$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa File: 70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa (raw, json) Hash identifier: 3Dcpgl+aae32sWQWjsWc/1z+RmVPPPw6OmTbAATPz2c= Subject key identifier: 2F:86:2E:D6:2A:FA:31:5D:01:AC:14:78:3E:89:28:6E:28:93:1C:81 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584B1D9C27889EA4D65315D74D00 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 399185 IP address blocks: 16.7.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:27:88:9e:a4:d6:53:15:d7:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=8989a02c-b4a9-4053-b919-dbd927ecf311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:0f:16:b8:50:c6:5c:c2:b7:92:2f:c4:f0: fb:43:9e:a6:45:3e:4f:26:04:b6:9d:fc:e5:98:9c: 9d:7d:09:4d:b8:44:02:df:eb:1e:7f:aa:7f:71:fd: de:46:30:60:78:b1:58:bb:e8:d2:81:98:ae:ae:bf: 20:dd:b1:28:63:9a:c3:cc:2e:93:45:bc:6c:cf:95: e7:c9:81:7a:c8:50:b4:21:13:f8:9c:0d:80:55:e3: 42:09:e6:10:d3:d7:2e:74:2e:11:d5:18:fc:28:30: 12:47:b9:fb:db:ea:c7:0f:1f:dc:84:28:ec:1b:45: 33:6f:a7:2c:16:d5:f7:6b:56:46:31:96:81:80:dc: 83:8b:79:e7:b2:51:40:9d:41:71:82:6f:02:3a:6d: 74:8c:3e:de:ca:2d:47:59:11:f6:48:a0:41:33:fc: 7d:ca:6e:30:79:97:d8:8d:c0:fb:47:05:12:a5:17: 03:45:f8:17:8e:6d:ef:58:42:9b:64:65:e6:66:b0: 89:5c:7c:63:a2:82:02:04:42:fa:7a:1d:86:9e:dc: b2:07:71:4c:78:f1:39:35:e5:76:fd:3e:6e:e5:05: 39:f3:45:d9:ac:3a:82:0b:13:87:1a:fe:d3:cc:4e: 95:92:34:e8:91:38:bc:d8:12:7f:97:1f:dd:37:44: e5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:86:2E:D6:2A:FA:31:5D:01:AC:14:78:3E:89:28:6E:28:93:1C:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.7.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:6e:8d:ca:83:24:18:22:83:7e:8b:77:e7:ec:2c:c3:ea:30: e2:08:33:f8:1e:ea:b0:52:fa:75:a8:95:84:86:4a:7c:bb:12: 30:aa:bd:64:90:0f:84:7f:a2:58:6f:63:c2:2c:b6:14:d6:20: 5a:31:8c:74:8a:59:2f:38:b8:6f:75:15:c0:8a:8a:39:34:b9: b2:74:d6:fb:d4:94:4d:b7:78:c2:bd:e8:f6:c8:8a:d4:b0:b0: eb:6b:12:e4:f1:80:c3:bc:78:72:90:11:e9:1e:9d:c0:0c:f1: 21:61:e5:df:d1:6b:fe:1e:d7:90:fa:ce:3a:35:df:de:8a:9a: 3e:b4:fe:e3:17:e0:59:a4:92:2c:a5:6a:c1:70:b4:90:5e:ed: 34:6a:a8:95:42:33:fc:5b:68:85:1c:c2:9b:12:95:86:cf:55: b0:00:d1:8f:6d:5f:82:27:88:1d:d8:e4:53:71:cc:3f:5c:5b: df:54:8a:33:12:1c:b5:3f:9b:1c:72:e9:df:13:31:92:ce:c9: 50:88:3c:d9:8c:46:8a:c3:6b:4e:01:8e:76:a5:08:00:41:0a: 72:b9:9b:98:0c:d9:23:2d:03:bb:b8:5e:32:93:39:22:5e:11: a5:10:69:2b:2f:88:0c:95:52:5d:1d:1c:d1:98:f1:e5:82:ee: 7c:e3:c5:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCeInqTWUxXXTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ODk4OWEwMmMtYjRhOS00MDUzLWI5MTktZGJkOTI3ZWNmMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5kPFrhQxlzCt5IvxPD7Q56mRT5PJgS2nfzl mJydfQlNuEQC3+sef6p/cf3eRjBgeLFYu+jSgZiurr8g3bEoY5rDzC6TRbxsz5Xn yYF6yFC0IRP4nA2AVeNCCeYQ09cudC4R1Rj8KDASR7n72+rHDx/chCjsG0Uzb6cs FtX3a1ZGMZaBgNyDi3nnslFAnUFxgm8COm10jD7eyi1HWRH2SKBBM/x9ym4weZfY jcD7RwUSpRcDRfgXjm3vWEKbZGXmZrCJXHxjooICBEL6eh2GntyyB3FMePE5NeV2 /T5u5QU580XZrDqCCxOHGv7TzE6VkjTokTi82BJ/lx/dN0TlzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+GLtYq+jFdAawUeD6JKG4okxyBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNzBiMzRhN2YtNDZiNy0z MWEzLTlkYjQtNjJlZTlhNzI5N2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCEAcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxujcqDJBgig36Ld+fsLMPqMOIIM/ge6rBS+nWolYSGSny7EjCqvWSQ D4R/olhvY8IsthTWIFoxjHSKWS84uG91FcCKijk0ubJ01vvUlE23eMK96PbIitSw sOtrEuTxgMO8eHKQEekencAM8SFh5d/Ra/4e15D6zjo1396Kmj60/uMX4Fmkkiyl asFwtJBe7TRqqJVCM/xbaIUcwpsSlYbPVbAA0Y9tX4IniB3Y5FNxzD9cW99UijMS HLU/mxxy6d8TMZLOyVCIPNmMRorDa04BjnalCABBCnK5m5gM2SMtA7u4XjKTOSJe EaUQaSsviAyVUl0dHNGY8eWC7nzjxe8= -----END CERTIFICATE-----Generated at Thu Oct 9 03:40:10 2025 by rpki-client