2HxiIdzRRE G42qY2ouePkyUPd5EPrSABqngjSz9PTsBhZDgqbuAgYynWnwJHy1s5PcbLmcFESk RM6ka5BjVCnvrS5VvVgaS59breysoRi+696KAtVZdAiS+5px7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/J6bYIaeLUKrSbBfVOJoJPcfZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvY2JiNWFiZTUtYTI4Ny0z NDA4LThkNmYtZGVjMzMyODg0YTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEU68f21MU8Hsk6uZaLt4xcaLw9cKJqe6KhhVNHffgYflXJlFy2uN7P c7nAqLVumcthSa/bMn3rjndutF5xcKN5RgqCnZcJbHp6YM1ngC9vsqL6yZLOXxCM wk0IvpUNeIKILhkIRo7SEAXwcAakqxBB1mtGwfMWAsVw/Ihmin1lqceLBAFbXsoU +MPX8pntOeGU9SR3/lyCC3ZsOUVWOkN82GztlIxrJFrE2RUGf6TSny3whPnZPRDY 9jKL9WJrw1BUqyXynBWwTpfTrduOy589CcD6SokLbZBR44bu+l/PahuNCJ0D+rP8 QlWpoJDlpAO+KTozvHmloysHTGahVZY= -----END CERTIFICATE-----Generated at Wed May 13 10:43:24 2026 by rpki-client