$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d6815317-1068-3438-a4a6-f31789b0ba3a.roa File: d6815317-1068-3438-a4a6-f31789b0ba3a.roa (raw, json) Hash identifier: plpAGC2eoToHMc2YCRpcw4IhgRevNGnObiP1sk7KWBM= Subject key identifier: 68:F1:BC:00:F2:EC:FE:E4:06:7A:42:A8:7A:42:79:EF:2B:6A:5B:1F Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F13881170F813CC92B880 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d6815317-1068-3438-a4a6-f31789b0ba3a.roa Signing time: Fri 24 Apr 2026 23:21:55 +0000 ROA not before: Fri 24 Apr 2026 23:21:55 +0000 ROA not after: Thu 23 Jul 2026 23:21:55 +0000 asID: 20001 IP address blocks: 64.16.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:13:88:11:70:f8:13:cc:92:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:55 2026 GMT Not After : Jul 23 23:21:55 2026 GMT Subject: CN=f392dec1-e577-4b21-ab47-851b363f47b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f0:7b:49:9b:8c:c9:a8:c5:9b:8e:14:f6:99: 5f:28:af:6b:05:af:89:a4:36:1c:c0:65:8a:02:ee: 89:85:07:b8:53:8c:6c:6c:35:95:e2:50:81:31:96: 1c:09:29:30:41:00:71:30:39:cb:89:be:fe:fb:9d: fd:bf:6e:b6:70:2f:0e:4a:b8:75:fa:11:c5:27:07: 1f:5d:2f:0d:58:e7:7e:0f:13:5e:10:0f:f0:d8:a5: 9a:28:9b:50:9e:84:7d:37:ff:e5:e5:f9:03:b3:37: fb:85:45:16:9a:99:fe:75:52:ea:e0:0a:c2:f6:cd: 34:49:4d:83:04:62:77:ca:0f:4b:81:9f:28:72:12: fb:4d:6e:62:6e:39:77:b5:29:3a:2c:75:b4:02:ba: cc:3d:82:e1:6f:06:56:bc:07:d4:93:4a:4c:59:0e: 57:d4:ca:16:58:82:d2:10:77:ad:b4:c8:cf:55:c0: 7d:fb:4f:04:98:67:47:c0:af:b6:e6:26:82:0f:46: ad:00:93:c4:ca:ad:93:d3:10:b3:21:b0:41:b6:b0: c3:48:e6:87:57:5a:c6:1b:41:fc:ae:63:4a:b8:e5: 9e:77:2e:ce:34:e6:51:31:66:70:3e:d1:d9:28:2e: 94:90:48:4d:e0:e0:22:c7:41:82:e7:53:84:ae:22: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F1:BC:00:F2:EC:FE:E4:06:7A:42:A8:7A:42:79:EF:2B:6A:5B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d6815317-1068-3438-a4a6-f31789b0ba3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:be:9c:3f:5c:53:28:19:98:df:fb:14:0d:d9:ef:2f:0e:a0: e0:22:4a:da:91:4d:11:e8:30:7e:4c:28:a8:7b:32:e7:d2:cd: c3:f2:94:08:c6:db:92:c0:44:4c:c9:51:20:50:94:fa:0a:ed: 2d:09:67:68:d3:dc:88:5d:c4:99:49:46:87:83:f3:e1:57:17: 80:f1:dd:fe:b6:5e:6d:29:1e:c6:45:5e:2c:08:2b:b6:d0:82: 71:bb:81:0d:80:5a:54:9d:9a:80:e5:7d:f2:8a:51:c9:80:43: 5b:17:7d:a9:81:01:47:c5:39:21:33:95:33:8c:e8:19:2f:91: 6e:7e:ef:62:64:02:0f:6e:2b:46:8d:50:a2:92:d9:ac:8a:d8: ff:43:57:5b:0e:95:28:e4:f8:8f:d0:95:ba:28:d0:69:21:3e: 15:9c:58:39:51:c2:a5:f7:ba:52:49:00:cf:35:52:9f:46:24: 3b:69:91:e0:6b:19:ba:0d:eb:8d:29:49:e8:5e:41:53:34:37: b5:bd:73:89:a0:d2:1b:9c:f5:66:0b:f8:01:97:a5:2e:08:8a: ae:94:bc:fd:06:3f:35:dd:6c:b9:85:11:06:a4:27:77:98:9b: ba:a5:6e:00:79:65:db:e5:57:43:fd:73:60:1e:bd:ac:48:30: a9:76:10:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHxOIEXD4E8ySuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjE1NVoXDTI2MDcyMzIzMjE1NVowLzEtMCsGA1UEAxMk ZjM5MmRlYzEtZTU3Ny00YjIxLWFiNDctODUxYjM2M2Y0N2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPB7SZuMyajFm44U9plfKK9rBa+JpDYcwGWK Au6JhQe4U4xsbDWV4lCBMZYcCSkwQQBxMDnLib7++539v262cC8OSrh1+hHFJwcf XS8NWOd+DxNeEA/w2KWaKJtQnoR9N//l5fkDszf7hUUWmpn+dVLq4ArC9s00SU2D BGJ3yg9LgZ8ochL7TW5ibjl3tSk6LHW0ArrMPYLhbwZWvAfUk0pMWQ5X1MoWWILS EHettMjPVcB9+08EmGdHwK+25iaCD0atAJPEyq2T0xCzIbBBtrDDSOaHV1rGG0H8 rmNKuOWedy7ONOZRMWZwPtHZKC6UkEhN4OAix0GC51OEriJkjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjxvADy7P7kBnpCqHpCee8ralsfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZDY4MTUzMTctMTA2OC0z NDM4LWE0YTYtZjMxNzg5YjBiYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2+nD9cUygZmN/7FA3Z7y8OoOAiStqRTRHoMH5MKKh7MufSzcPylAjG 25LAREzJUSBQlPoK7S0JZ2jT3IhdxJlJRoeD8+FXF4Dx3f62Xm0pHsZFXiwIK7bQ gnG7gQ2AWlSdmoDlffKKUcmAQ1sXfamBAUfFOSEzlTOM6BkvkW5+72JkAg9uK0aN UKKS2ayK2P9DV1sOlSjk+I/Qlboo0GkhPhWcWDlRwqX3ulJJAM81Up9GJDtpkeBr GboN640pSeheQVM0N7W9c4mg0huc9WYL+AGXpS4Iiq6UvP0GPzXdbLmFEQakJ3eY m7qlbgB5ZdvlV0P9c2AevaxIMKl2EA0= -----END CERTIFICATE-----Generated at Wed May 13 19:06:31 2026 by rpki-client