$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fc751031-f8b6-3db9-a060-dd1646d9622e.roa File: fc751031-f8b6-3db9-a060-dd1646d9622e.roa (raw, json) Hash identifier: cvtqskEGf5Te1GBLxu+uKQGZOVy4ycT1GGtA9czsYrc= Subject key identifier: 21:86:F8:1D:9E:B7:BD:7E:A2:2A:FA:E4:91:59:6B:2E:71:F8:8C:3C Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1F212CD311D0B721C33880 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fc751031-f8b6-3db9-a060-dd1646d9622e.roa Signing time: Fri 24 Apr 2026 23:22:01 +0000 ROA not before: Fri 24 Apr 2026 23:22:01 +0000 ROA not after: Thu 23 Jul 2026 23:22:01 +0000 asID: 20001 IP address blocks: 64.16.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1f:21:2c:d3:11:d0:b7:21:c3:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:22:01 2026 GMT Not After : Jul 23 23:22:01 2026 GMT Subject: CN=c2c97c11-4997-41a5-8e41-3311debaaa6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:83:e7:68:e7:9c:12:07:d8:36:b9:98:04:c5: 8f:64:8c:e9:c0:7c:02:d8:bd:04:91:de:c8:06:a4: 76:0b:fc:99:bd:b0:ec:d2:28:60:56:bc:99:a5:47: 9d:b4:b1:38:1e:aa:5a:db:eb:9a:d3:47:75:08:22: ec:3d:97:c8:9e:5b:2e:fd:af:e2:58:13:3f:6e:68: 81:08:68:0d:3c:1a:ee:4c:a5:2c:1d:aa:7e:14:f9: 2b:e4:ef:c2:86:36:a2:ee:2c:5b:8e:71:4b:dd:63: 1b:80:23:98:35:d3:b7:74:45:4a:a3:c7:01:71:1d: ae:f4:34:2e:62:9c:87:f3:4c:a1:bd:b2:79:22:86: cb:c8:9c:a8:96:e8:52:7a:c8:31:2c:c1:6a:dc:a9: bd:c1:a5:c0:ac:cc:99:da:bd:23:f4:6a:c5:61:1f: 37:3b:44:d4:11:f9:4b:1b:80:dd:2f:ff:2a:9d:62: d9:cd:ee:e5:ba:6d:b9:39:9a:0c:14:01:07:24:cd: 44:f4:95:ba:b9:d8:8e:9c:79:66:b0:57:f6:81:5e: 2e:11:35:0f:fe:ec:d5:1c:f7:0c:3a:1a:69:60:fb: 00:0a:fc:71:f7:c5:bf:d4:1d:85:19:f6:1e:6c:16: 71:01:52:7d:0a:d0:d6:73:ac:12:19:63:d6:93:27: 73:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:86:F8:1D:9E:B7:BD:7E:A2:2A:FA:E4:91:59:6B:2E:71:F8:8C:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fc751031-f8b6-3db9-a060-dd1646d9622e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:83:d8:79:1e:35:a3:76:d6:bc:09:00:ac:bd:b8:f8:49:7a: 75:6f:3a:75:7c:88:13:70:0b:82:aa:20:5f:40:b0:2d:c1:3f: 65:64:7e:d7:a4:61:db:7d:fe:c1:53:be:6a:37:06:74:8e:c6: c3:bb:29:a1:c7:da:a1:3d:0d:21:a4:97:05:7f:83:3e:58:f2: 42:ba:54:c0:65:fe:c3:0e:f7:22:97:07:02:ce:8c:2e:bb:8d: b3:37:1c:33:84:ff:e8:34:40:35:a1:dd:c5:a7:ab:c1:34:54: 35:4e:92:f0:21:1e:cd:76:5e:55:60:46:33:71:48:0f:ad:df: 62:f6:0b:ec:c5:84:dd:62:e0:4b:27:1e:bd:5c:83:26:ee:d1: 0a:8c:a6:a7:ce:93:c5:44:db:fc:48:82:a2:e3:11:c2:51:7d: 14:00:26:ea:aa:5c:95:40:02:18:49:af:b4:aa:8b:8c:33:aa: 68:8f:36:33:85:34:19:7f:f0:03:f8:21:fe:5d:0f:e7:40:f1: 63:69:2b:5f:2d:0d:1d:58:0c:c9:32:e5:ca:62:44:b4:87:ec: d7:8c:27:a5:21:a0:36:f6:08:3e:72:68:32:6f:bc:de:7e:b8: c7:e4:31:29:da:4f:5c:77:10:01:58:9c:ce:98:8c:c3:2e:73: 27:92:5a:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHyEs0xHQtyHDOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjIwMVoXDTI2MDcyMzIzMjIwMVowLzEtMCsGA1UEAxMk YzJjOTdjMTEtNDk5Ny00MWE1LThlNDEtMzMxMWRlYmFhYTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYPnaOecEgfYNrmYBMWPZIzpwHwC2L0Ekd7I BqR2C/yZvbDs0ihgVryZpUedtLE4Hqpa2+ua00d1CCLsPZfInlsu/a/iWBM/bmiB CGgNPBruTKUsHap+FPkr5O/Chjai7ixbjnFL3WMbgCOYNdO3dEVKo8cBcR2u9DQu YpyH80yhvbJ5IobLyJyoluhSesgxLMFq3Km9waXArMyZ2r0j9GrFYR83O0TUEflL G4DdL/8qnWLZze7lum25OZoMFAEHJM1E9JW6udiOnHlmsFf2gV4uETUP/uzVHPcM OhppYPsACvxx98W/1B2FGfYebBZxAVJ9CtDWc6wSGWPWkydz2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGG+B2et71+oir65JFZay5x+Iw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvZmM3NTEwMzEtZjhiNi0z ZGI5LWEwNjAtZGQxNjQ2ZDk2MjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqD2HkeNaN21rwJAKy9uPhJenVvOnV8iBNwC4KqIF9AsC3BP2Vkftek Ydt9/sFTvmo3BnSOxsO7KaHH2qE9DSGklwV/gz5Y8kK6VMBl/sMO9yKXBwLOjC67 jbM3HDOE/+g0QDWh3cWnq8E0VDVOkvAhHs12XlVgRjNxSA+t32L2C+zFhN1i4Esn Hr1cgybu0QqMpqfOk8VE2/xIgqLjEcJRfRQAJuqqXJVAAhhJr7Sqi4wzqmiPNjOF NBl/8AP4If5dD+dA8WNpK18tDR1YDMky5cpiRLSH7NeMJ6UhoDb2CD5yaDJvvN5+ uMfkMSnaT1x3EAFYnM6YjMMucyeSWis= -----END CERTIFICATE-----Generated at Wed May 13 13:48:35 2026 by rpki-client