$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f17fd0bd-bf17-3891-a3fd-15350b1c6a1e.roa File: f17fd0bd-bf17-3891-a3fd-15350b1c6a1e.roa (raw, json) Hash identifier: 7otBgWfBMpiFf1Wb3qQmSildMIOwt2Rsm1Cg/XdLYUI= Subject key identifier: BE:2C:D2:2C:5D:9C:2F:CD:93:AA:A6:19:3E:E0:C4:20:59:A0:6D:95 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1E69E9BDA5DF0FE422CE80 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f17fd0bd-bf17-3891-a3fd-15350b1c6a1e.roa Signing time: Fri 24 Apr 2026 23:20:34 +0000 ROA not before: Fri 24 Apr 2026 23:20:34 +0000 ROA not after: Thu 23 Jul 2026 23:20:34 +0000 asID: 7029 IP address blocks: 64.16.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:69:e9:bd:a5:df:0f:e4:22:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:20:34 2026 GMT Not After : Jul 23 23:20:34 2026 GMT Subject: CN=e9370706-7059-4c2d-89ce-bf9d554df083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:76:68:ab:03:8b:80:1b:10:1a:01:66:a0:13: c1:c4:91:2d:1b:ba:b8:c0:9d:0d:31:1d:0e:e0:7d: 27:f5:0d:d3:e8:fe:32:fb:2b:d6:49:2b:0f:08:d9: e5:22:2a:bb:47:2d:96:9d:44:06:35:60:e6:bf:e3: 0c:0b:a1:cd:25:4b:44:96:78:f0:30:72:d6:ef:6f: 25:b7:76:89:46:45:12:88:0a:d7:d8:a3:1b:3f:88: 83:57:6f:78:49:ae:f1:65:43:04:14:4b:2d:cf:0b: d7:07:af:db:d4:63:5a:c5:87:4b:06:df:c7:32:84: 37:c8:01:9f:49:f6:fd:ef:35:57:ca:77:3c:60:fa: 59:e6:05:79:68:97:b8:c5:f4:d8:49:08:10:4f:9f: f4:6f:20:73:89:f4:c3:1b:d7:7b:49:8a:7c:a6:b7: 55:ab:8a:61:33:5c:a2:dd:30:c7:a0:01:75:bf:f2: bc:27:54:37:c0:62:ae:d4:2a:3f:de:95:dc:4c:ff: 21:88:b1:20:4d:77:4d:71:61:31:1d:7c:d0:05:d3: c9:6d:5c:01:0f:6d:a3:ed:57:f7:27:d9:a8:9a:53: bc:28:55:41:42:12:a5:1c:df:16:be:11:76:4b:6d: c3:9b:0d:8e:15:cb:dc:c1:e5:6c:1c:34:ee:6a:ca: 86:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2C:D2:2C:5D:9C:2F:CD:93:AA:A6:19:3E:E0:C4:20:59:A0:6D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f17fd0bd-bf17-3891-a3fd-15350b1c6a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:22:38:d1:08:b7:d0:d8:e9:aa:c4:bc:f1:0c:c4:da:82:28: 26:59:f7:e3:db:d2:b6:84:11:b0:76:56:88:45:45:bc:61:69: 32:c7:7c:5f:a4:68:1f:65:0b:22:53:74:18:6e:83:da:04:70: bb:49:8d:dd:de:df:d4:47:c5:d9:77:3c:e2:2a:e7:14:77:7c: 48:77:e8:a5:9e:ef:30:d5:05:1d:0c:8f:eb:7b:76:16:df:a1: 5f:e7:dc:63:3a:78:18:84:05:b9:b3:77:68:ac:07:16:bb:06: 22:42:d5:56:45:e7:7a:74:8f:27:9f:5f:dc:bf:02:44:a3:ff: 21:94:1e:40:c0:65:be:d7:75:38:e8:d6:4d:32:84:60:f0:90: 98:46:0a:aa:8f:8a:d0:a7:5e:9e:85:92:3e:d3:53:fc:c4:18: 0c:a9:24:ac:01:73:01:4f:4c:68:16:a4:dc:4f:7b:80:76:41: 8e:e2:11:dd:51:1a:40:b4:2f:86:49:bc:b5:57:6c:c5:43:13: 27:19:df:e9:cb:e0:6d:e5:34:5c:5e:79:5f:2b:8c:44:dd:84: a2:5f:52:3f:44:07:42:16:19:37:06:21:da:5e:1e:0a:f6:b8: 45:27:28:0b:1e:ae:37:df:d6:15:7f:bc:21:9a:30:eb:6e:66: a3:32:ce:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHmnpvaXfD+QizoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjAzNFoXDTI2MDcyMzIzMjAzNFowLzEtMCsGA1UEAxMk ZTkzNzA3MDYtNzA1OS00YzJkLTg5Y2UtYmY5ZDU1NGRmMDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHZoqwOLgBsQGgFmoBPBxJEtG7q4wJ0NMR0O 4H0n9Q3T6P4y+yvWSSsPCNnlIiq7Ry2WnUQGNWDmv+MMC6HNJUtElnjwMHLW728l t3aJRkUSiArX2KMbP4iDV294Sa7xZUMEFEstzwvXB6/b1GNaxYdLBt/HMoQ3yAGf Sfb97zVXync8YPpZ5gV5aJe4xfTYSQgQT5/0byBzifTDG9d7SYp8prdVq4phM1yi 3TDHoAF1v/K8J1Q3wGKu1Co/3pXcTP8hiLEgTXdNcWExHXzQBdPJbVwBD22j7Vf3 J9momlO8KFVBQhKlHN8WvhF2S23Dmw2OFcvcweVsHDTuasqGmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4s0ixdnC/Nk6qmGT7gxCBZoG2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZjE3ZmQwYmQtYmYxNy0z ODkxLWEzZmQtMTUzNTBiMWM2YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsiONEIt9DY6arEvPEMxNqCKCZZ9+Pb0raEEbB2VohFRbxhaTLHfF+k aB9lCyJTdBhug9oEcLtJjd3e39RHxdl3POIq5xR3fEh36KWe7zDVBR0Mj+t7dhbf oV/n3GM6eBiEBbmzd2isBxa7BiJC1VZF53p0jyefX9y/AkSj/yGUHkDAZb7XdTjo 1k0yhGDwkJhGCqqPitCnXp6Fkj7TU/zEGAypJKwBcwFPTGgWpNxPe4B2QY7iEd1R GkC0L4ZJvLVXbMVDEycZ3+nL4G3lNFxeeV8rjETdhKJfUj9EB0IWGTcGIdpeHgr2 uEUnKAserjff1hV/vCGaMOtuZqMyzug= -----END CERTIFICATE-----Generated at Wed May 13 12:59:53 2026 by rpki-client