$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/3e5dcf42-36a1-3b96-9090-2ff518e96cf1.roa File: 3e5dcf42-36a1-3b96-9090-2ff518e96cf1.roa (raw, json) Hash identifier: vMDEIkSStUhgLs4H5tNPrP5TYuYSfoNhB9VRnOYWt8A= Subject key identifier: 0A:8D:F2:1D:28:B4:9C:D0:EF:94:E8:6B:80:6B:48:CE:2B:8E:AF:E9 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F5CC05618984AD9566FB28D80 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/3e5dcf42-36a1-3b96-9090-2ff518e96cf1.roa Signing time: Thu 01 Oct 2026 22:57:21 +0000 ROA not before: Thu 01 Oct 2026 22:57:21 +0000 ROA not after: Wed 30 Dec 2026 23:57:21 +0000 asID: 13481 IP address blocks: 16.7.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:c0:56:18:98:4a:d9:56:6f:b2:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Oct 1 22:57:21 2026 GMT Not After : Dec 30 23:57:21 2026 GMT Subject: CN=e2ca5df2-836d-4f39-88b9-5334b9096184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b2:db:87:84:61:6f:a2:0f:43:88:e1:9b:e7: 72:ca:4a:5e:cf:52:54:7b:95:95:4f:eb:48:d5:4e: d4:f9:bc:29:2b:16:04:19:3f:5b:ba:0e:78:ae:24: 4e:96:71:c3:db:6d:16:86:84:3a:c1:f9:f7:a6:e0: 78:b8:62:03:12:74:91:77:6d:ab:9b:ca:85:0a:80: eb:97:f9:5b:fb:bb:ae:ab:a1:b0:96:09:92:85:21: e7:0c:fb:f0:6e:31:63:ee:24:aa:d9:e2:9e:b5:ea: 02:d2:cc:84:3b:e4:4b:8f:a5:ac:e6:9f:ef:53:ee: a7:f1:7c:fb:67:09:5c:8c:ad:69:78:6d:cd:6d:22: c5:a8:88:3c:f2:5c:e3:17:39:ab:ed:c1:be:d5:d6: 35:36:39:d4:f4:5b:53:6e:83:44:fc:4e:a3:f9:ee: 45:34:71:16:5f:16:f2:e3:e5:8e:a6:cf:fe:ac:71: cc:cc:70:4e:b1:5b:7f:8b:e0:5d:b1:6d:d3:20:d5: 57:55:30:90:1b:88:da:8e:4e:63:68:68:ff:b6:41: 41:fd:bc:6a:5c:c4:6a:bb:a2:ba:74:6f:9e:18:e2: 1f:79:84:d0:09:c7:6a:71:c1:d5:08:8b:9e:43:fa: cd:f7:20:7a:15:85:d9:bb:5a:aa:95:40:ec:3b:5d: 68:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8D:F2:1D:28:B4:9C:D0:EF:94:E8:6B:80:6B:48:CE:2B:8E:AF:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/3e5dcf42-36a1-3b96-9090-2ff518e96cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.7.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:90:c5:ad:d0:3a:65:98:f3:2a:b7:fb:0d:86:d9:9c:e5:89: 18:06:42:f3:78:f0:1f:33:8d:48:43:20:34:f4:6e:28:98:90: 23:54:84:d2:ff:09:81:0c:be:62:0d:1e:39:8f:49:00:7d:95: 9c:6d:42:b5:44:e7:52:f0:ad:e0:8e:b7:1a:91:71:14:b2:1e: 71:e4:45:cf:4c:bc:fe:a1:17:2d:10:96:16:8b:7b:21:c5:2c: 25:1b:c6:55:7e:73:40:81:7e:a1:99:98:b4:07:5e:6d:ca:c2: 2b:81:e4:91:67:3b:c2:b6:5e:3d:0c:33:72:60:6b:d6:ab:52: 0b:a8:01:f9:32:42:0f:c8:72:59:ab:b9:9b:91:d4:6f:cb:72: a3:ea:93:e5:78:9e:a0:c2:29:22:b8:6a:11:0f:54:03:e8:c9: 32:d5:f6:03:dd:c7:12:c8:bc:69:89:a5:fb:cb:2b:1a:c8:c6: 64:88:0d:c0:d4:f8:63:4b:4c:f9:ec:e4:8d:00:d6:f3:c6:50: cf:14:f9:58:dd:60:a9:d6:7a:fe:8b:68:50:c6:55:d4:1a:f4: 06:83:8b:ae:cd:0b:57:b2:08:8c:bd:62:60:b5:90:91:1a:c1: 26:ce:42:0b:7a:c5:21:ff:77:36:36:ea:a3:49:58:09:20:38: 1a:7a:23:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9cwFYYmErZVm+yjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MTAwMTIyNTcyMVoXDTI2MTIzMDIzNTcyMVowLzEtMCsGA1UEAxMk ZTJjYTVkZjItODM2ZC00ZjM5LTg4YjktNTMzNGI5MDk2MTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17Lbh4Rhb6IPQ4jhm+dyykpez1JUe5WVT+tI 1U7U+bwpKxYEGT9bug54riROlnHD220WhoQ6wfn3puB4uGIDEnSRd22rm8qFCoDr l/lb+7uuq6GwlgmShSHnDPvwbjFj7iSq2eKeteoC0syEO+RLj6Ws5p/vU+6n8Xz7 ZwlcjK1peG3NbSLFqIg88lzjFzmr7cG+1dY1NjnU9FtTboNE/E6j+e5FNHEWXxby 4+WOps/+rHHMzHBOsVt/i+BdsW3TINVXVTCQG4jajk5jaGj/tkFB/bxqXMRqu6K6 dG+eGOIfeYTQCcdqccHVCIueQ/rN9yB6FYXZu1qqlUDsO11oFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqN8h0otJzQ75Toa4BrSM4rjq/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvM2U1ZGNmNDItMzZhMS0z Yjk2LTkwOTAtMmZmNTE4ZTk2Y2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAEAdbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaQxa3QOmWY8yq3+w2G2ZzliRgGQvN48B8zjUhDIDT0biiYkCNUhNL/ CYEMvmINHjmPSQB9lZxtQrVE51LwreCOtxqRcRSyHnHkRc9MvP6hFy0QlhaLeyHF LCUbxlV+c0CBfqGZmLQHXm3KwiuB5JFnO8K2Xj0MM3Jga9arUguoAfkyQg/Iclmr uZuR1G/LcqPqk+V4nqDCKSK4ahEPVAPoyTLV9gPdxxLIvGmJpfvLKxrIxmSIDcDU +GNLTPns5I0A1vPGUM8U+VjdYKnWev6LaFDGVdQa9AaDi67NC1eyCIy9YmC1kJEa wSbOQgt6xSH/dzY26qNJWAkgOBp6I2M= -----END CERTIFICATE-----Generated at Sat Oct 31 10:45:40 2026 by rpki-client