$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/528345e2-76f8-3bce-b525-8162e048d7b8.roa File: 528345e2-76f8-3bce-b525-8162e048d7b8.roa (raw, json) Hash identifier: phy66QWJMQ9qf0VV4pYMmrQ45FxNP9LRJG+jeZJlOgA= Subject key identifier: 3F:50:E3:CF:F3:B3:27:71:73:D2:58:64:44:F0:99:2F:8D:DD:5C:E2 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F85AFA49B53869CA5F4578BC0 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/528345e2-76f8-3bce-b525-8162e048d7b8.roa Signing time: Fri 16 Oct 2026 14:51:52 +0000 ROA not before: Fri 16 Oct 2026 14:51:52 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 54004 IP address blocks: 16.216.160.0/19 maxlen: 24 16.220.154.0/24 maxlen: 24 16.220.160.0/19 maxlen: 24 16.220.192.0/18 maxlen: 24 16.221.0.0/20 maxlen: 24 16.221.16.0/20 maxlen: 24 16.221.32.0/20 maxlen: 24 16.221.64.0/19 maxlen: 24 16.221.96.0/19 maxlen: 24 16.221.128.0/19 maxlen: 24 16.221.176.0/20 maxlen: 24 16.221.208.0/20 maxlen: 24 16.224.0.0/16 maxlen: 24 16.225.0.0/17 maxlen: 24 16.225.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:af:a4:9b:53:86:9c:a5:f4:57:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Oct 16 14:51:52 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=dfb1bb2a-8e24-44c4-8c3f-c2f98aa06d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:dd:72:6f:ac:e2:34:45:c3:67:1a:b1:77: 89:fa:22:07:1b:a8:4d:19:24:25:66:49:20:13:db: 0c:af:47:d8:9a:64:37:e3:17:b3:2c:bd:98:ac:a0: ab:d3:2c:06:7b:af:c5:cc:88:3f:44:32:d4:1a:93: 82:e4:9c:f8:16:88:e7:76:af:bb:eb:ae:fa:10:f5: 2b:99:13:f7:be:b5:e7:86:f2:1c:20:7c:ec:98:7b: d9:8a:fa:bb:47:33:a4:9f:cd:96:21:32:4c:91:d8: 57:95:1e:9a:69:9a:62:02:62:ad:42:25:e2:13:4c: 06:76:aa:fa:4d:b7:12:7e:9c:32:51:ac:38:d8:05: ae:91:dd:59:45:20:78:58:63:2a:fd:c6:55:f0:5f: 2b:25:d6:a8:2f:87:03:36:b7:99:d5:d4:da:60:8d: 3d:2c:df:4f:b0:2a:62:6c:3d:20:bc:76:19:7f:4c: 37:a7:16:81:4c:74:36:0b:4c:11:de:69:67:93:aa: bb:33:80:df:17:78:92:94:c2:7f:4b:be:f0:07:ff: 3b:9c:83:e4:56:a2:00:a5:4c:68:04:00:7a:af:83: 00:b2:43:f1:eb:b3:31:d9:1b:fe:c3:ed:b5:75:b0: 4c:14:4f:00:3d:5f:61:86:8e:7a:b9:35:14:0d:86: 68:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:50:E3:CF:F3:B3:27:71:73:D2:58:64:44:F0:99:2F:8D:DD:5C:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/528345e2-76f8-3bce-b525-8162e048d7b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.216.160.0/19 16.220.154.0/24 16.220.160.0-16.221.47.255 16.221.64.0-16.221.159.255 16.221.176.0/20 16.221.208.0/20 16.224.0.0-16.225.159.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:40:8c:3a:7d:f8:10:d8:ae:3e:55:34:55:16:ad:8b:db:b0: 83:4c:c6:6c:c7:8f:3a:ba:89:5f:aa:10:d7:0b:6a:75:6d:bf: 17:3e:74:84:54:77:aa:00:b5:73:1f:d3:06:87:5d:9e:e1:be: f4:42:17:c5:e9:45:e0:a1:4c:f5:0a:65:b3:ee:13:46:ed:20: 2c:51:ed:10:1c:ff:96:fb:9f:45:09:4e:1c:ea:82:56:5d:4d: 6d:71:99:e7:83:ba:51:18:36:2b:ef:ab:57:32:e6:94:79:3b: 6b:31:40:ea:5a:c7:4a:31:b2:b7:a4:ed:ba:a6:47:9c:9a:de: 9d:6b:c9:b0:9f:d7:49:66:bd:21:d8:f0:41:7d:33:1b:50:86: fe:13:f1:f7:7e:2b:bd:0e:f2:4c:5d:b5:00:40:cc:08:8a:02: e7:f2:f4:2b:d0:4b:ef:51:6d:5e:41:6c:e9:10:fc:9b:7f:78: c3:65:7e:11:98:95:cc:76:c6:30:8c:94:b1:8f:bb:82:d1:ee: c1:1b:53:04:1a:19:e5:cb:fd:75:37:2a:ca:aa:47:34:85:0d: 17:36:d1:ef:62:e1:6a:22:fe:c4:89:60:45:e4:6e:9f:90:09: 3a:af:3a:ff:fc:02:2d:68:cc:d1:b0:8e:33:18:4a:12:d1:3e: 83:e7:b0:9d -----BEGIN CERTIFICATE----- MIIGfjCCBWagAwIBAgIUAQ0Mn0MoWE+Fr6SbU4acpfRXi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MTAxNjE0NTE1MloXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk ZGZiMWJiMmEtOGUyNC00NGM0LThjM2YtYzJmOThhYTA2ZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKndcm+s4jRFw2casXeJ+iIHG6hNGSQlZkkg E9sMr0fYmmQ34xezLL2YrKCr0ywGe6/FzIg/RDLUGpOC5Jz4Fojndq+76676EPUr mRP3vrXnhvIcIHzsmHvZivq7RzOkn82WITJMkdhXlR6aaZpiAmKtQiXiE0wGdqr6 TbcSfpwyUaw42AWukd1ZRSB4WGMq/cZV8F8rJdaoL4cDNreZ1dTaYI09LN9PsCpi bD0gvHYZf0w3pxaBTHQ2C0wR3mlnk6q7M4DfF3iSlMJ/S77wB/87nIPkVqIApUxo BAB6r4MAskPx67Mx2Rv+w+21dbBMFE8APV9hho56uTUUDYZodwIDAQABo4IDkDCC A4wwHQYDVR0OBBYEFD9Q48/zsydxc9JYZETwmS+N3VziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNTI4MzQ1ZTItNzZmOC0z YmNlLWI1MjUtODE2MmUwNDhkN2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMFoGCCsGAQUFBwEHAQH/BEswSTBHBAIAATBBAwQFENigAwQA ENyaMAwDBAUQ3KADBAQQ3SAwDAMEBhDdQAMEBRDdgAMEBBDdsAMEBBDd0DALAwMF EOADBAUQ4YAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAS0CMOn34ENiuPlU0VRati9uwg0zGbMePOrqJX6oQ 1wtqdW2/Fz50hFR3qgC1cx/TBoddnuG+9EIXxelF4KFM9Qpls+4TRu0gLFHtEBz/ lvufRQlOHOqCVl1NbXGZ54O6URg2K++rVzLmlHk7azFA6lrHSjGyt6TtuqZHnJre nWvJsJ/XSWa9IdjwQX0zG1CG/hPx934rvQ7yTF21AEDMCIoC5/L0K9BL71FtXkFs 6RD8m394w2V+EZiVzHbGMIyUsY+7gtHuwRtTBBoZ5cv9dTcqyqpHNIUNFzbR72Lh aiL+xIlgReRun5AJOq86//wCLWjM0bCOMxhKEtE+g+ewnQ== -----END CERTIFICATE-----Generated at Wed Oct 21 21:07:54 2026 by rpki-client