$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/faa04ed6-bca4-33ed-9842-dfa60644e992.roa File: faa04ed6-bca4-33ed-9842-dfa60644e992.roa (raw, json) Hash identifier: h8hYqRNAgOIptXkvurqP7WJd6bRR0vPoXV5PhGDuk6Q= Subject key identifier: D3:A8:3B:87:3B:79:DC:C6:B2:AE:3D:7D:C3:DC:82:CE:9D:C8:3A:4F Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F78E836AEA1A3DFF7DB5040C0 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/faa04ed6-bca4-33ed-9842-dfa60644e992.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 36352 IP address blocks: 16.217.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:36:ae:a1:a3:df:f7:db:50:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=b1d314f6-a6d3-4a95-a739-50a0634df99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:73:41:d4:f2:ba:51:ad:50:9d:1b:5c:1c:90: d5:2b:4c:79:fa:b1:d9:11:db:af:4d:a6:52:96:52: 86:e6:cd:9f:b1:5e:9e:d8:6e:82:f2:bf:5a:f0:10: e0:7c:6d:b1:2f:f4:2f:c5:81:01:0b:77:8f:57:34: 1b:98:83:12:f1:e4:32:cf:fa:e5:eb:ce:e2:aa:6f: c3:4c:34:90:f9:c3:9b:6b:2f:d2:d1:38:30:db:77: 69:e6:cd:d2:98:60:02:63:8b:a3:86:53:0e:83:54: c9:34:91:ad:b2:10:dc:dd:60:53:e3:5c:c1:45:94: 71:53:ed:29:8f:eb:d2:5e:02:c2:bb:7d:2f:1f:3a: 2a:27:8d:70:63:b0:70:c3:9b:78:ac:63:d1:dd:52: 8a:37:2d:09:30:f1:ab:df:64:ab:48:88:c2:e9:5b: de:8e:1d:07:c5:2c:0f:2e:03:8c:77:ee:9b:24:5d: c8:05:19:e6:3c:f8:a7:0f:53:77:80:1f:c7:dc:a0: 61:d3:62:f1:22:e5:30:98:f0:48:0d:65:d2:e2:63: 10:f8:c5:26:e0:9a:0e:a3:3b:ab:e5:0f:7e:a3:6e: a1:66:a2:bd:f3:46:e8:29:9a:9a:c6:f0:4a:ad:a6: 2e:34:3e:18:b9:cd:3d:67:14:c8:94:2e:7a:ff:de: 0f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A8:3B:87:3B:79:DC:C6:B2:AE:3D:7D:C3:DC:82:CE:9D:C8:3A:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/faa04ed6-bca4-33ed-9842-dfa60644e992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.217.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:25:4f:c6:bd:a4:51:da:7f:85:1f:3c:3c:37:b8:e3:dc:14: 5e:47:14:39:41:c8:e5:34:a6:3f:91:a4:40:83:40:d3:85:a2: a1:f2:4e:89:28:99:6b:de:37:2c:04:ef:9a:32:76:d1:10:ca: cc:31:b3:85:a6:f4:36:a3:15:78:64:1e:80:47:8a:b8:d5:9e: 27:96:2f:ba:32:fa:54:a1:11:7e:71:dc:c8:2f:5d:6c:85:9a: be:99:f1:e3:f8:40:9e:3f:c4:36:49:19:49:1c:52:02:29:9e: 5b:71:36:15:ae:38:73:a6:1d:64:1b:42:52:96:04:28:f6:7c: 00:5a:7d:f2:0a:c8:13:8b:0c:fb:be:ba:44:1d:ae:19:33:03: 14:25:db:cb:2d:21:4f:6a:b1:ed:d3:a4:45:d4:a4:69:0e:ee: ec:9e:09:74:08:12:09:89:d0:dc:70:e2:13:ed:79:ec:34:30: ae:9a:84:93:1c:fb:95:08:5f:49:8f:fc:9b:da:ef:37:9d:dc: 9d:3f:c0:8f:13:9e:8f:59:86:f4:ae:f5:40:09:c6:39:90:a2: 73:75:58:48:88:52:e9:3f:fd:6b:e1:09:dc:53:54:ad:bc:dc: b2:23:51:17:0c:f0:b2:1f:fe:42:1c:ba:23:8b:48:f7:20:4a: 16:5f:ce:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946DauoaPf99tQQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk YjFkMzE0ZjYtYTZkMy00YTk1LWE3MzktNTBhMDYzNGRmOTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXNB1PK6Ua1QnRtcHJDVK0x5+rHZEduvTaZS llKG5s2fsV6e2G6C8r9a8BDgfG2xL/QvxYEBC3ePVzQbmIMS8eQyz/rl687iqm/D TDSQ+cObay/S0Tgw23dp5s3SmGACY4ujhlMOg1TJNJGtshDc3WBT41zBRZRxU+0p j+vSXgLCu30vHzoqJ41wY7Bww5t4rGPR3VKKNy0JMPGr32SrSIjC6Vvejh0HxSwP LgOMd+6bJF3IBRnmPPinD1N3gB/H3KBh02LxIuUwmPBIDWXS4mMQ+MUm4JoOozur 5Q9+o26hZqK980boKZqaxvBKraYuND4Yuc09ZxTIlC56/94PewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOoO4c7edzGsq49fcPcgs6dyDpPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZmFhMDRlZDYtYmNhNC0z M2VkLTk4NDItZGZhNjA2NDRlOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAENkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYlT8a9pFHaf4UfPDw3uOPcFF5HFDlByOU0pj+RpECDQNOFoqHyToko mWveNywE75oydtEQyswxs4Wm9DajFXhkHoBHirjVnieWL7oy+lShEX5x3MgvXWyF mr6Z8eP4QJ4/xDZJGUkcUgIpnltxNhWuOHOmHWQbQlKWBCj2fABaffIKyBOLDPu+ ukQdrhkzAxQl28stIU9qse3TpEXUpGkO7uyeCXQIEgmJ0Nxw4hPteew0MK6ahJMc +5UIX0mP/Jva7zed3J0/wI8Tno9ZhvSu9UAJxjmQonN1WEiIUuk//WvhCdxTVK28 3LIjURcM8LIf/kIcuiOLSPcgShZfzhw= -----END CERTIFICATE-----Generated at Thu Oct 29 14:31:59 2026 by rpki-client