$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4230ae39-e553-31f5-9fd0-f8a0e7c8d520.roa File: 4230ae39-e553-31f5-9fd0-f8a0e7c8d520.roa (raw, json) Hash identifier: a8wa49N3LcxTpiWX7lMqJM1Fu5nIrSmyc2o/73SVU/E= Subject key identifier: 43:42:1D:DE:57:E4:35:C3:78:2F:90:E2:90:B2:13:FA:72:78:09:E7 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F400576D0C67043388E8F0F40 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4230ae39-e553-31f5-9fd0-f8a0e7c8d520.roa Signing time: Mon 21 Sep 2026 15:58:12 +0000 ROA not before: Mon 21 Sep 2026 15:58:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 7459 IP address blocks: 16.5.56.0/22 maxlen: 24 16.5.64.0/22 maxlen: 24 16.216.32.0/22 maxlen: 24 16.221.52.0/22 maxlen: 24 192.102.96.0/22 maxlen: 24 192.102.100.0/22 maxlen: 24 192.102.104.0/22 maxlen: 24 192.102.108.0/22 maxlen: 24 192.102.112.0/22 maxlen: 24 192.102.116.0/22 maxlen: 24 192.102.120.0/22 maxlen: 24 192.132.128.0/20 maxlen: 24 192.132.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:05:76:d0:c6:70:43:38:8e:8f:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 21 15:58:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=bca0c5fe-c97d-4b85-b39e-8c137e2de703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ad:4b:60:50:98:18:59:a8:af:0e:9d:4d:0d: 3c:75:22:cf:77:8b:74:cd:d0:25:52:a8:85:84:76: 72:30:2b:bb:ff:54:22:db:a3:2c:0c:2b:d2:d1:ef: 0c:bf:95:f0:96:e0:ff:17:32:37:ea:d6:31:fd:6f: 37:6e:0b:61:b0:82:2a:5e:65:30:e5:81:46:60:c4: 2c:dd:75:bf:7f:fd:db:80:dd:ce:64:3c:2e:dd:ff: dd:ba:c7:28:09:6f:b6:21:43:61:c0:0f:90:88:f2: a4:27:1e:24:cc:23:d9:5d:bd:af:db:7a:84:1a:d8: 80:74:bb:92:ad:94:c4:2b:bc:ac:95:63:b5:84:fc: 0a:b8:50:58:eb:6b:31:dd:9a:e3:f5:45:80:33:19: 46:6f:39:9f:4d:32:bb:f7:db:73:97:08:21:20:3c: d4:5d:13:dd:3a:9f:af:2a:44:4c:95:b1:d8:ee:21: 31:b7:33:7e:e9:8d:98:15:a3:ee:ca:18:73:8f:4d: b1:6c:2c:22:93:b9:bf:ec:be:5e:46:8f:68:63:23: 91:13:75:b8:be:f3:37:57:12:5e:92:be:e9:17:e9: c9:6d:dd:5d:46:be:88:2f:12:00:63:90:a8:f9:09: df:9d:16:fb:74:04:53:41:52:90:ae:08:d1:74:ac: 53:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:42:1D:DE:57:E4:35:C3:78:2F:90:E2:90:B2:13:FA:72:78:09:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4230ae39-e553-31f5-9fd0-f8a0e7c8d520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.5.56.0/22 16.5.64.0/22 16.216.32.0/22 16.221.52.0/22 192.102.96.0-192.102.123.255 192.132.128.0/20 192.132.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:03:09:fd:ef:8f:c8:a1:48:54:bf:74:33:5f:75:cc:7c:26: bb:63:73:89:7c:89:74:77:b1:75:e3:df:28:3b:0e:fe:f0:52: 66:14:bc:e7:73:d3:29:4a:4a:f6:d4:4e:ea:fc:83:db:ef:fd: a9:6e:ed:10:eb:33:17:c7:8e:c8:da:5e:b2:7b:3d:fe:91:c9: 46:14:4d:c4:fc:d6:4d:15:cd:7c:63:81:a4:4b:92:f6:50:7a: a9:58:b6:53:f2:d5:f2:04:5e:95:d7:ac:bd:c7:ea:5c:ec:bc: 9c:98:d8:d3:9e:36:63:6a:1b:aa:c5:61:ae:30:48:3c:d8:42: 68:aa:ad:72:82:c2:1c:23:b7:15:92:0f:0b:1d:2d:cc:4f:b1: b0:dc:06:d6:ec:4e:76:48:2a:82:d8:82:57:3a:3a:86:27:8b: f6:52:b7:d8:0e:fc:c8:cc:53:47:ba:cb:14:6e:42:6c:38:78: 6f:c7:31:4e:e1:0a:d3:f3:27:0f:52:50:6b:c7:cc:7a:7a:16: 93:02:55:e1:21:03:5b:fc:6a:4f:34:09:be:02:9b:af:db:1a: ef:91:c7:58:47:10:c5:43:e5:61:0b:78:d4:84:41:f4:d1:f9: 2d:33:ce:ba:08:c5:e2:a0:e3:91:77:72:a9:db:db:7a:80:79: f5:c2:16:eb -----BEGIN CERTIFICATE----- MIIGbzCCBVegAwIBAgIUAQ0Mn0MoWE9ABXbQxnBDOI6PD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDkyMTE1NTgxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk YmNhMGM1ZmUtYzk3ZC00Yjg1LWIzOWUtOGMxMzdlMmRlNzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa1LYFCYGFmorw6dTQ08dSLPd4t0zdAlUqiF hHZyMCu7/1Qi26MsDCvS0e8Mv5XwluD/FzI36tYx/W83bgthsIIqXmUw5YFGYMQs 3XW/f/3bgN3OZDwu3f/duscoCW+2IUNhwA+QiPKkJx4kzCPZXb2v23qEGtiAdLuS rZTEK7yslWO1hPwKuFBY62sx3Zrj9UWAMxlGbzmfTTK799tzlwghIDzUXRPdOp+v KkRMlbHY7iExtzN+6Y2YFaPuyhhzj02xbCwik7m/7L5eRo9oYyORE3W4vvM3VxJe kr7pF+nJbd1dRr6ILxIAY5Co+QnfnRb7dARTQVKQrgjRdKxTPwIDAQABo4IDgTCC A30wHQYDVR0OBBYEFENCHd5X5DXDeC+Q4pCyE/pyeAnnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNDIzMGFlMzktZTU1My0z MWY1LTlmZDAtZjhhMGU3YzhkNTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQCEAU4AwQC EAVAAwQCENggAwQCEN00MAwDBAXAZmADBALAZngDBATAhIADBALAhLwwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEACQMJ/e+PyKFIVL90M191zHwmu2NziXyJdHexdePfKDsO/vBSZhS853PTKUpK 9tRO6vyD2+/9qW7tEOszF8eOyNpesns9/pHJRhRNxPzWTRXNfGOBpEuS9lB6qVi2 U/LV8gReldesvcfqXOy8nJjY0542Y2obqsVhrjBIPNhCaKqtcoLCHCO3FZIPCx0t zE+xsNwG1uxOdkgqgtiCVzo6hieL9lK32A78yMxTR7rLFG5CbDh4b8cxTuEK0/Mn D1JQa8fMenoWkwJV4SEDW/xqTzQJvgKbr9sa75HHWEcQxUPlYQt41IRB9NH5LTPO ugjF4qDjkXdyqdvbeoB59cIW6w== -----END CERTIFICATE-----Generated at Tue Sep 22 10:23:33 2026 by rpki-client