$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d89aa8d4-165e-3f09-82e4-c08f8742754c.roa File: d89aa8d4-165e-3f09-82e4-c08f8742754c.roa (raw, json) Hash identifier: pJHv0lUtfymRxMJ6tWk60Qm2F3xeYN+WWzfzRyTZU5Y= Subject key identifier: 47:96:5A:A9:DB:0A:1F:C7:90:FD:C5:5F:0C:34:4A:62:5C:17:90:29 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F354C2D53FD57E581045BC980 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d89aa8d4-165e-3f09-82e4-c08f8742754c.roa Signing time: Thu 17 Sep 2026 19:46:47 +0000 ROA not before: Thu 17 Sep 2026 19:46:47 +0000 ROA not after: Wed 16 Dec 2026 20:46:47 +0000 asID: 54113 IP address blocks: 16.5.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:4c:2d:53:fd:57:e5:81:04:5b:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 17 19:46:47 2026 GMT Not After : Dec 16 20:46:47 2026 GMT Subject: CN=e4e993c4-d42e-4e8f-8b86-6c876543167d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:87:62:32:79:cb:29:06:ac:39:da:c3:04:db: b7:f4:f4:c0:a4:b5:e9:fd:6a:24:13:a0:00:66:ab: f0:2b:31:4d:f0:22:0f:1c:03:c2:54:9c:99:70:bd: 23:0b:b2:a3:67:5d:54:dc:f7:21:4a:fe:2f:3d:09: fd:9b:2f:9b:94:ba:c1:78:fe:bb:bc:84:63:b5:b8: 79:4c:07:62:bf:98:5b:3d:39:79:96:f3:0f:75:de: 7c:b5:21:5a:bf:57:c1:85:35:98:f3:51:ec:97:47: 21:f3:2d:5e:ea:a3:5c:2a:af:22:33:ff:9d:42:3b: ce:15:7e:73:f8:c6:20:6e:01:b0:1b:ef:56:3b:dc: c3:b7:69:56:a3:b2:48:e7:87:3c:2a:a2:71:5b:15: 55:07:19:22:80:50:19:67:7a:6d:1d:ea:6e:e3:85: fd:43:eb:49:5a:c0:78:00:5f:89:a2:b7:15:8d:73: d5:1f:31:8e:1f:a9:a4:04:1e:ab:9e:6a:bc:1f:b2: 4a:16:ba:6e:70:69:60:77:2b:87:4f:10:af:58:e4: ee:d1:07:15:a5:e9:5a:f6:fe:6a:bd:dd:9f:42:c1: 89:c8:10:9e:de:93:75:ba:2d:06:f9:24:dd:e6:74: be:bd:12:81:1e:6d:03:da:4e:62:99:c7:53:0d:ec: eb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:96:5A:A9:DB:0A:1F:C7:90:FD:C5:5F:0C:34:4A:62:5C:17:90:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d89aa8d4-165e-3f09-82e4-c08f8742754c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.5.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:7d:c2:da:d1:50:01:27:8e:5b:0f:e4:50:63:a4:54:e0:cd: 22:47:5b:46:0c:e1:32:6a:bb:83:1e:d5:fa:92:14:8a:43:fc: 3a:e5:fe:2f:50:ef:7b:77:67:d9:5d:69:1f:7c:88:b9:34:e8: 2a:41:27:72:fa:78:ef:59:a2:88:8a:33:b4:e1:db:52:67:12: 48:fa:aa:61:20:56:af:2e:d2:c7:f8:8c:dd:2f:ae:38:0d:9a: c5:ea:3a:74:df:59:21:0c:67:31:2d:64:6a:db:51:60:8a:4b: 27:c5:75:34:91:8e:5e:f5:a0:da:9b:73:5e:20:a2:50:75:42: 54:ea:d0:40:25:7a:47:db:ba:a3:29:c3:62:b2:f8:84:3a:13: 30:ff:0b:eb:ad:99:13:f9:4c:3e:62:e3:92:c6:b9:b5:94:73: 2e:56:72:e3:8d:ad:de:43:36:90:e9:17:3f:11:5a:c0:b0:9f: a0:ab:a9:5e:a3:3a:a8:4c:29:a6:b7:91:6f:6f:ca:8d:1b:f8: cd:ba:22:c4:0c:d5:9b:e0:cf:6f:73:3f:37:92:44:48:67:56: 83:1e:37:a2:c1:6a:50:77:77:ec:6a:92:9b:a3:b3:8e:18:d0: 8e:60:3e:7a:cc:92:08:5e:ec:1c:2a:e0:22:1f:5b:f7:da:e1: 9f:80:31:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE81TC1T/VflgQRbyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDkxNzE5NDY0N1oXDTI2MTIxNjIwNDY0N1owLzEtMCsGA1UEAxMk ZTRlOTkzYzQtZDQyZS00ZThmLThiODYtNmM4NzY1NDMxNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYdiMnnLKQasOdrDBNu39PTApLXp/WokE6AA ZqvwKzFN8CIPHAPCVJyZcL0jC7KjZ11U3PchSv4vPQn9my+blLrBeP67vIRjtbh5 TAdiv5hbPTl5lvMPdd58tSFav1fBhTWY81Hsl0ch8y1e6qNcKq8iM/+dQjvOFX5z +MYgbgGwG+9WO9zDt2lWo7JI54c8KqJxWxVVBxkigFAZZ3ptHepu44X9Q+tJWsB4 AF+JorcVjXPVHzGOH6mkBB6rnmq8H7JKFrpucGlgdyuHTxCvWOTu0QcVpela9v5q vd2fQsGJyBCe3pN1ui0G+STd5nS+vRKBHm0D2k5imcdTDezraQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeWWqnbCh/HkP3FXww0SmJcF5ApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZDg5YWE4ZDQtMTY1ZS0z ZjA5LTgyZTQtYzA4Zjg3NDI3NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAEAU9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE19wtrRUAEnjlsP5FBjpFTgzSJHW0YM4TJqu4Me1fqSFIpD/Drl/i9Q 73t3Z9ldaR98iLk06CpBJ3L6eO9ZooiKM7Th21JnEkj6qmEgVq8u0sf4jN0vrjgN msXqOnTfWSEMZzEtZGrbUWCKSyfFdTSRjl71oNqbc14golB1QlTq0EAlekfbuqMp w2Ky+IQ6EzD/C+utmRP5TD5i45LGubWUcy5WcuONrd5DNpDpFz8RWsCwn6CrqV6j OqhMKaa3kW9vyo0b+M26IsQM1Zvgz29zPzeSREhnVoMeN6LBalB3d+xqkpujs44Y 0I5gPnrMkghe7Bwq4CIfW/fa4Z+AMVE= -----END CERTIFICATE-----Generated at Mon Sep 21 10:57:41 2026 by rpki-client