$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/3e790872-a5e8-3cc9-b3fa-3b604a4c1c21.roa File: 3e790872-a5e8-3cc9-b3fa-3b604a4c1c21.roa (raw, json) Hash identifier: casLYvvsbzuIgx7y/SFZbz4TWnbIzWks2QIF5Oiii3U= Subject key identifier: CE:E9:E0:3C:5D:77:6F:30:53:FD:D2:83:07:AA:12:26:2F:51:7B:E5 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F0DE2E1E08FDA17B57E59A570 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/3e790872-a5e8-3cc9-b3fa-3b604a4c1c21.roa Signing time: Thu 03 Sep 2026 16:58:06 +0000 ROA not before: Thu 03 Sep 2026 16:58:06 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 198949 IP address blocks: 16.216.48.0/22 maxlen: 24 198.29.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:e2:e1:e0:8f:da:17:b5:7e:59:a5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 3 16:58:06 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=96e0a207-a170-4f3c-8773-46a5095fbe9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d8:e6:fc:cd:1c:f8:25:72:d9:3b:1c:dc:db: 06:de:04:ef:f4:ff:9e:6d:7a:96:08:9b:45:25:d3: 84:8c:49:87:ae:95:03:4d:04:7b:21:5d:b8:4c:3c: f1:1b:c9:31:0e:27:ed:32:a3:af:cf:79:9c:bd:25: 35:ec:92:57:4f:2e:95:37:bc:12:d8:a5:72:cd:19: e0:77:7c:79:97:76:c8:60:e8:d0:6e:6f:4d:70:e9: 8c:e8:60:8d:17:cf:4b:27:a8:47:36:5f:b2:d0:a5: 97:c9:65:f5:1c:82:88:a8:99:66:6b:1d:ea:84:a8: 0f:c7:98:68:4d:55:84:e3:d8:b5:0b:79:7c:2d:8e: 75:d5:f8:8f:08:06:a7:74:49:8d:9c:d2:41:b9:97: 95:bd:95:24:41:0b:cf:08:5a:4a:46:b5:d3:c8:82: 4e:f5:2a:1b:3b:b9:8b:77:9c:b6:a6:54:6c:2c:d4: 9c:43:3a:33:7c:fa:4e:e2:b4:27:3d:42:0b:08:94: 65:0f:7d:21:94:ac:a8:19:55:18:99:67:d3:c3:ab: 36:85:3b:90:4d:2f:a6:86:82:0f:c3:6b:8a:47:1b: bf:3f:0a:9f:4a:5f:e6:a0:6f:56:43:5e:04:ab:d6: 91:72:5e:c0:60:e2:3e:ec:2a:fa:5e:f9:43:0b:12: 0d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E9:E0:3C:5D:77:6F:30:53:FD:D2:83:07:AA:12:26:2F:51:7B:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/3e790872-a5e8-3cc9-b3fa-3b604a4c1c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.216.48.0/22 198.29.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:48:1e:38:39:fb:f2:75:61:ff:0c:82:ab:46:38:7f:b1:60: 76:b5:ac:3c:7b:74:ca:32:f6:e7:a4:67:a0:c7:75:8d:a3:5b: 20:09:55:c5:68:f1:b9:82:63:41:a0:52:49:58:d6:4c:5d:83: ef:89:d7:7a:9e:93:b1:41:9e:22:73:d8:a0:41:d7:43:ae:d3: 43:28:10:09:9e:ef:5f:f2:a3:01:bc:86:ec:67:29:3a:e1:28: 0a:f6:f8:89:cb:13:d3:35:bd:a8:b1:83:27:94:90:bf:8f:0c: a7:3d:0f:77:78:01:b4:e6:e4:7a:56:d8:40:85:44:82:53:25: d1:d2:8e:96:6c:5a:0d:dd:cc:42:5c:fc:48:bd:cb:aa:92:32: c1:b9:cf:ba:00:5d:b5:59:50:10:7a:10:f0:08:98:d6:a0:a9: af:96:03:90:5b:3d:1b:6b:80:57:25:95:f1:87:8f:59:99:2c: 58:61:43:6b:c9:ae:3e:01:fb:08:76:3e:7c:91:08:8b:82:36: 49:22:88:f1:29:25:e4:b6:77:66:ba:84:70:7e:20:8a:32:34: 9d:07:0e:a2:f4:e1:21:ae:3d:4c:92:2b:c4:74:e8:d6:4c:83: 1a:c4:d4:0f:d3:ff:27:e6:a8:04:79:43:b5:6d:98:19:62:1c: 8e:43:45:91 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8N4uHgj9oXtX5ZpXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDkwMzE2NTgwNloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk OTZlMGEyMDctYTE3MC00ZjNjLTg3NzMtNDZhNTA5NWZiZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tjm/M0c+CVy2Tsc3NsG3gTv9P+ebXqWCJtF JdOEjEmHrpUDTQR7IV24TDzxG8kxDiftMqOvz3mcvSU17JJXTy6VN7wS2KVyzRng d3x5l3bIYOjQbm9NcOmM6GCNF89LJ6hHNl+y0KWXyWX1HIKIqJlmax3qhKgPx5ho TVWE49i1C3l8LY511fiPCAandEmNnNJBuZeVvZUkQQvPCFpKRrXTyIJO9SobO7mL d5y2plRsLNScQzozfPpO4rQnPUILCJRlD30hlKyoGVUYmWfTw6s2hTuQTS+mhoIP w2uKRxu/PwqfSl/moG9WQ14Eq9aRcl7AYOI+7Cr6XvlDCxINswIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFM7p4Dxdd28wU/3SgweqEiYvUXvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvM2U3OTA4NzItYTVlOC0z Y2M5LWIzZmEtM2I2MDRhNGMxYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCENgwAwQB xh1OMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFdIHjg5+/J1Yf8MgqtGOH+xYHa1rDx7dMoy9uekZ6DHdY2j WyAJVcVo8bmCY0GgUklY1kxdg++J13qek7FBniJz2KBB10Ou00MoEAme71/yowG8 huxnKTrhKAr2+InLE9M1vaixgyeUkL+PDKc9D3d4AbTm5HpW2ECFRIJTJdHSjpZs Wg3dzEJc/Ei9y6qSMsG5z7oAXbVZUBB6EPAImNagqa+WA5BbPRtrgFcllfGHj1mZ LFhhQ2vJrj4B+wh2PnyRCIuCNkkiiPEpJeS2d2a6hHB+IIoyNJ0HDqL04SGuPUyS K8R06NZMgxrE1A/T/yfmqAR5Q7VtmBliHI5DRZE= -----END CERTIFICATE-----Generated at Fri Sep 4 20:11:57 2026 by rpki-client