$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f80284b9-8291-302b-a728-5aaf1f6a8da7.roa File: f80284b9-8291-302b-a728-5aaf1f6a8da7.roa (raw, json) Hash identifier: zJvcWLKiJ9wYUjiKZUMvcVzW3Bq1cRT06z3ZG0wkxh4= Subject key identifier: 64:BE:1E:89:B4:1D:45:3E:66:75:17:D2:BC:9A:F3:FE:92:07:9F:20 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F5A2577658D6DC3E866F8 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f80284b9-8291-302b-a728-5aaf1f6a8da7.roa Signing time: Fri 24 Apr 2026 23:22:28 +0000 ROA not before: Fri 24 Apr 2026 23:22:28 +0000 ROA not after: Thu 23 Jul 2026 23:22:28 +0000 asID: 20001 IP address blocks: 64.16.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:5a:25:77:65:8d:6d:c3:e8:66:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:28 2026 GMT Not After : Jul 23 23:22:28 2026 GMT Subject: CN=a2d66a0c-fbaf-442c-816e-c1ae586ac6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:aa:5f:41:c2:89:37:4c:81:27:a7:70:0f:9f: f5:27:9b:39:5c:42:bd:68:f0:38:79:9a:c3:40:2c: 35:9a:0b:6e:6a:ac:e1:cb:fb:d2:65:51:5c:6b:20: 7f:85:15:d9:03:0c:f9:42:9a:81:73:e4:a0:72:66: 94:f4:89:34:0d:59:d0:04:d9:dd:95:39:c4:85:48: 26:b2:f7:65:fa:0a:e7:c9:48:5a:72:a0:2e:31:5b: 0a:22:6d:c3:d9:b1:b8:8d:20:7f:ab:ad:07:7b:a6: 8a:59:4a:92:e4:9f:6b:55:46:93:e4:bb:fa:e7:8e: b7:96:cf:d1:a6:0c:fb:03:dc:8c:05:3c:71:48:c0: c2:3f:04:ee:11:11:62:6f:f1:a3:26:9b:47:4b:15: c3:cc:0a:40:c8:f4:0c:3c:89:ee:e2:81:86:a5:c8: 67:a5:de:18:6c:6b:c5:e5:63:50:98:f6:20:f2:fa: 64:67:08:de:56:9c:55:38:d2:16:64:1f:1f:4a:26: 4c:dd:e4:9f:6e:85:80:d1:12:45:8a:c0:d2:13:04: 81:61:c3:67:2a:5c:c2:be:97:cd:8f:7c:49:d1:3f: 9c:58:31:4c:53:7f:13:53:ff:a2:0f:19:61:bc:4f: 0b:27:ef:de:fd:d8:f0:e2:4a:f8:ad:87:dd:5b:be: a0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BE:1E:89:B4:1D:45:3E:66:75:17:D2:BC:9A:F3:FE:92:07:9F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f80284b9-8291-302b-a728-5aaf1f6a8da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:3d:93:8c:f8:09:e3:78:de:1b:27:d3:98:85:0d:a5:b4:0b: 84:62:8c:81:83:d7:74:a7:07:ff:dd:1d:55:a9:02:33:20:da: c4:9e:c6:d4:c8:7f:5c:71:78:02:8c:ac:2a:db:20:65:ad:d4: 2d:c4:8d:b3:94:52:ee:b1:8d:5e:34:a8:db:b7:dd:40:bc:1f: d8:69:dc:6c:2f:f1:1e:5e:cf:1b:93:fa:93:62:8e:0e:54:ec: d4:89:e7:03:8d:9e:d0:e5:06:5f:df:98:2e:fc:b1:a7:29:18: a8:69:24:ab:72:23:4c:23:d3:42:c9:f7:8e:54:0b:29:e3:35: 0c:22:0b:fd:22:ac:45:66:cc:0d:19:90:2d:2f:74:4d:17:5b: 57:43:82:4e:dc:04:af:c5:6a:91:cf:ad:da:f4:fc:c9:9d:cc: 6d:a0:f5:8f:7b:9a:f9:58:87:05:b8:65:9c:9b:84:b4:53:97: 83:d9:71:3a:53:27:e7:25:9a:d5:07:7b:27:5d:cc:60:4e:d5: 48:28:ed:90:2a:c5:94:da:c8:33:7a:e1:2d:ae:0f:27:20:8b: aa:2a:ae:19:32:e3:69:22:b1:99:61:e2:51:54:0e:36:e2:3e: 87:da:60:7b:b1:1f:e0:15:e7:35:88:3f:a2:61:c2:d3:76:f2: 8d:ef:ab:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eH1old2WNbcPoZvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIyOFoXDTI2MDcyMzIzMjIyOFowLzEtMCsGA1UEAxMk YTJkNjZhMGMtZmJhZi00NDJjLTgxNmUtYzFhZTU4NmFjNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqpfQcKJN0yBJ6dwD5/1J5s5XEK9aPA4eZrD QCw1mgtuaqzhy/vSZVFcayB/hRXZAwz5QpqBc+SgcmaU9Ik0DVnQBNndlTnEhUgm svdl+grnyUhacqAuMVsKIm3D2bG4jSB/q60He6aKWUqS5J9rVUaT5Lv65463ls/R pgz7A9yMBTxxSMDCPwTuERFib/GjJptHSxXDzApAyPQMPInu4oGGpchnpd4YbGvF 5WNQmPYg8vpkZwjeVpxVONIWZB8fSiZM3eSfboWA0RJFisDSEwSBYcNnKlzCvpfN j3xJ0T+cWDFMU38TU/+iDxlhvE8LJ+/e/djw4kr4rYfdW76gkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS+Hom0HUU+ZnUX0rya8/6SB58gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZjgwMjg0YjktODI5MS0z MDJiLWE3MjgtNWFhZjFmNmE4ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo9k4z4CeN43hsn05iFDaW0C4RijIGD13SnB//dHVWpAjMg2sSextTI f1xxeAKMrCrbIGWt1C3EjbOUUu6xjV40qNu33UC8H9hp3Gwv8R5ezxuT+pNijg5U 7NSJ5wONntDlBl/fmC78sacpGKhpJKtyI0wj00LJ945UCynjNQwiC/0irEVmzA0Z kC0vdE0XW1dDgk7cBK/FapHPrdr0/MmdzG2g9Y97mvlYhwW4ZZybhLRTl4PZcTpT J+clmtUHeyddzGBO1Ugo7ZAqxZTayDN64S2uDycgi6oqrhky42kisZlh4lFUDjbi PofaYHuxH+AV5zWIP6JhwtN28o3vqxg= -----END CERTIFICATE-----Generated at Wed May 13 14:13:17 2026 by rpki-client