$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fc0adb68-765d-3a3a-969a-b290502baa77.roa File: fc0adb68-765d-3a3a-969a-b290502baa77.roa (raw, json) Hash identifier: u9SUa3Q3NzdFytmQr1t1NBsI3IsG1zX5f38g9rxX/TE= Subject key identifier: 95:D3:EE:AE:06:B9:71:6A:33:4E:E1:FA:8B:64:3B:D3:B4:0F:A1:2E Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D96AD3137E4CB3FC2EC485800 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fc0adb68-765d-3a3a-969a-b290502baa77.roa Signing time: Wed 22 Apr 2026 07:21:47 +0000 ROA not before: Wed 22 Apr 2026 07:21:47 +0000 ROA not after: Tue 21 Jul 2026 07:21:47 +0000 asID: 20001 IP address blocks: 64.16.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:96:ad:31:37:e4:cb:3f:c2:ec:48:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 22 07:21:47 2026 GMT Not After : Jul 21 07:21:47 2026 GMT Subject: CN=0f87f185-1481-4ca1-b76d-53370e7f0718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:bf:af:6e:81:98:56:ec:58:e5:78:7f:ad: a9:d5:3a:28:0a:31:d7:d3:71:be:9b:0f:14:e8:d8: 73:75:bc:3c:12:e4:c5:8a:b0:3e:21:51:ac:7b:2c: 23:2c:17:73:9d:0e:c9:b5:6d:3e:35:53:e5:ad:65: b4:71:f3:92:a8:a6:e1:aa:5c:3d:fd:b5:a6:ad:38: 62:4c:61:5e:1a:2b:c4:71:b4:6c:da:44:e1:4f:38: f8:f8:2b:37:46:0b:34:15:33:57:52:1f:ab:b7:9a: 19:3f:d9:26:a7:57:ff:fe:78:f6:76:9a:b4:11:07: 25:d2:69:3f:01:35:54:8d:30:85:e2:b3:3b:59:6b: 74:0c:96:74:bf:94:7e:0a:b1:ff:00:fa:0a:97:0e: 46:cf:e2:79:c1:76:22:b3:3b:db:be:d6:c0:bd:38: c1:fb:1e:c7:60:9b:c9:da:4b:a4:d2:23:db:21:74: 28:aa:68:4a:d5:6e:d9:13:e1:4d:83:ae:dc:5d:13: 88:ab:0f:41:f8:7c:28:5c:3a:c7:28:97:36:8a:ff: 36:35:8d:8c:e4:a6:5f:18:f2:42:19:74:df:75:54: 5e:17:d3:fa:ab:66:82:46:d8:f3:37:e4:03:d0:55: 30:8a:8e:fe:63:55:52:7b:67:6d:de:63:e1:44:96: e1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D3:EE:AE:06:B9:71:6A:33:4E:E1:FA:8B:64:3B:D3:B4:0F:A1:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fc0adb68-765d-3a3a-969a-b290502baa77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:62:7d:7a:5c:20:f9:9c:80:d8:4d:e1:05:0d:d1:75:b1:e9: 28:52:a8:5f:30:f9:3e:bd:48:b8:ad:77:42:1c:90:29:33:0c: ae:05:a3:10:f8:56:be:ee:8e:3f:69:83:56:1b:38:60:d9:b9: ed:3c:1d:24:9f:96:bd:bf:49:fa:5b:46:28:0f:65:16:ea:e9: 8e:d9:9c:1b:5d:f5:6b:01:63:52:b7:2c:74:ca:87:05:a2:c0: 41:dd:28:e1:97:ff:68:50:bc:43:33:b0:9d:39:45:dc:32:97: 66:d8:da:ed:fb:eb:fb:8c:db:c6:50:bf:49:5d:2d:6a:31:24: ce:23:5f:b6:3d:4e:fb:c9:cb:07:d3:91:01:58:29:9d:c2:11: 1d:3e:33:3e:ed:77:11:8f:18:05:da:e9:ab:3e:5d:88:1c:46: 10:b3:ed:70:25:ad:2f:9a:7d:17:c6:02:f0:86:0f:19:b3:40: 96:76:65:54:3e:ab:6a:7b:63:dc:f3:3e:0d:64:cc:a8:49:8b: 0e:f7:f6:5e:75:24:79:6d:d2:62:6a:b3:81:b2:a3:82:0c:a1: 70:a2:c8:95:03:97:6e:0a:27:8d:ca:db:b1:bb:3e:6f:06:71: da:07:19:1f:17:9a:64:9f:54:a4:44:97:96:eb:70:ef:87:a1: 81:74:76:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2WrTE35Ms/wuxIWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyMjA3MjE0N1oXDTI2MDcyMTA3MjE0N1owLzEtMCsGA1UEAxMk MGY4N2YxODUtMTQ4MS00Y2ExLWI3NmQtNTMzNzBlN2YwNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswe/r26BmFbsWOV4f62p1TooCjHX03G+mw8U 6Nhzdbw8EuTFirA+IVGseywjLBdznQ7JtW0+NVPlrWW0cfOSqKbhqlw9/bWmrThi TGFeGivEcbRs2kThTzj4+Cs3Rgs0FTNXUh+rt5oZP9kmp1f//nj2dpq0EQcl0mk/ ATVUjTCF4rM7WWt0DJZ0v5R+CrH/APoKlw5Gz+J5wXYiszvbvtbAvTjB+x7HYJvJ 2kuk0iPbIXQoqmhK1W7ZE+FNg67cXROIqw9B+HwoXDrHKJc2iv82NY2M5KZfGPJC GXTfdVReF9P6q2aCRtjzN+QD0FUwio7+Y1VSe2dt3mPhRJbhjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXT7q4GuXFqM07h+otkO9O0D6EuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZmMwYWRiNjgtNzY1ZC0z YTNhLTk2OWEtYjI5MDUwMmJhYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdifXpcIPmcgNhN4QUN0XWx6ShSqF8w+T69SLitd0IckCkzDK4FoxD4 Vr7ujj9pg1YbOGDZue08HSSflr2/SfpbRigPZRbq6Y7ZnBtd9WsBY1K3LHTKhwWi wEHdKOGX/2hQvEMzsJ05Rdwyl2bY2u376/uM28ZQv0ldLWoxJM4jX7Y9TvvJywfT kQFYKZ3CER0+Mz7tdxGPGAXa6as+XYgcRhCz7XAlrS+afRfGAvCGDxmzQJZ2ZVQ+ q2p7Y9zzPg1kzKhJiw739l51JHlt0mJqs4Gyo4IMoXCiyJUDl24KJ43K27G7Pm8G cdoHGR8XmmSfVKREl5brcO+HoYF0dpA= -----END CERTIFICATE-----Generated at Wed May 13 13:17:02 2026 by rpki-client