$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5c5b88c2-6030-33f5-b29e-0bd4b7a2484b.roa File: 5c5b88c2-6030-33f5-b29e-0bd4b7a2484b.roa (raw, json) Hash identifier: VdkgSoJEBy0Ppf1j/sR5MmU2ha/j7jt3gZ9PGpqa1tM= Subject key identifier: D0:52:B5:C8:D3:EF:1D:31:77:13:DA:05:43:E8:6F:20:49:66:28:71 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F2FABDEE1D1EF19E456964868 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5c5b88c2-6030-33f5-b29e-0bd4b7a2484b.roa Signing time: Tue 15 Sep 2026 19:24:44 +0000 ROA not before: Tue 15 Sep 2026 19:24:44 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 5650 IP address blocks: 16.5.36.0/22 maxlen: 24 16.216.28.0/22 maxlen: 24 16.216.216.0/24 maxlen: 24 16.217.4.0/22 maxlen: 24 16.217.100.0/22 maxlen: 24 16.217.104.0/22 maxlen: 24 16.217.108.0/22 maxlen: 24 16.217.217.0/24 maxlen: 24 16.217.248.0/22 maxlen: 24 16.221.48.0/22 maxlen: 24 16.222.0.0/22 maxlen: 24 136.162.140.0/22 maxlen: 24 136.162.148.0/22 maxlen: 24 136.162.152.0/22 maxlen: 24 136.162.184.0/22 maxlen: 24 136.162.240.0/22 maxlen: 24 136.162.252.0/22 maxlen: 24 161.114.0.0/22 maxlen: 22 161.114.8.0/22 maxlen: 24 161.114.44.0/22 maxlen: 24 161.114.64.0/22 maxlen: 24 161.114.96.0/22 maxlen: 24 161.114.136.0/22 maxlen: 24 161.114.140.0/22 maxlen: 24 161.114.144.0/22 maxlen: 24 161.114.148.0/22 maxlen: 24 161.114.152.0/22 maxlen: 24 161.114.156.0/22 maxlen: 24 161.114.160.0/22 maxlen: 24 161.114.200.0/22 maxlen: 24 161.114.208.0/22 maxlen: 24 192.26.60.0/22 maxlen: 24 192.26.64.0/24 maxlen: 24 192.26.65.0/24 maxlen: 24 192.26.66.0/24 maxlen: 24 192.26.67.0/24 maxlen: 24 192.26.76.0/22 maxlen: 24 192.26.80.0/23 maxlen: 24 192.48.153.0/24 maxlen: 24 192.48.160.0/22 maxlen: 24 192.82.162.0/23 maxlen: 24 192.82.176.0/21 maxlen: 24 192.102.124.0/22 maxlen: 24 192.102.132.0/22 maxlen: 24 192.132.112.0/24 maxlen: 24 192.132.113.0/24 maxlen: 24 192.132.114.0/24 maxlen: 24 192.132.115.0/24 maxlen: 24 192.132.116.0/24 maxlen: 24 192.132.117.0/24 maxlen: 24 192.132.118.0/24 maxlen: 24 192.132.119.0/24 maxlen: 24 192.132.120.0/24 maxlen: 24 192.132.121.0/24 maxlen: 24 192.132.122.0/24 maxlen: 24 192.132.123.0/24 maxlen: 24 192.132.124.0/22 maxlen: 24 192.132.196.0/22 maxlen: 24 198.29.68.0/22 maxlen: 24 198.29.82.0/24 maxlen: 24 198.29.83.0/24 maxlen: 24 198.29.84.0/24 maxlen: 24 198.29.85.0/24 maxlen: 24 198.29.86.0/23 maxlen: 24 198.29.88.0/24 maxlen: 24 198.29.89.0/24 maxlen: 24 198.29.90.0/24 maxlen: 24 198.29.91.0/24 maxlen: 24 198.29.92.0/24 maxlen: 24 198.29.93.0/24 maxlen: 24 198.29.94.0/24 maxlen: 24 198.29.95.0/24 maxlen: 24 199.74.32.0/20 maxlen: 24 199.74.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2f:ab:de:e1:d1:ef:19:e4:56:96:48:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 15 19:24:44 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=166b70b5-d95b-47f0-90de-d6aef31c5ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e1:6f:b6:b0:b1:21:88:0e:c5:3e:60:3b:90: c8:e6:a6:27:33:9f:47:37:64:ca:c6:b1:ad:34:f4: 80:02:0f:9a:bf:1c:da:4b:87:cd:2b:e4:e9:0d:00: 53:6d:e9:0a:cf:93:93:5c:8c:51:21:f6:60:dd:bd: 86:d6:d7:44:23:e1:9b:60:1c:ff:3c:84:43:a6:6d: b8:c4:5c:c4:c0:eb:da:16:3e:5d:12:46:38:0a:5e: dc:3b:d8:52:76:ab:a9:e2:5c:4d:70:f0:ec:98:83: e5:a3:a9:fe:ba:38:ef:e7:74:2b:9d:e0:70:d3:78: 25:74:81:eb:1c:de:c7:29:6d:c9:25:99:88:53:fb: fb:48:e8:31:b1:30:a0:b3:aa:f7:69:b3:c3:5b:96: 46:49:ee:79:a1:82:e9:01:00:4c:ae:c2:42:74:d9: 80:02:af:b8:82:99:50:41:42:4b:53:62:5e:40:2a: 92:8c:b2:5e:85:12:e9:ce:bc:89:70:2a:89:6f:c7: 1b:59:8d:c2:83:42:31:fc:9d:de:30:42:d5:7d:16: 0d:a7:3d:ce:23:a2:52:6f:97:dc:55:af:e1:69:ad: f7:fe:bc:79:05:82:72:48:04:83:cd:0d:54:43:bb: fb:bd:76:84:e9:d1:6b:7c:d9:a2:34:98:1f:a0:90: dd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:52:B5:C8:D3:EF:1D:31:77:13:DA:05:43:E8:6F:20:49:66:28:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5c5b88c2-6030-33f5-b29e-0bd4b7a2484b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.5.36.0/22 16.216.28.0/22 16.216.216.0/24 16.217.4.0/22 16.217.100.0-16.217.111.255 16.217.217.0/24 16.217.248.0/22 16.221.48.0/22 16.222.0.0/22 136.162.140.0/22 136.162.148.0-136.162.155.255 136.162.184.0/22 136.162.240.0/22 136.162.252.0/22 161.114.0.0/22 161.114.8.0/22 161.114.44.0/22 161.114.64.0/22 161.114.96.0/22 161.114.136.0-161.114.163.255 161.114.200.0/22 161.114.208.0/22 192.26.60.0-192.26.67.255 192.26.76.0-192.26.81.255 192.48.153.0/24 192.48.160.0/22 192.82.162.0/23 192.82.176.0/21 192.102.124.0/22 192.102.132.0/22 192.132.112.0/20 192.132.196.0/22 198.29.68.0/22 198.29.82.0-198.29.95.255 199.74.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f1:c0:48:e4:3e:73:3f:79:7a:16:53:1e:49:e8:56:0b:13: 75:3f:b2:fc:3e:cb:47:2d:4f:4a:8b:27:e0:8f:da:a0:bc:70: 68:74:d8:bc:bf:85:e6:19:0d:a3:e2:c7:89:a1:6f:6e:61:7b: 7a:f3:00:c8:04:d9:45:ad:de:72:7f:57:d9:a7:6e:ef:ca:d8: fa:df:03:f4:12:8d:b9:1d:ba:16:03:e2:7f:73:b8:80:56:5e: 29:9e:7d:86:f1:37:09:59:0c:d8:2d:42:f3:0e:56:dc:bb:bc: ba:ec:25:c8:71:dd:e2:9e:7f:54:7b:5e:38:ab:55:92:ab:26: 27:e7:cc:9e:ba:e5:3c:4b:9b:15:1c:08:4a:ee:1b:f3:cd:2d: e1:73:8b:5e:07:84:6b:dd:dc:48:69:64:43:71:60:67:67:f5: f1:ce:62:b7:df:09:33:79:b6:eb:d9:be:bb:da:ff:13:0c:0f: d5:4b:f7:b2:16:f9:01:66:c3:de:00:72:22:15:b4:46:64:6f: e0:a9:e8:f9:87:1f:55:b3:c6:e3:5f:0d:c3:60:94:2e:ef:1a: 84:07:66:d9:65:a2:94:fb:31:7d:00:e4:5d:1c:61:5f:eb:c7: d7:43:be:d9:95:0d:21:6f:4e:de:8e:86:23:a1:02:2f:62:0c: 39:06:5f:6e -----BEGIN CERTIFICATE----- MIIHSTCCBjGgAwIBAgIUAQ0Mn0MoWE8vq97h0e8Z5FaWSGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDkxNTE5MjQ0NFoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk MTY2YjcwYjUtZDk1Yi00N2YwLTkwZGUtZDZhZWYzMWM1YWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeFvtrCxIYgOxT5gO5DI5qYnM59HN2TKxrGt NPSAAg+avxzaS4fNK+TpDQBTbekKz5OTXIxRIfZg3b2G1tdEI+GbYBz/PIRDpm24 xFzEwOvaFj5dEkY4Cl7cO9hSdqup4lxNcPDsmIPlo6n+ujjv53QrneBw03gldIHr HN7HKW3JJZmIU/v7SOgxsTCgs6r3abPDW5ZGSe55oYLpAQBMrsJCdNmAAq+4gplQ QUJLU2JeQCqSjLJehRLpzryJcCqJb8cbWY3Cg0Ix/J3eMELVfRYNpz3OI6JSb5fc Va/haa33/rx5BYJySASDzQ1UQ7v7vXaE6dFrfNmiNJgfoJDdgwIDAQABo4IEWzCC BFcwHQYDVR0OBBYEFNBStcjT7x0xdxPaBUPobyBJZihxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNWM1Yjg4YzItNjAzMC0z M2Y1LWIyOWUtMGJkNGI3YTI0ODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMIIBIwYIKwYBBQUHAQcBAf8EggESMIIBDjCCAQoEAgABMIIB AgMEAhAFJAMEAhDYHAMEABDY2AMEAhDZBDAMAwQCENlkAwQEENlgAwQAENnZAwQC ENn4AwQCEN0wAwQCEN4AAwQCiKKMMAwDBAKIopQDBAKIopgDBAKIorgDBAKIovAD BAKIovwDBAKhcgADBAKhcggDBAKhciwDBAKhckADBAKhcmAwDAMEA6FyiAMEAqFy oAMEAqFyyAMEAqFy0DAMAwQCwBo8AwQCwBpAMAwDBALAGkwDBAHAGlADBADAMJkD BALAMKADBAHAUqIDBAPAUrADBALAZnwDBALAZoQDBATAhHADBALAhMQDBALGHUQw DAMEAcYdUgMEBcYdQAMEBcdKIDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAl8cBI5D5zP3l6FlMeSehWCxN1 P7L8PstHLU9Kiyfgj9qgvHBodNi8v4XmGQ2j4seJoW9uYXt68wDIBNlFrd5yf1fZ p27vytj63wP0Eo25HboWA+J/c7iAVl4pnn2G8TcJWQzYLULzDlbcu7y67CXIcd3i nn9Ue144q1WSqyYn58yeuuU8S5sVHAhK7hvzzS3hc4teB4Rr3dxIaWRDcWBnZ/Xx zmK33wkzebbr2b672v8TDA/VS/eyFvkBZsPeAHIiFbRGZG/gqej5hx9Vs8bjXw3D YJQu7xqEB2bZZaKU+zF9AORdHGFf68fXQ77ZlQ0hb07ejoYjoQIvYgw5Bl9u -----END CERTIFICATE-----Generated at Sun Sep 20 20:35:12 2026 by rpki-client