$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cf9288a5-553d-39ed-8325-631ac1035fe8.roa File: cf9288a5-553d-39ed-8325-631ac1035fe8.roa (raw, json) Hash identifier: ff2Mb64yuG2mZrNVx9AIsDtPTW0JJFzVAdFFeqECiLE= Subject key identifier: 46:AE:9F:82:22:E3:87:1C:18:37:06:05:62:BB:CB:2A:AC:24:2E:17 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E07328CBBA42B2C103DE81D40 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cf9288a5-553d-39ed-8325-631ac1035fe8.roa Signing time: Mon 01 Jun 2026 14:41:01 +0000 ROA not before: Mon 01 Jun 2026 14:41:01 +0000 ROA not after: Sun 30 Aug 2026 14:41:01 +0000 asID: 33355 IP address blocks: 16.216.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:32:8c:bb:a4:2b:2c:10:3d:e8:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jun 1 14:41:01 2026 GMT Not After : Aug 30 14:41:01 2026 GMT Subject: CN=65b1ccb2-ac65-4f79-b00a-958a4297887e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:68:88:45:d8:06:06:0c:43:86:fb:31:12:17: 37:c2:86:65:b1:9d:36:58:ab:70:dc:30:93:93:69: 8b:bf:04:47:f0:91:f6:94:dd:67:c7:ce:0d:1f:a0: 2c:d1:55:d7:14:e3:aa:df:49:18:11:81:f2:84:4e: a5:1c:50:74:81:c6:eb:5e:9b:72:ff:e7:51:66:7d: 24:47:e3:74:ea:bf:c3:af:ee:c4:55:d1:10:83:a9: 12:95:d5:38:b2:e1:c9:61:2e:7b:d6:cf:57:83:b7: 6f:54:b0:8e:a6:70:c3:79:83:31:59:2a:2c:fe:46: 08:9b:28:8a:aa:c9:e8:06:4a:8d:05:27:db:b4:19: c2:57:e2:a3:82:2e:54:98:97:7c:f2:d0:36:7a:5a: f0:03:6e:be:e8:f2:ef:54:d0:38:91:c2:e1:d2:f6: 88:ac:57:46:2b:0b:0d:bd:a2:42:ff:7c:9b:19:74: 7d:09:07:c3:14:99:f3:a4:04:3e:59:dc:78:da:60: 0a:6e:63:97:ba:d3:6b:92:9d:d5:4e:ac:be:f5:eb: e7:45:60:a6:c4:29:f6:b1:26:ed:48:e8:ca:31:97: 5f:6d:27:b8:de:25:6b:44:bc:47:80:e7:a8:83:45: 00:1f:28:e0:18:cd:4e:bc:3c:ae:1b:71:28:7f:82: 5f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AE:9F:82:22:E3:87:1C:18:37:06:05:62:BB:CB:2A:AC:24:2E:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cf9288a5-553d-39ed-8325-631ac1035fe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.216.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:44:5e:28:dc:c4:55:54:e7:3d:76:19:99:de:e5:2f:61:ad: fe:dc:3d:b8:a6:96:00:a0:17:a5:25:6e:86:dc:b1:b1:07:98: f1:54:f6:af:ad:31:0b:6a:fe:66:36:17:0f:47:d2:c7:f9:8a: b8:62:a7:5c:e9:93:96:b3:6e:52:bd:72:06:b5:de:83:76:1c: a4:3c:4f:55:b1:d9:c5:85:2b:56:83:b6:55:e9:6c:a5:c9:53: 75:36:0c:a1:68:90:c2:50:62:12:b2:04:79:90:de:ca:8a:85: 7a:01:99:df:d9:f2:4e:55:d2:e5:5f:a1:1e:47:e8:79:ac:b0: 7c:8f:54:e6:f6:de:a5:ed:60:cd:8a:86:94:93:0f:2b:b0:57: 06:88:66:5f:0f:8b:58:3d:17:cb:f3:b1:ef:9d:ea:ec:18:f9: 17:c9:4b:db:d3:2a:e3:57:5a:42:a3:06:ed:52:3d:08:6b:2d: ab:dc:c6:7e:4d:46:a5:cc:0b:fd:c9:5b:c6:b6:b7:1e:62:fa: 4b:72:2e:d3:e4:3c:d0:9b:b8:d6:c2:1c:3e:83:e0:68:02:d4: 2d:df:c8:ce:4d:ac:79:bb:28:49:16:a8:e7:6a:e1:51:44:26: 4c:36:90:b9:71:98:86:ec:b9:8f:e1:22:d1:26:3c:a6:b7:0c: 9a:41:44:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HMoy7pCssED3oHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDYwMTE0NDEwMVoXDTI2MDgzMDE0NDEwMVowLzEtMCsGA1UEAxMk NjViMWNjYjItYWM2NS00Zjc5LWIwMGEtOTU4YTQyOTc4ODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GiIRdgGBgxDhvsxEhc3woZlsZ02WKtw3DCT k2mLvwRH8JH2lN1nx84NH6As0VXXFOOq30kYEYHyhE6lHFB0gcbrXpty/+dRZn0k R+N06r/Dr+7EVdEQg6kSldU4suHJYS571s9Xg7dvVLCOpnDDeYMxWSos/kYImyiK qsnoBkqNBSfbtBnCV+Kjgi5UmJd88tA2elrwA26+6PLvVNA4kcLh0vaIrFdGKwsN vaJC/3ybGXR9CQfDFJnzpAQ+Wdx42mAKbmOXutNrkp3VTqy+9evnRWCmxCn2sSbt SOjKMZdfbSe43iVrRLxHgOeog0UAHyjgGM1OvDyuG3Eof4JflwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaun4Ii44ccGDcGBWK7yyqsJC4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvY2Y5Mjg4YTUtNTUzZC0z OWVkLTgzMjUtNjMxYWMxMDM1ZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAENirMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdEXijcxFVU5z12GZne5S9hrf7cPbimlgCgF6UlbobcsbEHmPFU9q+t MQtq/mY2Fw9H0sf5irhip1zpk5azblK9cga13oN2HKQ8T1Wx2cWFK1aDtlXpbKXJ U3U2DKFokMJQYhKyBHmQ3sqKhXoBmd/Z8k5V0uVfoR5H6HmssHyPVOb23qXtYM2K hpSTDyuwVwaIZl8Pi1g9F8vzse+d6uwY+RfJS9vTKuNXWkKjBu1SPQhrLavcxn5N RqXMC/3JW8a2tx5i+ktyLtPkPNCbuNbCHD6D4GgC1C3fyM5NrHm7KEkWqOdq4VFE Jkw2kLlxmIbsuY/hItEmPKa3DJpBRMs= -----END CERTIFICATE-----Generated at Sat Jun 13 09:14:42 2026 by rpki-client