$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ecf86511-9992-31dd-8747-d6fa58099e49.roa File: ecf86511-9992-31dd-8747-d6fa58099e49.roa (raw, json) Hash identifier: s99hlRjb5fDdaZxro+P/GjO5ysKJHRKIIkn9RGRvChc= Subject key identifier: C5:86:E4:5F:65:98:B6:42:1D:72:83:CA:56:59:7E:8A:02:C0:45:10 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F18F710F7868773B7A940 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ecf86511-9992-31dd-8747-d6fa58099e49.roa Signing time: Fri 24 Apr 2026 23:21:57 +0000 ROA not before: Fri 24 Apr 2026 23:21:57 +0000 ROA not after: Thu 23 Jul 2026 23:21:57 +0000 asID: 20001 IP address blocks: 64.16.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:18:f7:10:f7:86:87:73:b7:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:57 2026 GMT Not After : Jul 23 23:21:57 2026 GMT Subject: CN=4ca4e64e-c5c9-4201-a566-61e5bfd9b9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:32:6e:45:30:69:5d:bf:46:dd:49:ac:ee:27: e1:b6:aa:c2:25:05:fd:32:f1:80:1c:5b:89:6d:b5: 42:88:3a:0c:15:14:77:e5:91:f0:9f:74:ed:60:63: 56:e4:71:e8:bc:b6:8d:c3:0d:ae:aa:79:a2:a1:1e: 24:70:6c:5c:f4:fd:34:a7:19:09:e3:05:28:54:de: 15:c9:71:30:8a:65:c6:c6:33:64:67:98:e6:a3:da: c2:e0:75:d9:23:ca:26:ed:1a:08:75:ea:16:47:6c: b2:06:56:9a:57:f9:41:53:ef:90:62:50:12:37:44: 0c:dd:c4:ed:59:32:d5:72:9a:e5:5c:db:9c:6b:ff: ea:b2:eb:33:c1:5d:a9:79:6e:d5:07:6f:db:75:7e: 2d:85:7c:7c:49:f3:29:af:1e:dc:ef:8d:2e:df:9e: 15:49:b8:6f:16:75:cd:3b:f4:14:1f:c6:f0:2c:a0: c7:9e:0a:20:1a:79:87:3b:04:41:e8:e8:9e:df:25: bb:93:e0:4a:fe:b7:48:b4:9b:ea:8b:56:88:ba:45: 18:97:21:cc:ce:4d:d2:73:3e:41:7c:fc:03:ed:1c: f0:48:ea:b7:81:37:ce:b0:62:9e:3c:54:61:56:70: ce:93:f4:44:e2:26:ee:af:69:99:58:c7:23:01:68: 29:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:86:E4:5F:65:98:B6:42:1D:72:83:CA:56:59:7E:8A:02:C0:45:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ecf86511-9992-31dd-8747-d6fa58099e49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:4b:17:2c:d6:03:04:22:33:f1:e7:01:e0:2e:d1:07:c8:bf: 70:49:35:73:5c:4c:8e:03:e3:34:57:e8:1e:d0:40:8d:a9:85: 13:be:75:19:be:57:95:24:39:35:25:d8:de:78:59:0e:3c:43: db:6b:96:68:56:b1:fa:e1:ce:ba:42:b8:3f:21:13:e5:fa:fa: ad:16:44:f9:56:63:28:df:8d:73:f8:e5:42:b7:e0:e7:a7:45: ca:ea:25:10:93:f0:b1:03:94:13:50:f9:63:30:d3:7b:59:ea: 8f:59:6a:1a:24:d5:f4:b9:92:bf:7a:c3:b9:ed:a3:a2:6c:37: 80:2e:4c:cb:bb:a6:65:96:78:78:8f:95:95:1a:1e:02:28:cf: 9b:a5:ce:ac:5a:76:c2:85:9f:73:2b:a8:3f:fd:7a:76:11:2d: 27:ed:27:df:df:5c:24:26:95:03:e9:5d:8b:b0:98:be:0e:32: 7c:cb:5d:29:07:21:9e:5d:a2:99:74:06:bd:bd:f4:61:15:c8: 3d:49:77:13:69:82:78:bf:c1:82:bd:4f:34:f9:78:26:4f:ce: bf:d6:b8:28:02:d8:31:41:d7:75:9b:46:2b:ee:06:38:b7:1b: a7:db:43:20:ab:35:5b:85:58:dd:27:d9:31:4b:c1:d4:fc:c2: 27:26:e4:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHxj3EPeGh3O3qUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjE1N1oXDTI2MDcyMzIzMjE1N1owLzEtMCsGA1UEAxMk NGNhNGU2NGUtYzVjOS00MjAxLWE1NjYtNjFlNWJmZDliOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTJuRTBpXb9G3Ums7ifhtqrCJQX9MvGAHFuJ bbVCiDoMFRR35ZHwn3TtYGNW5HHovLaNww2uqnmioR4kcGxc9P00pxkJ4wUoVN4V yXEwimXGxjNkZ5jmo9rC4HXZI8om7RoIdeoWR2yyBlaaV/lBU++QYlASN0QM3cTt WTLVcprlXNuca//qsuszwV2peW7VB2/bdX4thXx8SfMprx7c740u354VSbhvFnXN O/QUH8bwLKDHngogGnmHOwRB6Oie3yW7k+BK/rdItJvqi1aIukUYlyHMzk3Scz5B fPwD7RzwSOq3gTfOsGKePFRhVnDOk/RE4ibur2mZWMcjAWgpuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWG5F9lmLZCHXKDylZZfooCwEUQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWNmODY1MTEtOTk5Mi0z MWRkLTg3NDctZDZmYTU4MDk5ZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5LFyzWAwQiM/HnAeAu0QfIv3BJNXNcTI4D4zRX6B7QQI2phRO+dRm+ V5UkOTUl2N54WQ48Q9trlmhWsfrhzrpCuD8hE+X6+q0WRPlWYyjfjXP45UK34Oen RcrqJRCT8LEDlBNQ+WMw03tZ6o9Zahok1fS5kr96w7nto6JsN4AuTMu7pmWWeHiP lZUaHgIoz5ulzqxadsKFn3MrqD/9enYRLSftJ9/fXCQmlQPpXYuwmL4OMnzLXSkH IZ5dopl0Br299GEVyD1JdxNpgni/wYK9TzT5eCZPzr/WuCgC2DFB13WbRivuBji3 G6fbQyCrNVuFWN0n2TFLwdT8wicm5LQ= -----END CERTIFICATE-----Generated at Wed May 13 16:48:06 2026 by rpki-client