$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4537f09e-ccc4-37e4-9c69-941c7d8b0ec2.roa File: 4537f09e-ccc4-37e4-9c69-941c7d8b0ec2.roa (raw, json) Hash identifier: YN9Q+gy4vTXqtB8w4bqHhkaGY984V86QZC0YAJRZXSs= Subject key identifier: E4:02:14:E6:33:C9:11:9D:2F:05:2E:5A:F5:72:20:26:ED:78:E4:ED Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F9D3317E7C097E152A5529E80 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4537f09e-ccc4-37e4-9c69-941c7d8b0ec2.roa Signing time: Sun 25 Oct 2026 01:00:13 +0000 ROA not before: Sun 25 Oct 2026 01:00:13 +0000 ROA not after: Sat 23 Jan 2027 02:00:13 +0000 asID: 397957 IP address blocks: 16.240.0.0/24 maxlen: 24 16.240.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9d:33:17:e7:c0:97:e1:52:a5:52:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Oct 25 01:00:13 2026 GMT Not After : Jan 23 02:00:13 2027 GMT Subject: CN=9fe5f1d6-e047-4880-a906-2078298dfd1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:25:39:e9:04:fa:fa:69:a0:d2:a9:21:c1: 5f:cb:98:e7:bf:29:91:5d:97:e6:fc:af:ec:fd:7c: 07:06:32:87:a0:c9:35:8a:1d:7b:b2:e4:28:9f:b6: 11:e1:a9:49:3f:31:34:fd:82:f2:b7:4e:92:65:72: a9:70:10:0a:55:f0:bb:2c:40:01:58:ff:28:36:c7: e3:65:63:d6:c7:8f:b2:c2:65:3f:41:43:14:6b:86: 16:b8:ea:7f:bd:e6:f5:07:a9:e8:40:74:6a:58:98: a7:a8:7e:89:05:98:9a:15:01:a1:99:e5:05:1e:0e: a2:33:af:ec:6d:3d:92:ba:32:7d:7f:10:6a:30:f9: 7c:b9:88:a2:75:28:e5:42:cf:00:00:19:91:2a:7f: 0b:ef:6f:26:5c:2d:f0:e2:a0:55:34:2b:a1:06:86: d1:96:30:97:8f:da:b2:7b:da:3f:2b:0e:7c:dd:d3: 5e:ef:a2:c8:d9:70:05:50:14:7d:3b:0d:9a:49:16: dc:8b:f4:d2:11:50:12:d4:28:a9:e1:b8:0d:84:f4: cf:fd:2a:2b:10:bb:6c:7a:25:3d:33:07:03:49:9b: b2:a4:3c:af:b6:6d:3e:6f:d1:e2:bd:d4:01:c1:db: b8:4d:72:60:9a:9b:de:5b:f3:e8:51:43:ea:db:38: c0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:02:14:E6:33:C9:11:9D:2F:05:2E:5A:F5:72:20:26:ED:78:E4:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4537f09e-ccc4-37e4-9c69-941c7d8b0ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.240.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:72:60:3c:75:dd:39:e6:fe:bc:c2:7d:fe:dd:fc:3e:f4:a0: b1:10:bf:93:72:eb:13:e7:51:8a:c6:47:c3:ae:46:71:0e:8e: 3e:c2:4b:72:ce:ad:62:53:9a:0a:9f:7c:9b:dd:ff:99:aa:6b: 86:43:23:21:03:50:8f:06:69:64:26:16:98:12:a9:ce:8d:b6: ab:1c:b3:12:a4:49:a9:cf:c0:8d:59:1e:27:31:53:d5:37:bc: 9e:5f:c1:c0:f5:17:09:19:55:38:d3:5d:75:3e:5a:52:d1:1a: a8:d3:50:80:b0:38:d4:ee:50:e9:a8:96:6c:8e:d8:bf:eb:bc: a5:48:c7:f9:6b:be:64:12:4b:97:8d:05:d2:8a:93:f7:b9:56: 9d:72:df:4a:76:fd:2f:b8:e7:22:64:03:0e:26:f8:09:c6:a2: cd:b8:64:ea:72:ac:a1:40:ee:3f:27:ae:19:90:6d:e2:be:d9: 9e:f2:19:35:29:c7:ec:2a:e4:3f:54:91:e9:55:14:ec:b8:e5: ce:84:2e:d2:09:00:0c:aa:c1:5d:aa:c7:91:cd:a7:11:e1:1a: 07:fa:1b:57:b8:0a:2d:9d:49:bd:57:9d:52:d9:79:6d:f5:be: da:ca:33:d1:00:5d:03:c2:a6:c4:33:b9:f1:e6:df:91:55:4d: a0:19:d4:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+dMxfnwJfhUqVSnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MTAyNTAxMDAxM1oXDTI3MDEyMzAyMDAxM1owLzEtMCsGA1UEAxMk OWZlNWYxZDYtZTA0Ny00ODgwLWE5MDYtMjA3ODI5OGRmZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshclOekE+vppoNKpIcFfy5jnvymRXZfm/K/s /XwHBjKHoMk1ih17suQon7YR4alJPzE0/YLyt06SZXKpcBAKVfC7LEABWP8oNsfj ZWPWx4+ywmU/QUMUa4YWuOp/veb1B6noQHRqWJinqH6JBZiaFQGhmeUFHg6iM6/s bT2SujJ9fxBqMPl8uYiidSjlQs8AABmRKn8L728mXC3w4qBVNCuhBobRljCXj9qy e9o/Kw583dNe76LI2XAFUBR9Ow2aSRbci/TSEVAS1Cip4bgNhPTP/SorELtseiU9 MwcDSZuypDyvtm0+b9HivdQBwdu4TXJgmpveW/PoUUPq2zjAdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQCFOYzyRGdLwUuWvVyICbteOTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNDUzN2YwOWUtY2NjNC0z N2U0LTljNjktOTQxYzdkOGIwZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBEPAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpyYDx13Tnm/rzCff7d/D70oLEQv5Ny6xPnUYrGR8OuRnEOjj7CS3LO rWJTmgqffJvd/5mqa4ZDIyEDUI8GaWQmFpgSqc6NtqscsxKkSanPwI1ZHicxU9U3 vJ5fwcD1FwkZVTjTXXU+WlLRGqjTUICwONTuUOmolmyO2L/rvKVIx/lrvmQSS5eN BdKKk/e5Vp1y30p2/S+45yJkAw4m+AnGos24ZOpyrKFA7j8nrhmQbeK+2Z7yGTUp x+wq5D9UkelVFOy45c6ELtIJAAyqwV2qx5HNpxHhGgf6G1e4Ci2dSb1XnVLZeW31 vtrKM9EAXQPCpsQzufHm35FVTaAZ1Do= -----END CERTIFICATE-----Generated at Thu Oct 29 07:17:09 2026 by rpki-client