$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e4f65c97-b6a5-3f1b-91d0-dbb437185d21.roa File: e4f65c97-b6a5-3f1b-91d0-dbb437185d21.roa (raw, json) Hash identifier: dyUeAqFaVYzF2yTT/5XlxDquOrpR52PSseUU7QrJmTI= Subject key identifier: 0C:31:A7:FD:97:3C:F6:95:9B:3E:42:91:D3:B3:8A:A9:AC:CD:2E:F1 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D96ADF349D0F47C5289E69680 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e4f65c97-b6a5-3f1b-91d0-dbb437185d21.roa Signing time: Wed 22 Apr 2026 07:23:19 +0000 ROA not before: Wed 22 Apr 2026 07:23:19 +0000 ROA not after: Tue 21 Jul 2026 07:23:19 +0000 asID: 7029 IP address blocks: 64.16.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:96:ad:f3:49:d0:f4:7c:52:89:e6:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 22 07:23:19 2026 GMT Not After : Jul 21 07:23:19 2026 GMT Subject: CN=b84685d2-dc7a-4ae9-b0d6-dc635bdecdb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0c:79:57:18:d4:d6:d7:f2:0a:e8:b5:08:d4: d9:94:15:40:da:29:c2:76:c7:75:e8:f7:9c:6e:af: 6a:c1:8b:83:17:0b:e6:6c:3c:e6:96:3e:3c:76:3b: 66:61:9d:75:54:82:54:9a:cf:c9:df:60:b3:62:cd: 58:d7:70:aa:28:d8:55:88:94:35:27:3f:71:85:ef: 57:b6:38:75:e0:40:11:db:c6:e9:cd:c2:dd:4a:64: 92:e5:23:a4:83:5a:2c:ed:ef:f9:bc:44:5b:3f:ed: 59:44:de:cb:8d:ac:c0:70:08:e3:ad:da:53:5c:36: e7:2d:c4:85:0f:66:e3:d5:1d:6e:ce:cd:05:9f:fc: 3b:0e:fe:05:26:f6:f5:be:32:54:ab:40:47:9e:e4: 05:83:4b:c5:e0:a0:c2:7c:64:78:5f:aa:e9:70:25: a1:5a:8f:ba:cf:9d:cf:6e:87:53:6e:97:79:78:26: 9a:45:77:24:a5:9b:b3:72:07:54:71:b0:0c:2d:45: df:ac:7c:f9:60:c8:55:09:e1:4c:bb:84:ea:a6:70: 6e:83:bb:bd:16:0c:e5:f0:5b:da:6f:ea:44:a0:13: d7:b3:1d:1e:65:5f:fb:f9:14:e7:01:2c:4f:1e:cf: c0:4c:c1:e6:50:98:e8:5c:c5:91:e0:11:ce:f7:1f: df:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:31:A7:FD:97:3C:F6:95:9B:3E:42:91:D3:B3:8A:A9:AC:CD:2E:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e4f65c97-b6a5-3f1b-91d0-dbb437185d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:84:67:4c:9d:57:9e:c2:2e:2c:10:39:50:53:a6:d5:b7:eb: 48:02:30:6b:f3:80:e4:86:9d:83:21:65:bf:9b:65:7a:09:7b: 69:d2:50:06:58:7b:52:66:f5:d1:cc:46:4e:b4:02:f0:aa:40: a0:e0:92:6e:42:48:3a:6e:ea:83:52:ce:b5:fa:64:26:80:6e: c5:df:5b:1d:54:e6:11:db:e7:b1:08:7f:5e:87:d4:c6:ef:89: 86:49:05:87:b9:c7:74:75:c2:35:d8:ab:60:fc:11:f7:6d:6e: 8a:8d:98:b8:f1:bb:bb:72:75:cd:78:ff:76:c2:c6:34:e3:17: 18:38:5f:de:54:1b:84:3e:70:73:f3:30:c9:7a:07:9f:83:e2: a9:23:46:4d:a5:45:2c:cd:db:20:b6:d8:2d:47:45:3e:83:ec: 0c:51:d0:b1:81:28:8b:24:59:cb:82:de:18:0d:7e:9e:d5:33: 62:6b:b1:e7:79:21:b5:ca:5e:6a:08:d4:5b:10:8c:cd:a0:2a: 90:7f:76:26:d8:82:56:70:25:83:f3:88:d6:36:65:f6:90:d1: 9f:75:0f:ea:9d:c4:75:af:78:46:a5:34:15:e3:6f:df:89:54: 50:ca:28:3a:6c:95:2d:c3:7a:01:fa:cb:e2:ee:2a:f7:b8:b4: 76:d4:f0:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2WrfNJ0PR8UonmloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyMjA3MjMxOVoXDTI2MDcyMTA3MjMxOVowLzEtMCsGA1UEAxMk Yjg0Njg1ZDItZGM3YS00YWU5LWIwZDYtZGM2MzViZGVjZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAx5VxjU1tfyCui1CNTZlBVA2inCdsd16Pec bq9qwYuDFwvmbDzmlj48djtmYZ11VIJUms/J32CzYs1Y13CqKNhViJQ1Jz9xhe9X tjh14EAR28bpzcLdSmSS5SOkg1os7e/5vERbP+1ZRN7LjazAcAjjrdpTXDbnLcSF D2bj1R1uzs0Fn/w7Dv4FJvb1vjJUq0BHnuQFg0vF4KDCfGR4X6rpcCWhWo+6z53P bodTbpd5eCaaRXckpZuzcgdUcbAMLUXfrHz5YMhVCeFMu4TqpnBug7u9Fgzl8Fva b+pEoBPXsx0eZV/7+RTnASxPHs/ATMHmUJjoXMWR4BHO9x/f5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwxp/2XPPaVmz5CkdOziqmszS7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZTRmNjVjOTctYjZhNS0z ZjFiLTkxZDAtZGJiNDM3MTg1ZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqEZ0ydV57CLiwQOVBTptW360gCMGvzgOSGnYMhZb+bZXoJe2nSUAZY e1Jm9dHMRk60AvCqQKDgkm5CSDpu6oNSzrX6ZCaAbsXfWx1U5hHb57EIf16H1Mbv iYZJBYe5x3R1wjXYq2D8EfdtboqNmLjxu7tydc14/3bCxjTjFxg4X95UG4Q+cHPz MMl6B5+D4qkjRk2lRSzN2yC22C1HRT6D7AxR0LGBKIskWcuC3hgNfp7VM2Jrsed5 IbXKXmoI1FsQjM2gKpB/dibYglZwJYPziNY2ZfaQ0Z91D+qdxHWveEalNBXjb9+J VFDKKDpslS3DegH6y+LuKve4tHbU8EI= -----END CERTIFICATE-----Generated at Wed May 13 11:22:12 2026 by rpki-client