$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d76c7540-47d3-3727-8b51-14804d7b742d.roa File: d76c7540-47d3-3727-8b51-14804d7b742d.roa (raw, json) Hash identifier: cxZpL5ayFO69sCPd66qAmUtVtrQRRbN+y6O/JYq1os8= Subject key identifier: 42:3E:EC:BF:57:AE:DF:27:7D:88:E9:7C:4C:0B:FD:FF:23:7E:80:28 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1FB09F441D08D641622F80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d76c7540-47d3-3727-8b51-14804d7b742d.roa Signing time: Fri 24 Apr 2026 23:23:09 +0000 ROA not before: Fri 24 Apr 2026 23:23:09 +0000 ROA not after: Thu 23 Jul 2026 23:23:09 +0000 asID: 397630 IP address blocks: 64.16.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:b0:9f:44:1d:08:d6:41:62:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:23:09 2026 GMT Not After : Jul 23 23:23:09 2026 GMT Subject: CN=8b5bec9e-5518-4b42-bba6-4c506a5d911e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:09:ca:cf:ff:4b:98:c1:cc:d8:d3:01:11:77: f9:cc:2e:b2:f9:f4:26:ee:26:6f:90:8d:b0:70:90: 12:2b:cd:cd:fa:2e:86:5a:e5:a7:ed:3f:f5:8e:32: ee:e1:04:3b:79:d1:47:98:12:0b:79:cf:9f:59:6d: 7b:3b:f9:cf:4e:43:1b:7f:87:76:44:07:e0:ef:f6: 9c:8f:6e:5b:d5:0b:be:7d:d2:83:78:36:98:d1:ca: 96:f9:03:5d:89:a0:f6:bc:6b:dc:75:df:48:13:99: 65:f0:dc:5d:6c:93:b0:06:f9:b7:5f:aa:4a:14:6c: ce:fb:5b:30:a4:c1:85:53:f5:b0:ef:3b:e6:eb:71: 17:76:ac:f9:43:7c:49:46:17:65:d8:6d:5f:03:52: 88:f0:27:40:e9:03:ef:46:c9:b2:c3:2e:14:1a:1c: 5e:56:18:c9:52:03:52:48:ac:4f:f9:4b:34:95:02: 11:0c:12:a2:5c:cd:f3:3a:47:72:ef:db:a1:b5:10: f8:6b:ef:6e:0d:7b:96:dc:04:6d:c8:19:1f:0c:eb: e1:9f:15:ba:17:70:63:f5:0d:8f:87:58:82:ee:e1: e3:76:ed:b9:80:b9:ca:a9:56:99:46:a4:49:de:6b: fe:ef:3f:f5:40:70:ef:a6:c5:83:89:a4:63:86:9f: f7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3E:EC:BF:57:AE:DF:27:7D:88:E9:7C:4C:0B:FD:FF:23:7E:80:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d76c7540-47d3-3727-8b51-14804d7b742d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:4f:39:dd:ea:87:e2:f3:76:2e:a9:e6:6d:09:0c:77:62:1c: ed:79:2a:49:2d:c8:9b:f8:ad:bd:d9:d8:69:e8:37:3e:4d:21: 59:9f:53:43:37:f4:49:42:68:20:8e:63:fd:41:07:ba:a8:e6: 91:c0:73:ab:14:b1:0f:4f:6e:8b:a5:11:12:4c:69:b6:26:32: f2:d1:c5:4c:97:57:17:be:61:62:fd:51:bb:7b:3e:d5:25:e9: 68:75:1d:3b:7e:0a:f7:88:f0:47:b5:e1:fd:7d:5f:65:2a:f1: 78:51:fd:69:87:92:03:ba:be:f7:4e:1f:0c:66:70:65:df:c2: 25:2e:8c:cf:17:0b:4f:40:62:85:ea:63:cd:29:97:4b:d9:e1: 62:e5:d4:31:9e:33:f7:37:aa:0f:26:ec:cb:09:3f:36:97:34: a9:cf:5e:0d:dc:3b:ee:c0:18:a3:8b:25:ad:46:41:75:48:6d: 7b:64:b8:22:df:eb:c4:90:da:84:bb:43:51:ef:36:14:f1:e3: 74:41:70:da:84:03:5e:7b:d7:45:6c:69:34:dd:6a:6d:85:dd: df:be:02:4e:62:f8:96:d8:fd:92:75:8b:3a:09:cb:db:de:01: ab:3a:63:36:f9:b6:dc:c2:1d:54:42:5c:d0:ec:25:de:9f:82: 42:f9:ac:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH7CfRB0I1kFiL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjMwOVoXDTI2MDcyMzIzMjMwOVowLzEtMCsGA1UEAxMk OGI1YmVjOWUtNTUxOC00YjQyLWJiYTYtNGM1MDZhNWQ5MTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgnKz/9LmMHM2NMBEXf5zC6y+fQm7iZvkI2w cJASK83N+i6GWuWn7T/1jjLu4QQ7edFHmBILec+fWW17O/nPTkMbf4d2RAfg7/ac j25b1Qu+fdKDeDaY0cqW+QNdiaD2vGvcdd9IE5ll8NxdbJOwBvm3X6pKFGzO+1sw pMGFU/Ww7zvm63EXdqz5Q3xJRhdl2G1fA1KI8CdA6QPvRsmywy4UGhxeVhjJUgNS SKxP+Us0lQIRDBKiXM3zOkdy79uhtRD4a+9uDXuW3ARtyBkfDOvhnxW6F3Bj9Q2P h1iC7uHjdu25gLnKqVaZRqRJ3mv+7z/1QHDvpsWDiaRjhp/3NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI+7L9Xrt8nfYjpfEwL/f8jfoAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZDc2Yzc1NDAtNDdkMy0z NzI3LThiNTEtMTQ4MDRkN2I3NDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1POd3qh+Lzdi6p5m0JDHdiHO15KkktyJv4rb3Z2GnoNz5NIVmfU0M3 9ElCaCCOY/1BB7qo5pHAc6sUsQ9PboulERJMabYmMvLRxUyXVxe+YWL9Ubt7PtUl 6Wh1HTt+CveI8Ee14f19X2Uq8XhR/WmHkgO6vvdOHwxmcGXfwiUujM8XC09AYoXq Y80pl0vZ4WLl1DGeM/c3qg8m7MsJPzaXNKnPXg3cO+7AGKOLJa1GQXVIbXtkuCLf 68SQ2oS7Q1HvNhTx43RBcNqEA15710VsaTTdam2F3d++Ak5i+JbY/ZJ1izoJy9ve Aas6Yzb5ttzCHVRCXNDsJd6fgkL5rMs= -----END CERTIFICATE-----Generated at Wed May 13 14:50:29 2026 by rpki-client