$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/16bbd398-a229-377e-b952-5ca4f89cf69e.roa File: 16bbd398-a229-377e-b952-5ca4f89cf69e.roa (raw, json) Hash identifier: iwilVeJjLsgLI8HHZtupEwLPzlK20nPQsHLvaV7NXwc= Subject key identifier: FC:93:E3:69:8B:01:B5:48:50:A0:F8:B5:BF:FF:25:1D:DE:77:97:22 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F8E43F8908ED3D2AC67620840 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/16bbd398-a229-377e-b952-5ca4f89cf69e.roa Signing time: Mon 19 Oct 2026 16:37:11 +0000 ROA not before: Mon 19 Oct 2026 16:37:11 +0000 ROA not after: Sun 17 Jan 2027 15:08:41 +0000 asID: 396356 IP address blocks: 16.5.28.0/22 maxlen: 24 16.5.32.0/22 maxlen: 24 16.5.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8e:43:f8:90:8e:d3:d2:ac:67:62:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Oct 19 16:37:11 2026 GMT Not After : Jan 17 15:08:41 2027 GMT Subject: CN=3aa773d7-c067-4029-ae0c-6b6f17241288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:b1:b3:ac:78:19:48:9d:d2:69:5d:a1:6f: 93:97:f5:f0:3f:f7:ec:c6:46:8d:c5:a8:2f:5a:91: bf:90:31:f0:14:18:c3:87:bf:81:4b:d8:58:a9:bb: d0:02:f1:e1:f7:c5:1b:12:c9:97:a5:2b:20:7d:2b: 88:53:b1:cd:81:0d:b6:c3:4c:d6:d6:24:06:9b:33: 8c:c8:b1:2f:a7:d2:8c:8a:27:eb:87:47:05:f3:13: 12:4e:69:c3:08:42:86:09:83:4e:d5:f1:f6:d4:9e: 87:49:f3:77:d1:a0:cd:c2:53:25:c8:f7:91:29:71: 94:97:21:62:32:20:71:76:5b:0d:0e:80:f3:63:d3: b6:35:d5:a9:c9:4e:b4:cc:76:a6:97:58:6b:f4:64: 63:43:28:99:a0:f3:6d:6c:f7:66:81:a7:75:f9:14: 57:d4:75:f9:16:45:29:3d:1c:dc:7f:50:2c:46:b8: 8b:52:9b:7a:f7:96:b8:8a:db:bd:71:75:2c:3e:3b: a0:60:6a:e5:dd:b7:f7:f3:d5:c9:40:fe:61:4f:dc: 31:c6:36:51:2a:58:4f:55:eb:a2:3f:1e:9d:fb:9f: 29:18:bc:7e:e1:0d:df:76:43:73:e7:84:9c:95:be: 59:53:12:10:36:ff:d2:9a:0c:30:4c:f8:1b:6b:f3: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:93:E3:69:8B:01:B5:48:50:A0:F8:B5:BF:FF:25:1D:DE:77:97:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/16bbd398-a229-377e-b952-5ca4f89cf69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.5.28.0-16.5.35.255 16.5.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:14:11:56:5f:eb:15:0c:78:2a:80:b5:d3:4e:79:82:7a:31: 72:ae:fa:f2:3c:20:64:3e:aa:e6:67:2b:5b:51:04:d1:46:67: fa:f2:43:09:ae:18:56:69:4e:76:80:a3:02:05:05:c0:77:63: 1e:83:54:b6:9d:80:70:de:8c:a8:6a:57:82:58:8b:2c:f6:c5: 92:d4:83:0a:27:2a:30:3d:44:fa:93:7f:03:5b:87:9a:87:e5: 9f:61:b8:7b:84:1f:81:0b:0a:2d:3e:f9:bf:5d:b4:85:ac:3f: 82:13:bb:a1:a3:a9:bb:d3:06:5b:c4:42:77:5f:3e:11:e6:ce: b2:58:51:d2:57:33:98:52:37:77:f5:5a:16:83:eb:18:b3:57: d0:86:ba:ea:99:e2:88:b4:3b:24:11:0b:f8:9e:a0:23:e8:1b: a4:77:ef:24:a8:81:4d:5a:a1:c3:b0:f9:5b:1e:5f:8b:40:c0: 49:14:a1:a9:93:5c:2c:8e:73:7f:0e:59:93:13:54:62:7d:a0: e7:f1:0f:b5:1f:1d:32:50:80:8d:9a:0b:26:31:8f:4f:cd:77: 4a:95:36:01:8c:5b:f2:3a:53:e3:5c:0a:1b:bc:d7:c5:10:ff: c9:4c:4e:2f:96:2c:17:f4:05:47:1c:53:d6:cd:1e:e7:f8:39: 3b:5b:bc:7c -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE+OQ/iQjtPSrGdiCEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MTAxOTE2MzcxMVoXDTI3MDExNzE1MDg0MVowLzEtMCsGA1UEAxMk M2FhNzczZDctYzA2Ny00MDI5LWFlMGMtNmI2ZjE3MjQxMjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteyxs6x4GUid0mldoW+Tl/XwP/fsxkaNxagv WpG/kDHwFBjDh7+BS9hYqbvQAvHh98UbEsmXpSsgfSuIU7HNgQ22w0zW1iQGmzOM yLEvp9KMiifrh0cF8xMSTmnDCEKGCYNO1fH21J6HSfN30aDNwlMlyPeRKXGUlyFi MiBxdlsNDoDzY9O2NdWpyU60zHaml1hr9GRjQyiZoPNtbPdmgad1+RRX1HX5FkUp PRzcf1AsRriLUpt695a4itu9cXUsPjugYGrl3bf389XJQP5hT9wxxjZRKlhPVeui Px6d+58pGLx+4Q3fdkNz54Sclb5ZUxIQNv/SmgwwTPgba/PX1wIDAQABo4IDYzCC A18wHQYDVR0OBBYEFPyT42mLAbVIUKD4tb//JR3ed5ciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvMTZiYmQzOTgtYTIyOS0z NzdlLWI5NTItNWNhNGY4OWNmNjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAIQBRwD BAIQBSADBAIQBVAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAaBQRVl/rFQx4KoC10055gnoxcq768jwgZD6q 5mcrW1EE0UZn+vJDCa4YVmlOdoCjAgUFwHdjHoNUtp2AcN6MqGpXgliLLPbFktSD CicqMD1E+pN/A1uHmofln2G4e4QfgQsKLT75v120haw/ghO7oaOpu9MGW8RCd18+ EebOslhR0lczmFI3d/VaFoPrGLNX0Ia66pniiLQ7JBEL+J6gI+gbpHfvJKiBTVqh w7D5Wx5fi0DASRShqZNcLI5zfw5ZkxNUYn2g5/EPtR8dMlCAjZoLJjGPT813SpU2 AYxb8jpT41wKG7zXxRD/yUxOL5YsF/QFRxxT1s0e5/g5O1u8fA== -----END CERTIFICATE-----Generated at Thu Oct 29 20:11:54 2026 by rpki-client