$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/edbfec74-02d6-309e-9e46-91a4f7e5a1ed.roa File: edbfec74-02d6-309e-9e46-91a4f7e5a1ed.roa (raw, json) Hash identifier: TR9GFNh4AI5h0bc1t3D2hPbgQ5DxOU8B0Ww//ZwIFtk= Subject key identifier: 20:F4:54:DD:B1:0E:1D:02:51:B7:9D:BE:5F:2F:1A:99:8D:6C:99:A8 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F64FC7AFE4C1E927AA3E4 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/edbfec74-02d6-309e-9e46-91a4f7e5a1ed.roa Signing time: Fri 24 Apr 2026 23:22:33 +0000 ROA not before: Fri 24 Apr 2026 23:22:33 +0000 ROA not after: Thu 23 Jul 2026 23:22:33 +0000 asID: 20001 IP address blocks: 64.16.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:64:fc:7a:fe:4c:1e:92:7a:a3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:33 2026 GMT Not After : Jul 23 23:22:33 2026 GMT Subject: CN=9af97218-b065-4d0e-8806-62e7c60aae22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:21:83:18:c7:37:fd:68:7e:40:34:f0:f5:ea: 3e:d5:11:28:35:5b:1c:05:0e:7c:93:4e:3f:77:fd: 76:2b:93:df:a0:5f:b2:d6:ed:34:74:3b:bd:4e:6a: 76:1a:0b:72:57:39:b0:d9:0e:b1:1f:6e:f4:2a:51: 2d:5b:cb:c9:6f:30:db:d1:ef:a2:c1:15:d4:9d:e1: ba:5c:a0:76:8a:2a:25:aa:d8:c0:61:36:e1:39:78: 11:7c:84:c1:07:90:43:4e:78:cc:d6:7a:45:70:58: 24:f1:4e:31:75:1c:16:a0:16:29:09:2b:d4:f6:b8: 61:9d:c8:24:87:ec:6a:fb:e4:af:4f:e5:7a:6d:25: 72:c7:2c:33:9f:7b:09:3b:0e:f7:04:a6:1e:41:b3: 5a:89:52:06:de:1d:b3:76:85:43:4b:fa:54:c7:15: a9:b5:83:9e:26:ac:81:96:ed:d9:00:9d:0c:11:43: d5:4d:88:54:46:bd:14:6f:a1:7b:26:4f:fa:62:c3: 96:df:82:4a:11:31:d0:65:0d:ab:e3:04:34:99:fd: 07:78:34:6c:7e:f6:43:1e:c6:ce:a0:4a:6d:d6:c5: 8d:19:06:73:48:d7:c7:6d:a9:8a:02:f0:e7:79:cf: 37:fe:07:40:62:6e:df:51:c0:26:46:ef:0d:00:00: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F4:54:DD:B1:0E:1D:02:51:B7:9D:BE:5F:2F:1A:99:8D:6C:99:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/edbfec74-02d6-309e-9e46-91a4f7e5a1ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:83:d2:e0:ab:06:2a:e5:5d:dc:18:cd:56:60:5f:9b:f1:9e: d3:62:a8:4f:7b:08:21:bb:62:48:fc:97:fa:20:b7:f7:de:38: 90:24:4f:14:ae:7b:a1:12:9f:1b:2d:10:a3:1f:fc:ff:84:05: 3e:8f:48:a7:0d:29:b9:70:13:bc:2b:e5:06:13:00:8d:82:4e: c6:1d:f6:31:85:f4:aa:67:da:c5:55:a8:74:e7:f9:57:02:d6: 2c:30:93:45:2f:5d:35:5b:57:f9:25:00:7a:6c:79:a9:6a:bd: a8:64:ca:32:1b:6b:d6:7e:e7:c5:e1:48:02:4b:f7:fb:60:da: 29:e3:da:bc:55:ca:e8:1f:95:75:2c:9a:62:a2:3f:24:f5:53: e6:d4:98:d4:49:e8:fb:d9:6f:41:3d:f5:6f:a7:ec:a7:93:6c: f3:7c:4b:e2:3f:2f:dd:bf:bc:ab:7f:d4:56:78:3c:c0:15:22: be:30:73:66:45:02:6b:0b:64:8b:2b:5b:bf:72:fb:42:ef:35: 77:d9:38:07:99:b0:26:fd:73:4d:e5:7f:b6:2e:19:ed:3c:8e: c7:2f:f4:ad:fd:15:ff:49:7c:39:f0:6d:10:3d:07:c9:e7:0e: 71:2e:25:b0:0e:f8:e0:53:a0:bf:8d:a4:44:90:32:0b:3c:7a: 25:91:45:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH2T8ev5MHpJ6o+QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIzM1oXDTI2MDcyMzIzMjIzM1owLzEtMCsGA1UEAxMk OWFmOTcyMTgtYjA2NS00ZDBlLTg4MDYtNjJlN2M2MGFhZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSGDGMc3/Wh+QDTw9eo+1REoNVscBQ58k04/ d/12K5PfoF+y1u00dDu9Tmp2GgtyVzmw2Q6xH270KlEtW8vJbzDb0e+iwRXUneG6 XKB2iiolqtjAYTbhOXgRfITBB5BDTnjM1npFcFgk8U4xdRwWoBYpCSvU9rhhncgk h+xq++SvT+V6bSVyxywzn3sJOw73BKYeQbNaiVIG3h2zdoVDS/pUxxWptYOeJqyB lu3ZAJ0MEUPVTYhURr0Ub6F7Jk/6YsOW34JKETHQZQ2r4wQ0mf0HeDRsfvZDHsbO oEpt1sWNGQZzSNfHbamKAvDnec83/gdAYm7fUcAmRu8NAADqkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCD0VN2xDh0CUbedvl8vGpmNbJmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWRiZmVjNzQtMDJkNi0z MDllLTllNDYtOTFhNGY3ZTVhMWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeD0uCrBirlXdwYzVZgX5vxntNiqE97CCG7Ykj8l/ogt/feOJAkTxSu e6ESnxstEKMf/P+EBT6PSKcNKblwE7wr5QYTAI2CTsYd9jGF9Kpn2sVVqHTn+VcC 1iwwk0UvXTVbV/klAHpsealqvahkyjIba9Z+58XhSAJL9/tg2inj2rxVyugflXUs mmKiPyT1U+bUmNRJ6PvZb0E99W+n7KeTbPN8S+I/L92/vKt/1FZ4PMAVIr4wc2ZF AmsLZIsrW79y+0LvNXfZOAeZsCb9c03lf7YuGe08jscv9K39Ff9JfDnwbRA9B8nn DnEuJbAO+OBToL+NpESQMgs8eiWRRXw= -----END CERTIFICATE-----Generated at Wed May 13 11:34:49 2026 by rpki-client