$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5c5b88c2-6030-33f5-b29e-0bd4b7a2484b.roa File: 5c5b88c2-6030-33f5-b29e-0bd4b7a2484b.roa (raw, json) Hash identifier: 2OE5zZgLccMmOCR0+9PhQorw106YvVYPqL1IzYeCSK8= Subject key identifier: 00:0D:14:60:63:3C:57:30:79:EC:31:44:15:B4:37:49:61:96:84:5B Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F8DFD68978772387657F3E980 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5c5b88c2-6030-33f5-b29e-0bd4b7a2484b.roa Signing time: Mon 19 Oct 2026 14:15:01 +0000 ROA not before: Mon 19 Oct 2026 14:15:01 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 16.5.36.0/22 maxlen: 24 16.5.188.0/22 maxlen: 24 16.216.28.0/22 maxlen: 24 16.216.216.0/24 maxlen: 24 16.217.4.0/22 maxlen: 24 16.217.100.0/22 maxlen: 24 16.217.104.0/22 maxlen: 24 16.217.108.0/22 maxlen: 24 16.217.217.0/24 maxlen: 24 16.217.248.0/22 maxlen: 24 16.221.48.0/22 maxlen: 24 16.222.0.0/22 maxlen: 24 16.222.124.0/22 maxlen: 24 16.222.248.0/22 maxlen: 24 16.223.116.0/22 maxlen: 24 16.223.240.0/22 maxlen: 24 136.162.140.0/22 maxlen: 24 136.162.148.0/22 maxlen: 24 136.162.152.0/22 maxlen: 24 136.162.184.0/22 maxlen: 24 136.162.240.0/22 maxlen: 24 136.162.252.0/22 maxlen: 24 161.114.8.0/22 maxlen: 24 161.114.44.0/22 maxlen: 24 161.114.64.0/22 maxlen: 24 161.114.96.0/22 maxlen: 24 161.114.136.0/22 maxlen: 24 161.114.140.0/22 maxlen: 24 161.114.144.0/22 maxlen: 24 161.114.148.0/22 maxlen: 24 161.114.152.0/22 maxlen: 24 161.114.156.0/22 maxlen: 24 161.114.160.0/22 maxlen: 24 161.114.200.0/22 maxlen: 24 161.114.208.0/22 maxlen: 24 192.26.60.0/22 maxlen: 24 192.26.64.0/24 maxlen: 24 192.26.65.0/24 maxlen: 24 192.26.66.0/24 maxlen: 24 192.26.67.0/24 maxlen: 24 192.26.76.0/22 maxlen: 24 192.26.80.0/23 maxlen: 24 192.48.160.0/22 maxlen: 24 192.82.162.0/23 maxlen: 24 192.82.176.0/21 maxlen: 24 192.102.124.0/22 maxlen: 24 192.102.132.0/22 maxlen: 24 192.132.112.0/24 maxlen: 24 192.132.123.0/24 maxlen: 24 192.132.124.0/22 maxlen: 24 192.132.196.0/22 maxlen: 24 198.29.68.0/22 maxlen: 24 198.29.82.0/24 maxlen: 24 198.29.83.0/24 maxlen: 24 198.29.84.0/24 maxlen: 24 198.29.85.0/24 maxlen: 24 198.29.86.0/23 maxlen: 24 198.29.88.0/24 maxlen: 24 198.29.89.0/24 maxlen: 24 198.29.90.0/24 maxlen: 24 198.29.91.0/24 maxlen: 24 198.29.92.0/24 maxlen: 24 198.29.93.0/24 maxlen: 24 198.29.94.0/24 maxlen: 24 198.29.95.0/24 maxlen: 24 199.74.32.0/20 maxlen: 24 199.74.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:fd:68:97:87:72:38:76:57:f3:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Oct 19 14:15:01 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=f653c3af-ebf7-4db9-b6b5-43185d268f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:46:6a:a9:4c:2f:b4:6a:2d:10:3a:22:ca:9d: d1:5b:d8:fa:68:16:72:6c:27:3f:5f:56:5e:8e:e4: f4:82:f4:96:34:43:2d:d8:c1:df:04:73:93:71:a3: 91:8e:31:29:fc:52:45:b4:23:a6:09:52:a0:14:d5: 34:5a:7d:55:9f:4d:8b:f3:b5:8e:8f:19:f9:3c:ba: 8f:b2:b7:34:78:1c:77:8a:f8:5b:85:0b:b4:6e:86: b8:fd:45:8c:a3:1c:10:6a:21:1f:91:92:46:fa:73: fa:31:e1:e7:27:bf:8e:6d:f8:3c:b0:2a:97:6f:90: 02:16:02:fa:6d:b7:16:25:f1:de:93:8e:87:cc:15: 11:b3:9c:8e:cf:bc:c0:02:d9:77:a5:44:cd:7d:47: 75:be:5e:37:69:05:b2:4e:20:61:b0:3e:22:8e:a2: fa:36:a4:3d:7f:be:b3:99:7c:c6:dc:0c:ae:f6:51: 22:f9:85:8c:6e:08:cd:65:6d:c6:7c:a0:ed:14:c8: 03:c4:7c:dc:26:c2:c4:78:ec:13:d4:d1:86:a0:25: 74:da:95:67:03:fd:28:ac:74:85:4c:62:6f:f8:28: fb:41:00:36:70:74:cb:2f:bb:0c:bd:38:ac:33:fd: 5c:f7:cc:64:cb:fa:af:a8:e0:26:31:a4:82:31:c3: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0D:14:60:63:3C:57:30:79:EC:31:44:15:B4:37:49:61:96:84:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5c5b88c2-6030-33f5-b29e-0bd4b7a2484b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.5.36.0/22 16.5.188.0/22 16.216.28.0/22 16.216.216.0/24 16.217.4.0/22 16.217.100.0-16.217.111.255 16.217.217.0/24 16.217.248.0/22 16.221.48.0/22 16.222.0.0/22 16.222.124.0/22 16.222.248.0/22 16.223.116.0/22 16.223.240.0/22 136.162.140.0/22 136.162.148.0-136.162.155.255 136.162.184.0/22 136.162.240.0/22 136.162.252.0/22 161.114.8.0/22 161.114.44.0/22 161.114.64.0/22 161.114.96.0/22 161.114.136.0-161.114.163.255 161.114.200.0/22 161.114.208.0/22 192.26.60.0-192.26.67.255 192.26.76.0-192.26.81.255 192.48.160.0/22 192.82.162.0/23 192.82.176.0/21 192.102.124.0/22 192.102.132.0/22 192.132.112.0/24 192.132.123.0-192.132.127.255 192.132.196.0/22 198.29.68.0/22 198.29.82.0-198.29.95.255 199.74.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:8c:28:6f:7b:6e:b6:07:50:e1:0a:01:c1:28:44:df:0f:1b: 91:9c:e5:b0:d8:71:dd:ad:8c:8b:38:28:2c:06:16:35:7e:29: 6f:d2:93:43:af:8c:c3:67:e6:e2:3f:37:36:2d:75:c0:a8:49: df:ca:0c:1e:25:ad:1d:a6:b6:d3:a9:8f:56:4d:bb:c0:f9:28: 61:f4:9b:03:44:5f:33:7a:42:90:f0:ad:01:b3:ed:a4:07:76: 42:db:82:72:e4:7a:41:18:6e:23:19:97:44:49:ac:a7:68:ce: 9c:3d:5a:da:51:1f:39:ea:8f:ff:3d:9c:30:8c:e4:b1:be:99: 8a:8e:3e:2e:3a:04:f4:0b:ba:4b:65:87:ca:a0:e1:fb:93:2d: 3a:03:b1:af:12:8b:b3:0b:8e:d9:e9:70:fc:09:d3:08:e4:90: 4c:9e:0c:ca:34:5d:31:62:c6:e1:ef:73:e5:50:38:b6:97:ad: 83:38:d0:e1:5f:ab:dc:41:b1:69:4e:ce:1e:6c:46:a5:6d:3c: 36:4e:bb:05:8a:ef:75:f5:87:98:54:4e:2a:1f:a9:0b:28:af: e0:d4:27:2b:d5:15:5d:b3:6f:e6:57:91:2a:de:c0:06:9e:bc: f3:cf:25:94:fd:9d:ec:28:81:e4:99:e1:e8:90:07:b6:31:38: aa:01:14:f2 -----BEGIN CERTIFICATE----- MIIHaTCCBlGgAwIBAgIUAQ0Mn0MoWE+N/WiXh3I4dlfz6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MTAxOTE0MTUwMVoXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZjY1M2MzYWYtZWJmNy00ZGI5LWI2YjUtNDMxODVkMjY4ZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEZqqUwvtGotEDoiyp3RW9j6aBZybCc/X1Ze juT0gvSWNEMt2MHfBHOTcaORjjEp/FJFtCOmCVKgFNU0Wn1Vn02L87WOjxn5PLqP src0eBx3ivhbhQu0boa4/UWMoxwQaiEfkZJG+nP6MeHnJ7+Obfg8sCqXb5ACFgL6 bbcWJfHek46HzBURs5yOz7zAAtl3pUTNfUd1vl43aQWyTiBhsD4ijqL6NqQ9f76z mXzG3Ayu9lEi+YWMbgjNZW3GfKDtFMgDxHzcJsLEeOwT1NGGoCV02pVnA/0orHSF TGJv+Cj7QQA2cHTLL7sMvTisM/1c98xky/qvqOAmMaSCMcOk5QIDAQABo4IEezCC BHcwHQYDVR0OBBYEFAANFGBjPFcweewxRBW0N0lhloRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNWM1Yjg4YzItNjAzMC0z M2Y1LWIyOWUtMGJkNGI3YTI0ODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMIIBQwYIKwYBBQUHAQcBAf8EggEyMIIBLjCCASoEAgABMIIB IgMEAhAFJAMEAhAFvAMEAhDYHAMEABDY2AMEAhDZBDAMAwQCENlkAwQEENlgAwQA ENnZAwQCENn4AwQCEN0wAwQCEN4AAwQCEN58AwQCEN74AwQCEN90AwQCEN/wAwQC iKKMMAwDBAKIopQDBAKIopgDBAKIorgDBAKIovADBAKIovwDBAKhcggDBAKhciwD BAKhckADBAKhcmAwDAMEA6FyiAMEAqFyoAMEAqFyyAMEAqFy0DAMAwQCwBo8AwQC wBpAMAwDBALAGkwDBAHAGlADBALAMKADBAHAUqIDBAPAUrADBALAZnwDBALAZoQD BADAhHAwDAMEAMCEewMEB8CEAAMEAsCExAMEAsYdRDAMAwQBxh1SAwQFxh1AAwQF x0ogMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB6MKG97brYHUOEKAcEoRN8PG5Gc5bDYcd2tjIs4KCwGFjV+ KW/Sk0OvjMNn5uI/NzYtdcCoSd/KDB4lrR2mttOpj1ZNu8D5KGH0mwNEXzN6QpDw rQGz7aQHdkLbgnLkekEYbiMZl0RJrKdozpw9WtpRHznqj/89nDCM5LG+mYqOPi46 BPQLuktlh8qg4fuTLToDsa8Si7MLjtnpcPwJ0wjkkEyeDMo0XTFixuHvc+VQOLaX rYM40OFfq9xBsWlOzh5sRqVtPDZOuwWK73X1h5hUTiofqQsor+DUJyvVFV2zb+ZX kSrewAaevPPPJZT9newogeSZ4eiQB7YxOKoBFPI= -----END CERTIFICATE-----Generated at Thu Oct 29 05:15:33 2026 by rpki-client