$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ef34cb72-5ce5-3fe8-8d3f-58b5af53442e.roa File: ef34cb72-5ce5-3fe8-8d3f-58b5af53442e.roa (raw, json) Hash identifier: cEFdaBwlFcPeA/vFQbpLWb1AtzWDcQuNSjjb2G2xjGk= Subject key identifier: D1:EA:41:01:30:45:F4:ED:79:CD:DB:94:6D:A8:15:DB:89:39:06:1F Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F05DE623C44FBB48E0A00 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ef34cb72-5ce5-3fe8-8d3f-58b5af53442e.roa Signing time: Fri 24 Apr 2026 23:21:48 +0000 ROA not before: Fri 24 Apr 2026 23:21:48 +0000 ROA not after: Thu 23 Jul 2026 23:21:48 +0000 asID: 20001 IP address blocks: 64.16.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:05:de:62:3c:44:fb:b4:8e:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:48 2026 GMT Not After : Jul 23 23:21:48 2026 GMT Subject: CN=fa48281f-cc41-4b82-8887-e8bba7882dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:aa:d7:46:22:df:ad:60:36:d7:3a:bb:94: 9a:64:38:0f:fd:ef:7f:e8:16:ed:48:95:f7:38:47: 04:6d:13:c7:e9:d3:fc:d2:05:a3:e2:56:9c:ed:c5: 03:ca:4a:a6:8b:05:22:df:7e:6a:9d:e3:6e:ff:91: 11:ab:a9:e5:26:3c:aa:b1:20:57:b6:ef:d9:81:f7: be:ab:39:ef:80:79:5b:14:7c:2b:92:2b:11:27:b0: d5:fd:39:ac:bb:e0:7d:8d:55:8b:52:04:85:d6:2d: d6:b6:6c:2a:ab:ee:5a:67:7b:2f:1c:d8:82:59:2a: 58:02:51:cc:01:e6:f6:a4:79:7d:3a:e4:df:2d:d0: 9f:3e:6a:e8:9d:dc:fe:62:e7:23:6c:74:8d:e5:1d: d6:99:b9:9a:d1:62:ae:1c:2d:f9:84:cf:d0:6d:6e: 45:66:3b:af:a4:7b:45:1f:e4:cd:54:4d:61:9a:6c: 16:3e:66:f3:21:c1:16:6f:8b:ff:1f:a1:67:79:66: 02:ee:c9:bb:64:ec:da:0d:d7:9c:83:a3:15:aa:9d: c4:64:a9:cf:d7:78:2b:6f:8a:21:25:9c:e2:d7:ed: bb:6b:a6:71:9c:1d:a7:2f:21:9e:d6:0c:aa:29:ab: a0:ac:69:35:fa:38:14:dd:75:69:fa:45:e7:03:d9: 13:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EA:41:01:30:45:F4:ED:79:CD:DB:94:6D:A8:15:DB:89:39:06:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ef34cb72-5ce5-3fe8-8d3f-58b5af53442e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:7e:cc:f3:97:2c:11:2d:ca:26:21:1e:11:a7:23:22:96:6a: 58:fd:3b:0d:c5:ab:32:97:1b:d7:f7:e1:fa:06:6d:b0:36:44: 70:39:49:c1:df:52:45:29:d7:8e:e0:a0:ff:f3:21:27:df:b2: f2:15:96:73:9d:2a:8d:f6:95:e3:a3:15:b4:62:a8:00:ca:b2: 4b:08:1d:11:ee:65:09:30:1c:da:0b:fb:a7:49:c5:3e:24:dc: 38:7e:bb:35:d1:f7:7d:bd:de:6c:1f:f6:a2:b8:e4:dd:14:9d: d8:2e:2b:dd:4d:57:c5:03:ed:85:fd:fd:be:5f:d6:39:72:2b: 6b:d8:38:7a:9a:70:f1:b6:3d:5f:bf:81:64:e9:5b:cb:15:e0: f3:06:1d:0f:ee:01:8b:5f:78:bd:4e:2c:47:a4:95:8c:8c:b5: 3e:c6:53:47:ba:eb:7c:01:d9:9d:e5:7c:c8:e9:79:5c:08:b6: 5f:7f:08:68:94:35:f2:e5:cc:8a:ed:c5:56:11:ef:b2:17:61: c1:af:b1:6d:8e:31:97:08:9c:e7:97:3c:db:2a:44:cb:1f:d8: bd:ec:a3:a0:e3:79:93:d3:cc:c2:0d:db:98:db:15:d6:c7:e6: 07:a3:b3:71:d2:32:e5:2b:be:55:d7:59:c4:24:b1:23:78:d2: 30:f9:cc:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHwXeYjxE+7SOCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjE0OFoXDTI2MDcyMzIzMjE0OFowLzEtMCsGA1UEAxMk ZmE0ODI4MWYtY2M0MS00YjgyLTg4ODctZThiYmE3ODgyZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/Oq10Yi361gNtc6u5SaZDgP/e9/6BbtSJX3 OEcEbRPH6dP80gWj4lac7cUDykqmiwUi335qneNu/5ERq6nlJjyqsSBXtu/Zgfe+ qznvgHlbFHwrkisRJ7DV/Tmsu+B9jVWLUgSF1i3Wtmwqq+5aZ3svHNiCWSpYAlHM Aeb2pHl9OuTfLdCfPmrondz+YucjbHSN5R3Wmbma0WKuHC35hM/QbW5FZjuvpHtF H+TNVE1hmmwWPmbzIcEWb4v/H6FneWYC7sm7ZOzaDdecg6MVqp3EZKnP13grb4oh JZzi1+27a6ZxnB2nLyGe1gyqKaugrGk1+jgU3XVp+kXnA9kTdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHqQQEwRfTtec3blG2oFduJOQYfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZWYzNGNiNzItNWNlNS0z ZmU4LThkM2YtNThiNWFmNTM0NDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALF+zPOXLBEtyiYhHhGnIyKWalj9Ow3FqzKXG9f34foGbbA2RHA5ScHf UkUp147goP/zISffsvIVlnOdKo32leOjFbRiqADKsksIHRHuZQkwHNoL+6dJxT4k 3Dh+uzXR93293mwf9qK45N0UndguK91NV8UD7YX9/b5f1jlyK2vYOHqacPG2PV+/ gWTpW8sV4PMGHQ/uAYtfeL1OLEeklYyMtT7GU0e663wB2Z3lfMjpeVwItl9/CGiU NfLlzIrtxVYR77IXYcGvsW2OMZcInOeXPNsqRMsf2L3so6DjeZPTzMIN25jbFdbH 5gejs3HSMuUrvlXXWcQksSN40jD5zLU= -----END CERTIFICATE-----Generated at Wed May 13 09:27:35 2026 by rpki-client