$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d5b25144-3ed7-39de-a799-9a8d9b1938a6.roa File: d5b25144-3ed7-39de-a799-9a8d9b1938a6.roa (raw, json) Hash identifier: 5BUXl+sga2M0vlHWECgMWVUhROZLSc1RzmY/JImNCMs= Subject key identifier: 4C:82:C5:26:50:31:80:60:0E:6A:F3:E0:72:DA:EF:DE:51:E7:13:3A Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1EDCA21223AF5BDBD345C0 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d5b25144-3ed7-39de-a799-9a8d9b1938a6.roa Signing time: Fri 24 Apr 2026 23:21:29 +0000 ROA not before: Fri 24 Apr 2026 23:21:29 +0000 ROA not after: Thu 23 Jul 2026 23:21:29 +0000 asID: 7029 IP address blocks: 64.16.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:dc:a2:12:23:af:5b:db:d3:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:29 2026 GMT Not After : Jul 23 23:21:29 2026 GMT Subject: CN=b2c87e0e-58c3-4f06-874b-5d5fa2d3526d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:19:fd:67:22:33:2c:28:29:99:d6:2c:56:d5: 67:35:dc:b9:be:9f:af:af:c0:69:7f:24:6b:91:ae: e7:98:13:d7:ee:c4:bd:76:de:b7:a5:c3:62:92:e8: 51:66:50:d2:61:37:7d:4a:fc:a4:0c:8d:25:41:d0: 94:9e:f0:e2:5a:fb:3a:6a:b2:2e:cf:11:34:26:c3: 0f:8c:46:99:3f:eb:73:35:f6:1c:89:d4:88:bb:4f: 65:a0:e0:a6:56:bd:e5:5d:cb:c2:b1:1e:bb:ec:c9: 9b:eb:45:6d:c1:8a:fa:e6:48:1c:0b:05:6b:df:63: 5b:75:58:88:6d:cf:a8:5d:5c:f9:c0:d2:0c:34:b4: 5d:b0:9e:bc:7c:41:20:f9:ec:06:26:eb:e3:24:c2: 1a:7b:a1:62:b9:66:cc:2f:1e:50:94:47:ff:13:0d: e0:4a:06:ed:69:65:04:2f:68:30:7c:fb:ce:b4:41: 98:ce:85:66:f9:3a:f8:24:53:a7:ce:10:33:34:b6: 46:93:42:78:9b:36:1f:ab:a7:d4:80:5f:f2:1e:4e: 65:4a:1f:f3:cb:64:b9:e2:46:e6:4f:5a:e2:cc:e0: 8c:cc:33:0e:da:ff:99:7b:cf:3e:b1:d9:45:db:2c: db:cb:0d:e8:68:fa:8a:e2:b5:ea:82:f4:16:33:e9: ca:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:82:C5:26:50:31:80:60:0E:6A:F3:E0:72:DA:EF:DE:51:E7:13:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d5b25144-3ed7-39de-a799-9a8d9b1938a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:0b:36:19:62:f6:51:1d:1f:c9:79:95:60:69:97:a6:1b:2e: 03:3e:7c:1f:69:68:24:d7:81:fb:da:24:3c:0e:cf:7a:b9:7f: 2b:43:e0:33:b1:e9:b6:0b:e8:37:80:5f:32:2d:0c:d4:30:60: 9a:cc:27:88:aa:e7:a5:01:b7:cf:88:7e:dc:e7:cb:13:26:6c: 34:48:7e:55:63:63:58:62:15:62:ad:00:85:3f:31:fa:2e:6a: f9:41:87:36:06:ce:32:2c:d3:44:7e:c4:bd:a3:99:63:5f:3a: e2:7d:91:b4:57:85:19:6d:36:ae:57:c4:b8:a2:05:f5:46:22: 0d:ca:be:79:a3:bd:f2:69:70:5b:cf:86:07:9b:e0:d8:ee:5f: 46:68:06:60:fe:f7:12:6c:de:d4:ea:c8:68:5a:da:2f:99:54: 88:a4:ce:7f:3e:55:5e:c7:ab:d2:a3:ff:f1:03:cf:9b:42:4e: b2:4c:d5:12:f7:4d:2f:ad:30:4a:d7:51:4a:8f:67:02:8f:fe: 9a:78:5f:23:94:7c:f3:21:a9:2d:d3:94:84:74:53:f9:9b:31: 03:04:b2:b7:96:4a:03:0a:99:97:a1:9f:a7:cd:b4:06:2f:6d: d9:5e:98:5f:dd:c4:61:81:6d:7c:35:e1:60:9d:b5:af:bd:f7: 4b:35:db:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHtyiEiOvW9vTRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjEyOVoXDTI2MDcyMzIzMjEyOVowLzEtMCsGA1UEAxMk YjJjODdlMGUtNThjMy00ZjA2LTg3NGItNWQ1ZmEyZDM1MjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRn9ZyIzLCgpmdYsVtVnNdy5vp+vr8BpfyRr ka7nmBPX7sS9dt63pcNikuhRZlDSYTd9SvykDI0lQdCUnvDiWvs6arIuzxE0JsMP jEaZP+tzNfYcidSIu09loOCmVr3lXcvCsR677Mmb60VtwYr65kgcCwVr32NbdViI bc+oXVz5wNIMNLRdsJ68fEEg+ewGJuvjJMIae6FiuWbMLx5QlEf/Ew3gSgbtaWUE L2gwfPvOtEGYzoVm+Tr4JFOnzhAzNLZGk0J4mzYfq6fUgF/yHk5lSh/zy2S54kbm T1rizOCMzDMO2v+Ze88+sdlF2yzbyw3oaPqK4rXqgvQWM+nKZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyCxSZQMYBgDmrz4HLa795R5xM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZDViMjUxNDQtM2VkNy0z OWRlLWE3OTktOWE4ZDliMTkzOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsLNhli9lEdH8l5lWBpl6YbLgM+fB9paCTXgfvaJDwOz3q5fytD4DOx 6bYL6DeAXzItDNQwYJrMJ4iq56UBt8+IftznyxMmbDRIflVjY1hiFWKtAIU/Mfou avlBhzYGzjIs00R+xL2jmWNfOuJ9kbRXhRltNq5XxLiiBfVGIg3KvnmjvfJpcFvP hgeb4NjuX0ZoBmD+9xJs3tTqyGha2i+ZVIikzn8+VV7Hq9Kj//EDz5tCTrJM1RL3 TS+tMErXUUqPZwKP/pp4XyOUfPMhqS3TlIR0U/mbMQMEsreWSgMKmZehn6fNtAYv bdlemF/dxGGBbXw14WCdta+990s129U= -----END CERTIFICATE-----Generated at Wed May 13 12:42:59 2026 by rpki-client