$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e6d42ce8-b111-30a1-90be-ed51efa22d6a.roa File: e6d42ce8-b111-30a1-90be-ed51efa22d6a.roa (raw, json) Hash identifier: 40gSsKFu2xZcLddjCZqWbHIXfQtlh9wsOkmkaAXxJKo= Subject key identifier: 4B:3B:B3:56:87:62:F3:3E:A3:C9:B5:EC:59:DC:8C:6F:75:6E:33:B1 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F36DEA1971047FDDEB440 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e6d42ce8-b111-30a1-90be-ed51efa22d6a.roa Signing time: Fri 24 Apr 2026 23:22:11 +0000 ROA not before: Fri 24 Apr 2026 23:22:11 +0000 ROA not after: Thu 23 Jul 2026 23:22:11 +0000 asID: 20001 IP address blocks: 64.16.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:36:de:a1:97:10:47:fd:de:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:11 2026 GMT Not After : Jul 23 23:22:11 2026 GMT Subject: CN=f50522a0-282c-4a43-92d9-448cb06cad56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:3b:44:c7:f0:de:5f:66:76:6b:39:28:7a: d2:ca:47:72:f1:4c:b5:e5:95:21:88:0c:80:4f:3c: 81:bc:0a:ef:a1:18:fa:f6:c5:ba:95:c8:48:35:22: 7c:9c:71:8a:70:b9:9a:4c:fd:b7:97:8e:f3:42:4e: 5b:fa:0e:04:55:39:20:8d:95:15:dc:ca:b3:75:e4: bc:fc:f0:d4:14:d4:cd:39:fe:1f:da:05:12:f8:40: 8a:1b:ae:22:00:d6:35:85:17:aa:b1:18:ea:98:bb: 17:86:3a:ea:e4:d9:5d:25:67:0a:7b:ce:da:4b:d9: b0:db:64:ce:02:28:7a:c5:74:85:16:d8:0d:ca:d5: 9a:4a:02:f0:db:4e:c3:91:85:5f:e2:9c:0b:44:f1: 61:c0:d4:d1:0b:a2:14:cf:5d:7e:a2:a8:5b:cb:e2: cb:50:f8:c6:ee:1f:5b:ad:e0:5b:73:3a:67:10:f8: a6:de:ef:a2:30:81:8e:f8:15:74:07:91:28:a5:1a: 48:ab:96:54:05:f4:81:fd:5c:fa:59:89:a9:36:c2: 53:58:b6:01:73:be:d1:eb:df:b2:17:bc:9b:e7:55: b6:af:a2:e8:91:88:8e:fc:a7:86:39:05:d5:7c:1c: ed:e2:72:46:8d:88:af:80:af:af:e8:ef:87:d9:24: 2f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3B:B3:56:87:62:F3:3E:A3:C9:B5:EC:59:DC:8C:6F:75:6E:33:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e6d42ce8-b111-30a1-90be-ed51efa22d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:92:3c:c8:10:4c:25:e6:82:ad:8e:25:c3:96:18:42:68:2b: a9:69:04:b1:96:20:b4:b1:29:c6:74:20:74:32:bc:72:a6:88: 61:58:67:ea:aa:a8:9d:40:9f:d3:a2:14:2f:d7:88:01:88:f7: 47:4b:f6:6b:ce:f8:8e:ab:b4:bf:a2:e9:9e:21:c7:c1:03:a0: fd:41:4f:fd:0e:53:02:c4:aa:f4:f1:db:f2:97:86:5c:ea:a0: f7:a5:7b:c1:54:ee:6d:c7:2c:77:3b:79:32:99:f0:5e:ed:b3: 25:36:27:5d:ff:24:5f:31:27:c3:4c:7a:24:81:c8:3d:d9:d8: 82:18:c9:34:79:85:9b:61:19:f3:e1:65:b6:d3:ee:b2:49:b3: 9c:f5:33:ba:e9:fa:a7:2b:a3:01:98:5d:55:ff:c6:52:de:6d: 8a:26:dc:50:a9:a4:fc:e7:91:11:1c:f2:b1:40:b7:e7:95:c8: 9b:11:69:31:16:18:a3:66:c3:b7:c6:cf:cd:a2:13:cf:5d:df: 91:4c:a0:7b:a3:8e:7a:64:f4:9c:fe:64:1a:e5:2c:84:ae:3f: 56:e3:15:aa:37:b3:65:30:12:1a:8e:a0:1e:87:44:33:c6:9e: b1:b9:2d:9a:9a:a7:a5:ea:dc:67:c3:7f:1e:80:a8:22:ac:22: a0:08:68:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHzbeoZcQR/3etEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIxMVoXDTI2MDcyMzIzMjIxMVowLzEtMCsGA1UEAxMk ZjUwNTIyYTAtMjgyYy00YTQzLTkyZDktNDQ4Y2IwNmNhZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgQ7RMfw3l9mdms5KHrSykdy8Uy15ZUhiAyA TzyBvArvoRj69sW6lchINSJ8nHGKcLmaTP23l47zQk5b+g4EVTkgjZUV3MqzdeS8 /PDUFNTNOf4f2gUS+ECKG64iANY1hReqsRjqmLsXhjrq5NldJWcKe87aS9mw22TO Aih6xXSFFtgNytWaSgLw207DkYVf4pwLRPFhwNTRC6IUz11+oqhby+LLUPjG7h9b reBbczpnEPim3u+iMIGO+BV0B5EopRpIq5ZUBfSB/Vz6WYmpNsJTWLYBc77R69+y F7yb51W2r6LokYiO/KeGOQXVfBzt4nJGjYivgK+v6O+H2SQvMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEs7s1aHYvM+o8m17FncjG91bjOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZTZkNDJjZTgtYjExMS0z MGExLTkwYmUtZWQ1MWVmYTIyZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECSPMgQTCXmgq2OJcOWGEJoK6lpBLGWILSxKcZ0IHQyvHKmiGFYZ+qq qJ1An9OiFC/XiAGI90dL9mvO+I6rtL+i6Z4hx8EDoP1BT/0OUwLEqvTx2/KXhlzq oPele8FU7m3HLHc7eTKZ8F7tsyU2J13/JF8xJ8NMeiSByD3Z2IIYyTR5hZthGfPh ZbbT7rJJs5z1M7rp+qcrowGYXVX/xlLebYom3FCppPznkREc8rFAt+eVyJsRaTEW GKNmw7fGz82iE89d35FMoHujjnpk9Jz+ZBrlLISuP1bjFao3s2UwEhqOoB6HRDPG nrG5LZqap6Xq3GfDfx6AqCKsIqAIaKw= -----END CERTIFICATE-----Generated at Wed May 13 11:21:45 2026 by rpki-client