$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/11137959-ec2a-3aed-a2c7-77ffe02be33d.roa File: 11137959-ec2a-3aed-a2c7-77ffe02be33d.roa (raw, json) Hash identifier: O/Wcr3guJejwV1jAfWtWLIj35s82qvWSxyhWkiUKeIM= Subject key identifier: 13:36:AE:0F:4B:EA:DF:1B:13:7B:5C:55:90:45:3D:B2:6A:BB:EE:7B Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F1BAE7C676776CE12D6C28280 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/11137959-ec2a-3aed-a2c7-77ffe02be33d.roa Signing time: Tue 08 Sep 2026 15:33:51 +0000 ROA not before: Tue 08 Sep 2026 15:33:51 +0000 ROA not after: Fri 06 Nov 2026 15:07:24 +0000 asID: 401661 IP address blocks: 16.5.0.0/24 maxlen: 24 16.5.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:ae:7c:67:67:76:ce:12:d6:c2:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 8 15:33:51 2026 GMT Not After : Nov 6 15:07:24 2026 GMT Subject: CN=2ba4f8ed-e648-4432-8b56-9f73417dac81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:53:7d:45:49:f0:7d:c4:38:14:92:c3:9c: 25:af:eb:e9:81:eb:e5:a0:0a:e2:0b:79:65:56:c6: 58:22:66:4f:42:04:2f:cb:ae:e6:1c:e3:6d:3e:c8: 4c:19:36:74:7b:a3:5f:29:d7:52:c3:d7:36:5d:95: e6:c8:76:93:07:91:b6:1a:ce:23:18:12:c0:0b:3e: 6c:b5:43:57:80:54:ca:f5:f4:55:fc:0d:c5:80:c7: 86:28:2b:73:0e:8b:b8:8a:96:33:7e:aa:ae:75:b2: 60:71:0b:51:23:c7:04:33:5e:a6:b6:cb:9b:2c:f0: f3:d6:22:9b:8f:35:43:90:62:3d:e5:ee:bf:74:51: 03:41:7b:7f:45:6f:75:d5:73:21:97:f3:c5:94:99: 03:d1:6f:86:1b:6a:b4:04:8e:88:68:76:1f:98:9e: c9:33:bb:f5:4d:77:52:16:60:0a:9b:a7:7d:e8:e1: 99:2b:f9:79:52:b2:e2:8b:b7:27:67:df:32:c1:57: 99:97:a5:1a:ab:3a:73:1a:7d:27:bd:24:37:fc:ed: 5f:e1:82:f7:6e:b6:7d:43:e8:c6:5d:2e:bd:85:6b: 95:4b:74:a2:28:d4:3c:63:88:48:a7:27:a6:73:77: 05:e0:4b:2b:89:13:50:a4:5d:f9:75:e6:f1:fb:e7: f4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:36:AE:0F:4B:EA:DF:1B:13:7B:5C:55:90:45:3D:B2:6A:BB:EE:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/11137959-ec2a-3aed-a2c7-77ffe02be33d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.5.0.0/24 16.5.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d1:92:08:e6:29:c3:e2:a6:df:a0:25:c9:a5:be:07:1b:8d: 06:ea:75:10:23:41:cf:f8:89:99:91:d8:42:5c:35:f3:26:8f: f3:46:10:f1:7c:b2:f0:e1:ae:d2:43:42:0d:a6:7f:9d:29:b3: b9:1a:85:22:33:4d:65:6a:52:05:87:c5:fd:53:aa:10:ef:bc: c8:0b:f4:89:63:0d:8d:e9:80:c0:25:43:f7:1b:aa:bf:b5:e7: 7c:70:98:3d:5b:23:8d:65:5e:d6:0e:77:51:62:4d:60:bd:4d: ad:58:ad:e1:ad:bc:12:59:11:a7:5a:95:7f:39:71:50:29:05: e1:cd:38:3c:98:a8:e8:db:de:c4:79:dd:24:f6:9f:b9:29:e8: bd:5c:21:5b:9f:df:00:f9:81:fb:13:ec:b8:c3:83:59:20:9e: 70:4b:7e:ad:9e:e0:af:53:15:66:43:8a:7d:64:f7:84:06:95: c1:55:00:dd:41:34:b8:bd:e6:d2:47:fa:6f:62:17:5d:a0:22: 9c:7c:72:a7:c0:94:f1:d3:68:0b:b2:35:01:14:51:b3:8b:a7: 9c:20:93:5f:b0:d6:fe:3a:a8:40:a3:c1:61:0d:33:c5:ca:77: a4:30:84:8b:e1:fa:a3:3d:f8:66:06:26:b9:3c:3e:e8:51:8f: c6:14:a8:7d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8brnxnZ3bOEtbCgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDkwODE1MzM1MVoXDTI2MTEwNjE1MDcyNFowLzEtMCsGA1UEAxMk MmJhNGY4ZWQtZTY0OC00NDMyLThiNTYtOWY3MzQxN2RhYzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAxTfUVJ8H3EOBSSw5wlr+vpgevloAriC3ll VsZYImZPQgQvy67mHONtPshMGTZ0e6NfKddSw9c2XZXmyHaTB5G2Gs4jGBLACz5s tUNXgFTK9fRV/A3FgMeGKCtzDou4ipYzfqqudbJgcQtRI8cEM16mtsubLPDz1iKb jzVDkGI95e6/dFEDQXt/RW911XMhl/PFlJkD0W+GG2q0BI6IaHYfmJ7JM7v1TXdS FmAKm6d96OGZK/l5UrLii7cnZ98ywVeZl6UaqzpzGn0nvSQ3/O1f4YL3brZ9Q+jG XS69hWuVS3SiKNQ8Y4hIpyemc3cF4EsriRNQpF35debx++f0yQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBM2rg9L6t8bE3tcVZBFPbJqu+57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvMTExMzc5NTktZWMyYS0z YWVkLWEyYzctNzdmZmUwMmJlMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAEAUAAwQA EAUUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFbRkgjmKcPipt+gJcmlvgcbjQbqdRAjQc/4iZmR2EJcNfMm j/NGEPF8svDhrtJDQg2mf50ps7kahSIzTWVqUgWHxf1TqhDvvMgL9IljDY3pgMAl Q/cbqr+153xwmD1bI41lXtYOd1FiTWC9Ta1YreGtvBJZEadalX85cVApBeHNODyY qOjb3sR53ST2n7kp6L1cIVuf3wD5gfsT7LjDg1kgnnBLfq2e4K9TFWZDin1k94QG lcFVAN1BNLi95tJH+m9iF12gIpx8cqfAlPHTaAuyNQEUUbOLp5wgk1+w1v46qECj wWENM8XKd6QwhIvh+qM9+GYGJrk8PuhRj8YUqH0= -----END CERTIFICATE-----Generated at Sun Sep 20 10:53:51 2026 by rpki-client