$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/40a5dfdf-20d8-3ab1-a65b-aa1b14a56aad.roa File: 40a5dfdf-20d8-3ab1-a65b-aa1b14a56aad.roa (raw, json) Hash identifier: BpNVkkHWmXZdTc2HRjNZhATXodGlbl7fGE7dKKCjlf0= Subject key identifier: 78:35:25:4B:17:34:23:AB:14:4C:1E:9C:2A:69:40:99:33:A6:EF:F6 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E9B787FCCFAD5B3A2ACBE2580 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/40a5dfdf-20d8-3ab1-a65b-aa1b14a56aad.roa Signing time: Fri 24 Jul 2026 17:21:36 +0000 ROA not before: Fri 24 Jul 2026 17:21:36 +0000 ROA not after: Tue 22 Sep 2026 16:13:24 +0000 asID: 393559 IP address blocks: 16.5.84.0/24 maxlen: 24 16.216.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:78:7f:cc:fa:d5:b3:a2:ac:be:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jul 24 17:21:36 2026 GMT Not After : Sep 22 16:13:24 2026 GMT Subject: CN=d2e8b7d2-2a7f-438a-b3b5-6ae4e4b89f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:3a:87:d8:0b:23:8f:49:c5:1f:bd:7f:6c: ae:a8:44:18:3d:ca:8a:09:d7:58:41:38:31:1b:ce: 60:dd:eb:56:2a:eb:32:73:01:a8:69:1a:77:41:6c: 71:b0:4b:a2:08:84:b8:8b:6c:03:f3:d2:b7:3c:e3: e8:d0:60:51:fa:65:06:25:1f:74:8b:a7:6f:15:72: 77:82:c0:3b:6e:99:19:d3:a6:af:5f:bc:04:50:5f: 6a:1c:57:7c:da:05:df:23:ef:24:41:bf:32:fb:af: 7f:24:2c:8c:2e:2e:23:9b:6d:be:36:24:c2:fd:db: 8a:6e:27:c8:6c:e3:54:b0:6b:9c:9c:bc:52:c5:80: 71:19:0f:44:8b:b5:8c:7a:6b:d2:6f:de:a9:9d:bc: a2:64:8a:30:29:ea:24:81:ac:42:ad:3e:e1:71:3b: ed:f4:15:1e:f0:d4:f5:f3:f1:8a:cd:81:ed:43:66: 69:f1:06:e9:8a:f7:a0:cf:b2:17:0c:5e:75:fe:86: 83:89:dd:d5:a6:5f:8d:46:50:b4:39:92:11:a3:c3: e8:a3:ed:45:23:2d:8e:b6:76:5d:55:dc:50:c5:fd: 82:70:d1:66:1b:13:38:63:6a:64:77:32:99:69:71: 85:49:ed:ff:44:82:9e:8c:a9:c4:83:06:cd:76:43: f5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:35:25:4B:17:34:23:AB:14:4C:1E:9C:2A:69:40:99:33:A6:EF:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/40a5dfdf-20d8-3ab1-a65b-aa1b14a56aad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.5.84.0/24 16.216.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:58:5c:36:e9:d0:f2:a4:a4:25:b6:79:85:6d:3a:d9:e2:68: 9f:9c:37:19:76:03:4b:73:c0:34:86:2e:f5:3a:72:4d:4d:cc: 51:c3:c5:e9:ee:ad:16:45:00:7e:dc:4c:3f:7e:c6:0a:99:3b: 56:f7:8a:92:da:a6:64:e1:91:cc:cf:2b:eb:b8:1d:15:2f:07: fe:d6:ef:f9:08:73:81:71:64:26:03:18:a2:5f:92:84:05:be: da:eb:96:87:ab:e0:fc:5a:99:2e:5e:7e:fb:ed:45:10:d6:74: 4c:3c:fc:b5:bf:14:09:2e:4e:d4:cd:7d:6a:c4:d1:4b:0b:9a: d5:c0:62:05:ce:46:24:bd:6d:76:f9:ca:58:db:f9:12:39:01: 47:32:c7:8a:9f:b2:d2:2f:f7:44:34:3f:02:95:fc:3e:b2:9d: f5:d9:cc:22:9c:a6:a5:1a:37:06:a6:23:c7:57:15:15:8d:c9: 09:08:d5:d6:ba:78:45:cf:0a:de:54:82:56:a8:f3:24:9c:ab: 9c:6e:01:7c:c4:88:71:83:88:3f:03:ef:02:ec:54:2f:65:74: f7:4a:3f:29:de:09:72:3c:cc:e8:26:08:b8:37:45:74:73:05: df:9b:38:55:c4:a0:28:49:0f:d1:26:38:7f:87:7f:f9:3b:d2: 39:4a:63:26 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6beH/M+tWzoqy+JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDcyNDE3MjEzNloXDTI2MDkyMjE2MTMyNFowLzEtMCsGA1UEAxMk ZDJlOGI3ZDItMmE3Zi00MzhhLWIzYjUtNmFlNGU0Yjg5ZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDo6h9gLI49JxR+9f2yuqEQYPcqKCddYQTgx G85g3etWKusycwGoaRp3QWxxsEuiCIS4i2wD89K3POPo0GBR+mUGJR90i6dvFXJ3 gsA7bpkZ06avX7wEUF9qHFd82gXfI+8kQb8y+69/JCyMLi4jm22+NiTC/duKbifI bONUsGucnLxSxYBxGQ9Ei7WMemvSb96pnbyiZIowKeokgaxCrT7hcTvt9BUe8NT1 8/GKzYHtQ2Zp8Qbpivegz7IXDF51/oaDid3Vpl+NRlC0OZIRo8Poo+1FIy2OtnZd VdxQxf2CcNFmGxM4Y2pkdzKZaXGFSe3/RIKejKnEgwbNdkP1BwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHg1JUsXNCOrFEwenCppQJkzpu/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNDBhNWRmZGYtMjBkOC0z YWIxLWE2NWItYWExYjE0YTU2YWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAEAVUAwQC ENgwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA1YXDbp0PKkpCW2eYVtOtniaJ+cNxl2A0tzwDSGLvU6ck1N zFHDxenurRZFAH7cTD9+xgqZO1b3ipLapmThkczPK+u4HRUvB/7W7/kIc4FxZCYD GKJfkoQFvtrrloer4PxamS5efvvtRRDWdEw8/LW/FAkuTtTNfWrE0UsLmtXAYgXO RiS9bXb5yljb+RI5AUcyx4qfstIv90Q0PwKV/D6ynfXZzCKcpqUaNwamI8dXFRWN yQkI1da6eEXPCt5Uglao8yScq5xuAXzEiHGDiD8D7wLsVC9ldPdKPyneCXI8zOgm CLg3RXRzBd+bOFXEoChJD9EmOH+Hf/k70jlKYyY= -----END CERTIFICATE-----Generated at Tue Jul 28 22:59:00 2026 by rpki-client