$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ebae2f14-5fa5-3e26-aa16-53fc2c01aa37.roa File: ebae2f14-5fa5-3e26-aa16-53fc2c01aa37.roa (raw, json) Hash identifier: 0Cz08Hh+ZuMlHQo4TAC05Bky537t/oC/olMctEue5CI= Subject key identifier: B5:10:D0:EC:64:BA:44:63:34:ED:FE:C6:98:D8:C0:5B:6B:25:0C:47 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E20358242C160E15E114F78 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ebae2f14-5fa5-3e26-aa16-53fc2c01aa37.roa Signing time: Fri 24 Apr 2026 23:24:11 +0000 ROA not before: Fri 24 Apr 2026 23:24:11 +0000 ROA not after: Thu 23 Jul 2026 23:24:11 +0000 asID: 397630 IP address blocks: 64.16.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:20:35:82:42:c1:60:e1:5e:11:4f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:24:11 2026 GMT Not After : Jul 23 23:24:11 2026 GMT Subject: CN=1acc0623-1a47-4d0d-9430-069d38bc829a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:c2:b1:f7:a4:0e:22:86:d8:c6:ce:e5:68: 47:96:c4:3c:47:ad:b6:29:83:24:61:97:8f:3a:cd: 67:fe:d5:d0:20:79:79:7a:b6:34:e5:3d:1b:5f:d2: 00:43:8a:48:bd:b4:43:50:7c:f1:f7:fd:42:63:45: ab:19:07:f1:c8:3a:a8:d2:0e:88:2e:e1:3b:23:bd: 76:94:d1:ad:37:3d:9a:50:50:8b:34:c4:7e:29:88: 28:3d:31:4e:31:97:da:6a:d0:2b:54:ff:2e:86:14: 4b:fe:2a:c4:3b:57:6c:74:74:e6:db:c0:c7:ee:fc: e9:ae:7b:5e:f6:38:ef:e1:01:73:b6:8e:77:dd:48: ca:35:05:e3:2f:1e:19:2b:f9:7a:98:24:67:54:de: bb:e0:cb:99:55:02:bd:ed:a6:b8:a4:aa:a7:19:20: 50:6d:4b:05:46:03:01:87:1a:a8:a1:3e:a2:85:51: 5e:46:be:34:4f:d3:1e:9b:f4:5d:c1:cf:39:f0:2b: 36:f9:a3:4e:83:1c:d3:af:e7:c2:79:d5:ad:08:39: 3e:dd:a3:5c:ac:c8:5b:f5:41:97:34:9b:71:cc:8c: 95:b3:2b:57:0e:ee:63:a4:9b:80:e6:83:b4:0d:ea: f9:7f:80:ff:56:3a:48:e9:54:3e:1a:43:22:2d:e6: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:10:D0:EC:64:BA:44:63:34:ED:FE:C6:98:D8:C0:5B:6B:25:0C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ebae2f14-5fa5-3e26-aa16-53fc2c01aa37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:83:66:ee:f3:a8:c6:6c:83:4b:40:42:24:42:52:10:26:5b: 95:b3:a7:88:fa:f8:3e:25:17:22:59:ba:6f:e8:4e:6b:d2:db: 56:73:91:a2:12:c1:0a:c2:38:78:e6:5a:59:e0:a0:0a:25:86: c8:4a:cf:60:9f:71:41:4e:b0:eb:64:b2:3d:71:6d:eb:99:31: 93:2c:b9:75:45:f9:37:c1:d6:c6:a2:dd:bd:41:5d:f4:87:85: d5:c4:27:4c:c7:6c:dc:48:e4:fe:d4:2f:e7:07:ef:23:6f:62: 8b:26:5c:fe:8b:7e:89:1f:e6:81:68:78:8c:7f:91:7c:54:84: 30:67:f4:61:4a:a0:f5:e3:15:d9:3e:67:d6:37:8a:78:5f:6d: df:c1:bd:9d:7a:83:5d:f2:82:7b:94:1f:55:c9:47:73:d3:af: 70:ef:1c:18:a5:00:49:b6:0a:30:48:f3:98:c1:24:5a:6f:bc: c6:69:04:b5:20:21:7c:82:02:1e:df:9b:ce:54:ed:f7:23:80: 65:da:2f:24:ac:01:c3:71:89:ed:82:40:e7:fb:5f:13:a6:31: 51:66:a8:51:05:f1:5e:01:27:c6:4b:3a:f9:4a:bb:79:10:9e: 4c:b2:31:f2:b3:bd:cd:dc:fa:ab:a1:17:94:ff:f5:d9:6d:27: 18:8c:58:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eIDWCQsFg4V4RT3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjQxMVoXDTI2MDcyMzIzMjQxMVowLzEtMCsGA1UEAxMk MWFjYzA2MjMtMWE0Ny00ZDBkLTk0MzAtMDY5ZDM4YmM4MjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ3CsfekDiKG2MbO5WhHlsQ8R622KYMkYZeP Os1n/tXQIHl5erY05T0bX9IAQ4pIvbRDUHzx9/1CY0WrGQfxyDqo0g6ILuE7I712 lNGtNz2aUFCLNMR+KYgoPTFOMZfaatArVP8uhhRL/irEO1dsdHTm28DH7vzprnte 9jjv4QFzto533UjKNQXjLx4ZK/l6mCRnVN674MuZVQK97aa4pKqnGSBQbUsFRgMB hxqooT6ihVFeRr40T9Mem/Rdwc858Cs2+aNOgxzTr+fCedWtCDk+3aNcrMhb9UGX NJtxzIyVsytXDu5jpJuA5oO0Der5f4D/VjpI6VQ+GkMiLeZ7aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUQ0OxkukRjNO3+xpjYwFtrJQxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWJhZTJmMTQtNWZhNS0z ZTI2LWFhMTYtNTNmYzJjMDFhYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuDZu7zqMZsg0tAQiRCUhAmW5Wzp4j6+D4lFyJZum/oTmvS21ZzkaIS wQrCOHjmWlngoAolhshKz2CfcUFOsOtksj1xbeuZMZMsuXVF+TfB1sai3b1BXfSH hdXEJ0zHbNxI5P7UL+cH7yNvYosmXP6Lfokf5oFoeIx/kXxUhDBn9GFKoPXjFdk+ Z9Y3inhfbd/BvZ16g13ygnuUH1XJR3PTr3DvHBilAEm2CjBI85jBJFpvvMZpBLUg IXyCAh7fm85U7fcjgGXaLySsAcNxie2CQOf7XxOmMVFmqFEF8V4BJ8ZLOvlKu3kQ nkyyMfKzvc3c+quhF5T/9dltJxiMWOI= -----END CERTIFICATE-----Generated at Wed May 13 06:55:59 2026 by rpki-client