$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/ced5a9aa-4b7f-3346-a996-f3e571b9873a.roa File: ced5a9aa-4b7f-3346-a996-f3e571b9873a.roa (raw, json) Hash identifier: spT/Qk/vXJqtB8jVXouU8K7GbzQGHFbOCLZuO3nPSlE= Subject key identifier: 9F:43:29:FA:8C:6D:38:70:00:40:60:12:10:B3:7E:FB:49:CF:4D:5D Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E07404D18585045B03CE7AF00 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/ced5a9aa-4b7f-3346-a996-f3e571b9873a.roa Signing time: Mon 01 Jun 2026 15:08:44 +0000 ROA not before: Mon 01 Jun 2026 15:08:44 +0000 ROA not after: Sun 30 Aug 2026 15:08:44 +0000 asID: 209888 IP address blocks: 16.217.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:40:4d:18:58:50:45:b0:3c:e7:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jun 1 15:08:44 2026 GMT Not After : Aug 30 15:08:44 2026 GMT Subject: CN=f0910342-c68b-455e-aa05-f981eac490c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3f:45:53:97:f8:88:ad:b1:8b:83:eb:f1:f0: 69:f6:ef:40:e6:1e:63:d0:a9:d2:4e:b7:86:de:9d: ec:ad:ce:6f:c7:53:d2:2a:c5:e0:88:2c:81:03:28: 25:3b:7d:3c:6c:ae:88:87:eb:f1:ad:6c:9e:09:1a: a4:5b:6b:80:2a:03:b9:a5:b7:2a:fa:46:ca:b6:43: d0:2a:9b:a4:ea:e6:26:33:9e:0b:a8:b4:1f:49:55: 31:2b:32:fe:9b:f1:e2:90:51:a9:bf:cc:79:44:0c: d0:b5:93:e4:ef:6a:36:d1:c5:02:c0:78:1e:c2:67: 31:34:30:ed:03:ac:9f:93:b0:78:a0:cf:74:ae:17: c0:f0:a8:ba:03:ea:fd:da:f8:1d:1d:e6:a0:7c:76: 79:12:14:52:10:d2:d4:27:34:c8:1a:29:3a:71:53: af:b3:32:c7:16:ea:d2:44:a5:f6:f5:8d:24:44:89: 83:4d:a0:45:6e:a3:a6:6c:0e:83:9a:a7:8c:fd:1d: a9:62:4c:73:f1:03:c4:c7:43:7f:05:d6:e2:8c:dd: a3:34:15:2c:00:9d:50:ba:03:ac:18:2a:a7:d5:39: 68:d0:62:fa:82:62:3c:57:8a:7c:54:48:7a:de:93: d6:fe:7c:d3:f9:c1:8c:3c:a1:d5:39:1c:a7:30:9b: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:43:29:FA:8C:6D:38:70:00:40:60:12:10:B3:7E:FB:49:CF:4D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/ced5a9aa-4b7f-3346-a996-f3e571b9873a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.217.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:31:fd:61:2c:33:be:af:eb:76:3b:00:77:6e:84:56:d4:ee: bf:66:c3:13:90:1d:9b:df:4c:89:d6:a4:dd:fb:77:f7:76:ba: 4b:62:22:c5:f6:9f:1a:53:44:0b:8c:93:a8:b1:36:0e:20:75: 93:9a:8d:37:87:b7:9d:68:48:19:60:53:6d:73:0f:f2:95:09: 9b:a2:fe:7e:6f:5f:fa:f6:cc:23:3e:a5:aa:3c:5d:a0:c2:8c: 68:85:17:7e:2a:a7:fa:46:e0:c5:62:e0:76:3c:74:15:50:87: d3:12:34:f5:0d:22:5a:13:00:8c:3a:fe:1d:7e:5a:2a:43:9a: ec:a3:78:98:ee:bb:2f:7f:85:eb:94:a8:33:c5:10:16:d4:81: 1f:a4:82:94:ee:bd:5d:f6:01:8b:5e:76:01:ca:85:80:3b:13: eb:5d:07:e0:22:42:69:19:0e:30:3b:a5:18:49:a3:c8:d5:01: d2:d9:58:62:79:0e:e6:6e:b9:4f:58:b2:62:0f:16:e1:88:54: ca:5c:bd:52:4d:e2:8c:e4:d5:61:7c:de:67:52:87:82:e3:61: 12:bc:f5:c2:25:16:70:8e:20:20:0e:02:e5:86:3d:47:d1:66: 93:cd:5b:0d:7b:bb:43:3d:16:57:de:98:3c:ef:71:5e:61:e8: 4f:64:57:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HQE0YWFBFsDznrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDYwMTE1MDg0NFoXDTI2MDgzMDE1MDg0NFowLzEtMCsGA1UEAxMk ZjA5MTAzNDItYzY4Yi00NTVlLWFhMDUtZjk4MWVhYzQ5MGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj9FU5f4iK2xi4Pr8fBp9u9A5h5j0KnSTreG 3p3src5vx1PSKsXgiCyBAyglO308bK6Ih+vxrWyeCRqkW2uAKgO5pbcq+kbKtkPQ Kpuk6uYmM54LqLQfSVUxKzL+m/HikFGpv8x5RAzQtZPk72o20cUCwHgewmcxNDDt A6yfk7B4oM90rhfA8Ki6A+r92vgdHeagfHZ5EhRSENLUJzTIGik6cVOvszLHFurS RKX29Y0kRImDTaBFbqOmbA6DmqeM/R2pYkxz8QPEx0N/BdbijN2jNBUsAJ1QugOs GCqn1Tlo0GL6gmI8V4p8VEh63pPW/nzT+cGMPKHVORynMJsM9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9DKfqMbThwAEBgEhCzfvtJz01dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvY2VkNWE5YWEtNGI3Zi0z MzQ2LWE5OTYtZjNlNTcxYjk4NzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAENl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQx/WEsM76v63Y7AHduhFbU7r9mwxOQHZvfTInWpN37d/d2uktiIsX2 nxpTRAuMk6ixNg4gdZOajTeHt51oSBlgU21zD/KVCZui/n5vX/r2zCM+pao8XaDC jGiFF34qp/pG4MVi4HY8dBVQh9MSNPUNIloTAIw6/h1+WipDmuyjeJjuuy9/heuU qDPFEBbUgR+kgpTuvV32AYtedgHKhYA7E+tdB+AiQmkZDjA7pRhJo8jVAdLZWGJ5 DuZuuU9YsmIPFuGIVMpcvVJN4ozk1WF83mdSh4LjYRK89cIlFnCOICAOAuWGPUfR ZpPNWw17u0M9FlfemDzvcV5h6E9kVwU= -----END CERTIFICATE-----Generated at Sat Jun 13 09:43:51 2026 by rpki-client