$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d1721332-76d6-3103-9282-c8953ddc4b85.roa File: d1721332-76d6-3103-9282-c8953ddc4b85.roa (raw, json) Hash identifier: kGNpDnhfQRJbSArpZ/jLrBrZ0pbMCFl3PV71EkUmR4w= Subject key identifier: C7:B8:C6:C4:16:54:AE:C1:90:C8:9B:8B:DB:2B:55:16:BA:8E:84:30 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F31DF7281823E5753557E4ED0 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d1721332-76d6-3103-9282-c8953ddc4b85.roa Signing time: Wed 16 Sep 2026 14:20:17 +0000 ROA not before: Wed 16 Sep 2026 14:20:17 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 402509 IP address blocks: 16.217.239.0/24 maxlen: 24 192.102.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:df:72:81:82:3e:57:53:55:7e:4e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 16 14:20:17 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=53efc96d-501f-487c-a62f-95cdb97630ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:16:7c:8d:52:a7:f7:bd:d0:85:92:cc:8f:3b: 9f:15:82:db:d5:26:c6:ef:bd:91:1d:4f:54:e4:31: a8:61:c3:a5:9b:bb:f9:50:5c:21:5e:ae:25:27:e8: 23:97:ac:af:63:2c:36:32:ee:ff:08:d7:e5:78:0c: c3:b9:a2:a3:52:e9:2f:a2:c6:7d:d4:71:ea:69:46: 9d:e3:8d:8d:1b:26:2f:13:90:c5:9e:69:2f:f7:4f: 95:42:05:4f:b0:8f:78:83:39:c0:9e:23:d4:2f:09: 57:79:f6:0a:92:c7:cb:f5:e7:fe:6a:fc:a3:8d:12: 28:52:7c:3a:cf:28:5e:33:e7:88:6f:8d:27:42:85: 63:9b:2f:59:e4:3f:88:13:42:3f:f7:9c:15:1a:39: ce:07:13:7f:75:85:a6:f2:01:d9:3f:7d:23:01:4f: 7c:ce:ef:06:72:e6:78:8f:b4:d0:51:da:e4:d3:bb: a4:63:93:b2:cb:b5:6c:5e:b0:48:ac:0b:80:c0:b1: 1a:84:c8:8a:7d:f2:de:f7:39:7b:27:f6:9c:bc:9e: 80:b8:23:d5:77:c2:4e:cd:8e:f6:73:fe:37:80:8e: e1:8a:48:bc:02:a1:3d:50:5c:4f:00:67:49:0d:08: 68:7a:b8:01:05:af:b5:9f:f1:ee:d1:76:1e:e3:6b: 58:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B8:C6:C4:16:54:AE:C1:90:C8:9B:8B:DB:2B:55:16:BA:8E:84:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d1721332-76d6-3103-9282-c8953ddc4b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.217.239.0/24 192.102.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:32:15:7f:1d:0c:db:6a:0b:29:1d:c5:b0:f9:d0:2a:d9:6b: d6:4d:57:b9:51:57:ce:2f:20:23:d4:90:65:79:f7:56:4a:9a: 1e:57:3d:93:83:d9:99:3b:a9:5d:92:cd:82:6a:ce:59:22:a2: 5c:42:4d:4b:31:7f:fe:0a:8c:3e:94:cc:36:b8:a2:b3:51:83: 4a:b4:83:ec:04:c8:38:a2:23:f0:2f:bf:df:02:1b:7e:ed:ed: 82:20:42:72:de:c7:40:99:4f:5c:65:f1:dd:27:ba:5a:8b:76: 78:83:8e:a2:06:4f:ea:f7:d1:62:ad:c2:f0:c1:d6:e7:15:d2: b8:0c:cd:f7:1f:76:a9:44:de:91:00:50:d7:48:24:6d:33:12: af:9e:d6:90:db:6f:91:c6:cf:26:c4:bd:96:aa:e2:3a:30:57: 66:3a:d3:b2:73:a0:2a:92:2b:37:a1:9d:e7:42:ae:bc:12:80: 16:64:cd:f6:72:57:17:ec:1b:03:db:d4:3f:ab:c8:a5:c8:e2: 01:16:43:fc:ce:3a:03:5c:43:48:e1:66:ce:f9:bf:2f:12:d6: f9:67:1b:a4:22:2f:df:42:d4:ea:76:92:08:e8:b0:10:49:a6: 3b:80:5b:f1:8c:0f:9f:56:07:74:b1:3b:9a:28:40:cd:9b:0f: f3:0e:14:20 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8x33KBgj5XU1V+TtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDkxNjE0MjAxN1oXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk NTNlZmM5NmQtNTAxZi00ODdjLWE2MmYtOTVjZGI5NzYzMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRZ8jVKn973QhZLMjzufFYLb1SbG772RHU9U 5DGoYcOlm7v5UFwhXq4lJ+gjl6yvYyw2Mu7/CNfleAzDuaKjUukvosZ91HHqaUad 442NGyYvE5DFnmkv90+VQgVPsI94gznAniPULwlXefYKksfL9ef+avyjjRIoUnw6 zyheM+eIb40nQoVjmy9Z5D+IE0I/95wVGjnOBxN/dYWm8gHZP30jAU98zu8GcuZ4 j7TQUdrk07ukY5Oyy7VsXrBIrAuAwLEahMiKffLe9zl7J/acvJ6AuCPVd8JOzY72 c/43gI7hiki8AqE9UFxPAGdJDQhoergBBa+1n/Hu0XYe42tYRQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMe4xsQWVK7BkMibi9srVRa6joQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZDE3MjEzMzItNzZkNi0z MTAzLTkyODItYzg5NTNkZGM0Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAENnvAwQA wGaKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFQyFX8dDNtqCykdxbD50CrZa9ZNV7lRV84vICPUkGV591ZK mh5XPZOD2Zk7qV2SzYJqzlkiolxCTUsxf/4KjD6UzDa4orNRg0q0g+wEyDiiI/Av v98CG37t7YIgQnLex0CZT1xl8d0nulqLdniDjqIGT+r30WKtwvDB1ucV0rgMzfcf dqlE3pEAUNdIJG0zEq+e1pDbb5HGzybEvZaq4jowV2Y607JzoCqSKzehnedCrrwS gBZkzfZyVxfsGwPb1D+ryKXI4gEWQ/zOOgNcQ0jhZs75vy8S1vlnG6QiL99C1Op2 kgjosBBJpjuAW/GMD59WB3SxO5ooQM2bD/MOFCA= -----END CERTIFICATE-----Generated at Mon Sep 21 12:40:36 2026 by rpki-client