$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f02a9d4a-3828-35cb-b5ca-3979075c7f45.roa File: f02a9d4a-3828-35cb-b5ca-3979075c7f45.roa (raw, json) Hash identifier: SYX4wE38SkZVEslaVWl3DetTObXTKbkjtL+vnH6VwSc= Subject key identifier: C7:75:2C:6A:E8:DB:64:AD:38:16:67:FA:6A:EE:B8:D2:B7:09:39:82 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1EC9918724045C2EDD0900 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f02a9d4a-3828-35cb-b5ca-3979075c7f45.roa Signing time: Fri 24 Apr 2026 23:21:20 +0000 ROA not before: Fri 24 Apr 2026 23:21:20 +0000 ROA not after: Thu 23 Jul 2026 23:21:20 +0000 asID: 7029 IP address blocks: 64.16.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:c9:91:87:24:04:5c:2e:dd:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:20 2026 GMT Not After : Jul 23 23:21:20 2026 GMT Subject: CN=e6388882-70de-4d6d-ae9a-8eacca6d532c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c7:6d:72:96:10:22:a5:f7:22:85:a2:fd:fb: c1:24:33:8e:1c:8a:77:2e:9d:a1:1b:7b:c8:bb:20: 14:04:13:e6:7c:f1:df:63:29:cf:12:7a:c6:c1:6f: 49:97:6b:93:68:c3:8a:cc:bd:88:81:3c:16:99:6d: c5:c7:b1:d5:5d:07:7f:ed:05:cc:33:86:95:0c:65: f5:6b:b9:f5:17:3c:44:9c:62:47:34:c2:66:8a:31: 7b:b3:fb:f3:79:17:ed:26:c7:d5:18:69:e6:3e:ac: b4:50:f4:0e:3e:a4:99:00:3d:2d:5c:51:13:3a:dd: 51:d3:f4:27:11:1d:8f:22:a3:9d:0d:ea:dd:a3:14: b1:79:42:c8:9d:bc:25:6f:88:0a:58:eb:93:ed:a7: 23:5e:69:58:50:f4:67:e6:c4:58:0c:ea:cd:28:a1: 93:b7:30:07:c3:93:d7:d4:ed:b7:b3:35:ce:70:64: c9:bf:37:28:47:c0:04:89:8b:da:29:2f:f8:99:45: 00:22:96:9a:15:1e:7d:ee:d0:7f:41:92:90:91:2e: 15:3f:b5:cb:b4:35:44:b8:3f:b3:49:76:2a:3c:8b: 36:85:0f:b2:cb:5e:eb:c6:23:39:18:d2:c1:81:58: c6:c8:ed:c2:02:aa:98:dc:87:54:79:4f:a2:07:37: bd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:75:2C:6A:E8:DB:64:AD:38:16:67:FA:6A:EE:B8:D2:B7:09:39:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f02a9d4a-3828-35cb-b5ca-3979075c7f45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ed:53:ab:d4:fa:0b:f3:74:f9:ca:80:c3:e6:23:ab:77:02: f5:db:27:2c:6a:1b:7b:4e:3c:8f:d8:a4:d5:76:5c:d3:78:6e: 61:56:75:c4:2c:30:ab:7e:59:79:07:4a:89:0b:38:2e:21:e8: 9a:4b:82:fa:a5:2c:05:80:7c:56:bf:3e:00:4a:65:0c:79:33: f2:8e:94:0a:f1:16:38:71:74:17:63:d7:74:34:52:61:69:89: 40:62:9f:ba:11:3f:ed:e4:d9:08:d4:5e:dd:dd:e5:82:93:b9: 54:f3:62:81:cb:02:aa:3d:20:79:89:65:70:18:75:71:43:d5: 2b:ab:5d:f7:3f:78:cc:66:06:50:4c:b8:db:32:70:3f:91:61: 22:29:a2:4f:8c:46:13:a3:e9:b7:a5:f2:47:53:35:12:ba:3b: 5e:34:31:32:e9:da:6c:61:88:72:fc:47:5a:e7:d2:b1:46:f8: 15:e3:e9:fc:a2:dd:18:68:83:16:28:b9:09:35:39:cb:d0:14: 7e:d4:bf:e1:42:e8:d9:fd:26:9e:19:ec:64:e7:b4:f3:a3:97: 18:e7:00:38:2e:a4:00:67:de:b2:de:75:d1:14:8d:b8:74:73: bc:8e:80:4f:a3:20:06:38:a3:4d:46:4f:0f:d4:fe:60:49:87: f7:dc:06:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHsmRhyQEXC7dCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjEyMFoXDTI2MDcyMzIzMjEyMFowLzEtMCsGA1UEAxMk ZTYzODg4ODItNzBkZS00ZDZkLWFlOWEtOGVhY2NhNmQ1MzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMdtcpYQIqX3IoWi/fvBJDOOHIp3Lp2hG3vI uyAUBBPmfPHfYynPEnrGwW9Jl2uTaMOKzL2IgTwWmW3Fx7HVXQd/7QXMM4aVDGX1 a7n1FzxEnGJHNMJmijF7s/vzeRftJsfVGGnmPqy0UPQOPqSZAD0tXFETOt1R0/Qn ER2PIqOdDerdoxSxeULInbwlb4gKWOuT7acjXmlYUPRn5sRYDOrNKKGTtzAHw5PX 1O23szXOcGTJvzcoR8AEiYvaKS/4mUUAIpaaFR597tB/QZKQkS4VP7XLtDVEuD+z SXYqPIs2hQ+yy17rxiM5GNLBgVjGyO3CAqqY3IdUeU+iBze9NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd1LGro22StOBZn+mruuNK3CTmCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZjAyYTlkNGEtMzgyOC0z NWNiLWI1Y2EtMzk3OTA3NWM3ZjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3tU6vU+gvzdPnKgMPmI6t3AvXbJyxqG3tOPI/YpNV2XNN4bmFWdcQs MKt+WXkHSokLOC4h6JpLgvqlLAWAfFa/PgBKZQx5M/KOlArxFjhxdBdj13Q0UmFp iUBin7oRP+3k2QjUXt3d5YKTuVTzYoHLAqo9IHmJZXAYdXFD1SurXfc/eMxmBlBM uNsycD+RYSIpok+MRhOj6bel8kdTNRK6O140MTLp2mxhiHL8R1rn0rFG+BXj6fyi 3RhogxYouQk1OcvQFH7Uv+FC6Nn9Jp4Z7GTntPOjlxjnADgupABn3rLeddEUjbh0 c7yOgE+jIAY4o01GTw/U/mBJh/fcBoY= -----END CERTIFICATE-----Generated at Wed May 13 12:50:56 2026 by rpki-client