$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/fc02b763-ba23-3e12-b362-18c38ffae4cd.roa File: fc02b763-ba23-3e12-b362-18c38ffae4cd.roa (raw, json) Hash identifier: HZIAY3AjxlPYAyvXzs6KnJven9/EthH2kK54XL/iRHQ= Subject key identifier: 4E:02:29:60:36:37:13:E0:A0:36:DF:6A:B8:BE:8B:07:87:67:A9:25 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584B1AD19212DF8865448CD7D240 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/fc02b763-ba23-3e12-b362-18c38ffae4cd.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 22149 IP address blocks: 16.0.52.0/22 maxlen: 22 16.1.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:92:12:df:88:65:44:8c:d7:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=12cb8fc3-5ec1-402e-bd8e-8d2c8a1bde52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:b8:4f:9c:fa:11:73:8a:32:c8:7b:08:00: 9a:7c:db:cf:42:57:90:e2:26:88:3c:13:15:23:7b: d6:1f:e9:a9:2b:9f:2d:bc:76:0d:77:f2:e7:0b:2f: 0c:8c:70:bc:4e:07:8f:87:05:36:dc:37:91:be:b7: 9d:fd:8b:5d:11:ce:91:52:54:65:d6:0e:1a:bc:85: 6d:7f:31:fe:87:59:5f:3e:cf:db:8e:ac:cd:da:87: d1:68:ca:12:46:6a:18:37:dd:4c:81:7f:22:33:d0: 25:07:d0:84:9f:0c:6d:e2:6c:4e:5f:20:09:e6:5c: 5d:ac:41:ca:8c:54:d1:ea:43:c6:6d:49:14:a4:77: 01:b3:ba:2e:b6:26:30:be:73:c4:55:65:e6:bd:30: 81:d2:61:c1:f0:a8:bb:f2:e8:14:15:c0:37:bd:66: 26:c2:85:a8:33:49:8d:56:da:ba:99:1c:40:5a:c0: cd:ba:48:a3:81:af:af:48:f6:1b:42:8c:5f:90:a6: 94:f7:a7:99:47:1e:6f:c1:1a:ff:4f:a9:20:21:38: c2:32:29:3c:73:ca:f7:14:cb:1b:31:5a:3f:17:0f: 35:c9:02:08:9e:23:af:1b:b1:ea:96:81:c1:c4:bb: 60:de:e4:52:c4:05:91:b2:67:9a:cf:fa:97:ca:f0: c0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:02:29:60:36:37:13:E0:A0:36:DF:6A:B8:BE:8B:07:87:67:A9:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/fc02b763-ba23-3e12-b362-18c38ffae4cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.0.52.0/22 16.1.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:2d:81:fc:43:54:87:3e:2a:45:64:ef:95:9c:9d:7f:39:d9: 02:64:73:17:50:32:2b:e9:e9:07:62:3c:fc:df:66:0f:5b:98: f1:8a:3a:38:df:61:3f:c0:90:c8:88:7d:b8:cf:5b:d9:98:8a: db:b7:70:2b:c5:bc:a1:f3:a5:1d:68:33:ca:96:28:5f:40:26: 23:17:18:c3:b1:12:53:47:b7:25:94:ab:1b:b1:aa:d2:47:05: b7:3d:41:e8:cc:b6:09:07:96:48:bf:99:de:b2:30:93:97:a3: df:2c:ff:d7:ec:b3:06:46:21:45:2c:dc:75:71:05:ba:ab:8f: 04:b3:54:9e:d4:6d:6d:b4:ff:1b:88:fc:90:8d:04:4b:0d:19: 7b:b4:b6:d6:0e:08:24:38:6a:f6:d7:a8:0b:94:a2:53:14:67: 85:20:36:c1:c6:a1:2e:4f:d0:b5:b6:b6:d7:39:2b:74:b8:f1: 68:9e:21:0a:cf:30:64:48:7a:0c:a5:0b:ec:b0:78:96:fa:9f: 0e:61:66:5e:b1:b4:4e:23:35:8d:f8:d3:50:90:73:29:cb:a0: 9a:8b:01:d9:7e:8d:2c:ba:9a:38:b7:f2:92:b7:25:13:d1:54: 6e:1e:4f:7b:a1:e9:0b:a6:45:83:dc:72:47:49:fc:c4:48:68: 89:a0:70:f7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsa0ZIS34hlRIzX0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MTJjYjhmYzMtNWVjMS00MDJlLWJkOGUtOGQyYzhhMWJkZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKu4T5z6EXOKMsh7CACafNvPQleQ4iaIPBMV I3vWH+mpK58tvHYNd/LnCy8MjHC8TgePhwU23DeRvred/YtdEc6RUlRl1g4avIVt fzH+h1lfPs/bjqzN2ofRaMoSRmoYN91MgX8iM9AlB9CEnwxt4mxOXyAJ5lxdrEHK jFTR6kPGbUkUpHcBs7outiYwvnPEVWXmvTCB0mHB8Ki78ugUFcA3vWYmwoWoM0mN Vtq6mRxAWsDNukijga+vSPYbQoxfkKaU96eZRx5vwRr/T6kgITjCMik8c8r3FMsb MVo/Fw81yQIIniOvG7HqloHBxLtg3uRSxAWRsmeaz/qXyvDAgwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFE4CKWA2NxPgoDbfari+iweHZ6klMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZmMwMmI3NjMtYmEyMy0z ZTEyLWIzNjItMThjMzhmZmFlNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCEAA0AwQA EAF4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD4tgfxDVIc+KkVk75WcnX852QJkcxdQMivp6QdiPPzfZg9b mPGKOjjfYT/AkMiIfbjPW9mYitu3cCvFvKHzpR1oM8qWKF9AJiMXGMOxElNHtyWU qxuxqtJHBbc9QejMtgkHlki/md6yMJOXo98s/9fsswZGIUUs3HVxBbqrjwSzVJ7U bW20/xuI/JCNBEsNGXu0ttYOCCQ4avbXqAuUolMUZ4UgNsHGoS5P0LW2ttc5K3S4 8WieIQrPMGRIegylC+yweJb6nw5hZl6xtE4jNY3401CQcynLoJqLAdl+jSy6mji3 8pK3JRPRVG4eT3uh6QumRYPcckdJ/MRIaImgcPc= -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:57 2025 by rpki-client