$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e287691b-8517-3bac-a344-d683306094f1.roa File: e287691b-8517-3bac-a344-d683306094f1.roa (raw, json) Hash identifier: le9g5Dnqva6sSEFMYrbzBL2IFt1IosyB5Zv812L8J7s= Subject key identifier: 7D:06:A2:1C:30:EB:52:B5:33:04:B8:34:F0:80:4E:61:F9:A2:39:E7 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584EA39647211C7FE11BF83BF700 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e287691b-8517-3bac-a344-d683306094f1.roa Signing time: Mon 27 Jul 2026 15:08:04 +0000 ROA not before: Mon 27 Jul 2026 15:08:04 +0000 ROA not after: Tue 15 Sep 2026 17:52:04 +0000 asID: 402288 IP address blocks: 16.217.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a3:96:47:21:1c:7f:e1:1b:f8:3b:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jul 27 15:08:04 2026 GMT Not After : Sep 15 17:52:04 2026 GMT Subject: CN=ceff458d-a8ac-4b06-8bbd-62129685886c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e5:17:2b:51:b8:86:e4:50:53:d6:5a:d8:7d: ad:cb:bc:fa:53:bb:6f:8b:cf:58:00:48:98:3c:66: 6c:01:0d:84:cb:0d:cb:ec:13:0e:47:4b:93:8b:ab: 7f:c0:3e:18:06:0a:e7:7c:66:78:a3:8d:4e:7b:b7: 7d:06:39:a2:62:61:39:0a:d2:ea:c7:00:17:ac:46: 6d:68:52:b3:74:3e:17:80:b6:9c:5c:5b:10:c1:60: 7f:81:cf:d9:70:5e:c5:00:b4:82:eb:87:9c:65:20: 90:2b:78:25:fc:ac:51:52:f7:21:00:e4:6e:17:1a: 97:89:21:8c:8a:cd:5b:05:f8:0c:5f:42:1b:26:e9: b5:62:3c:06:09:bb:4e:fd:41:05:87:46:5a:e4:ca: b3:85:6f:10:6b:10:ce:12:22:84:30:37:c3:2b:06: 76:0d:cb:67:38:05:5d:98:4d:b2:95:d1:60:92:21: ec:00:a9:4c:3a:ba:c9:f1:24:85:ec:fa:55:36:6e: 4f:72:be:9c:c2:d5:45:29:f2:b7:1c:e2:5b:d4:e9: 3b:01:55:7f:38:bd:6d:73:59:62:ef:93:06:13:c9: 0e:81:80:0f:09:a7:b6:18:ef:ef:09:c7:8a:f8:0f: 0b:aa:06:38:7b:29:99:07:15:63:8a:3d:96:78:1a: 58:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:06:A2:1C:30:EB:52:B5:33:04:B8:34:F0:80:4E:61:F9:A2:39:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e287691b-8517-3bac-a344-d683306094f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.217.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:39:76:95:d7:cf:9b:e6:3f:cd:1d:83:dd:e6:d3:14:b7:d1: 2c:29:a7:58:fc:b1:e5:62:0c:74:47:bd:5e:ad:b9:96:58:be: 52:35:87:59:d0:37:53:98:77:43:c1:12:ec:24:a2:51:55:6a: 8d:5b:02:a4:95:2e:be:36:e7:16:1b:d2:8c:e2:b5:4a:d3:38: 98:8e:75:80:10:1a:13:d6:d2:19:bd:ff:5f:ba:f4:42:a1:7c: 94:8a:f5:fb:7c:bb:9b:23:4b:8a:56:3e:74:ad:73:f3:36:f2: 40:94:f4:25:9f:3a:cf:ab:06:a9:c4:b9:6d:2f:d5:28:dd:2e: 54:84:68:b0:1d:c1:9e:f0:b5:04:81:64:07:1e:17:76:d6:9f: 3b:01:eb:74:7d:29:50:bc:ad:4f:8e:36:49:c8:45:b1:b6:7b: a6:67:0e:60:e1:56:c0:0b:cb:da:94:99:a4:0f:83:eb:46:d1: 4b:62:07:ab:6f:56:f3:24:24:2c:f2:23:d2:7f:2c:80:15:c7: b2:eb:3b:c1:61:d8:d3:10:ce:22:00:d2:37:bd:35:80:f6:4c: ee:2a:e7:c9:b5:6d:1d:a3:cc:45:fe:62:b1:2c:c6:e1:95:13: e5:fb:be:15:66:83:df:51:01:f8:22:45:29:df:4c:25:2f:6e: 4f:0f:99:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6jlkchHH/hG/g79wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDcyNzE1MDgwNFoXDTI2MDkxNTE3NTIwNFowLzEtMCsGA1UEAxMk Y2VmZjQ1OGQtYThhYy00YjA2LThiYmQtNjIxMjk2ODU4ODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+UXK1G4huRQU9Za2H2ty7z6U7tvi89YAEiY PGZsAQ2Eyw3L7BMOR0uTi6t/wD4YBgrnfGZ4o41Oe7d9BjmiYmE5CtLqxwAXrEZt aFKzdD4XgLacXFsQwWB/gc/ZcF7FALSC64ecZSCQK3gl/KxRUvchAORuFxqXiSGM is1bBfgMX0IbJum1YjwGCbtO/UEFh0Za5MqzhW8QaxDOEiKEMDfDKwZ2DctnOAVd mE2yldFgkiHsAKlMOrrJ8SSF7PpVNm5Pcr6cwtVFKfK3HOJb1Ok7AVV/OL1tc1li 75MGE8kOgYAPCae2GO/vCceK+A8LqgY4eymZBxVjij2WeBpYawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0Gohww61K1MwS4NPCATmH5ojnnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZTI4NzY5MWItODUxNy0z YmFjLWEzNDQtZDY4MzMwNjA5NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAENnuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA5dpXXz5vmP80dg93m0xS30Swpp1j8seViDHRHvV6tuZZYvlI1h1nQ N1OYd0PBEuwkolFVao1bAqSVLr425xYb0ozitUrTOJiOdYAQGhPW0hm9/1+69EKh fJSK9ft8u5sjS4pWPnStc/M28kCU9CWfOs+rBqnEuW0v1SjdLlSEaLAdwZ7wtQSB ZAceF3bWnzsB63R9KVC8rU+ONknIRbG2e6ZnDmDhVsALy9qUmaQPg+tG0UtiB6tv VvMkJCzyI9J/LIAVx7LrO8Fh2NMQziIA0je9NYD2TO4q58m1bR2jzEX+YrEsxuGV E+X7vhVmg99RAfgiRSnfTCUvbk8Pmek= -----END CERTIFICATE-----Generated at Tue Jul 28 21:05:10 2026 by rpki-client