$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/3f703b63-4025-3c3f-9d32-bd8c8e5e733e.roa File: 3f703b63-4025-3c3f-9d32-bd8c8e5e733e.roa (raw, json) Hash identifier: qUxSV+2hM1Xew4aJnyaB6ZEbfhKqpv9eUIs6KpP2xc4= Subject key identifier: 2F:57:F3:B4:5C:07:EC:30:E1:FA:DC:7A:6D:1A:22:F2:5F:08:64:17 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584EAFE6ECBBEF34978B47815580 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/3f703b63-4025-3c3f-9d32-bd8c8e5e733e.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 402511 IP address blocks: 16.217.34.0/24 maxlen: 24 192.48.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:ec:bb:ef:34:97:8b:47:81:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=a3a54f29-f497-4d31-97a2-3a23c1df707b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ee:2e:c2:f9:7c:de:de:d6:ea:b5:bc:91:a7: 79:b8:e0:f7:e6:8c:2a:fd:30:ed:cb:23:4d:9d:3c: 5e:b3:2e:54:3d:8c:63:a8:81:62:74:94:69:e7:52: 53:c3:29:b9:0d:25:06:ad:51:9f:b0:3c:d7:73:d6: a0:72:93:68:78:42:fc:6f:16:95:20:27:0d:7e:95: e3:a0:09:a4:00:ba:e2:00:e9:49:c8:5c:5b:6e:3d: 2f:c0:c1:05:01:ab:7f:b4:fa:60:73:dc:d2:d5:37: 09:ac:d6:49:48:55:b9:5c:ed:9f:90:02:4f:a0:bc: 97:08:c3:5f:2c:be:27:45:36:32:df:c8:de:98:8e: 4f:f3:d2:db:be:ff:19:67:71:8d:e3:f7:97:09:9f: 6d:41:fa:10:51:9e:12:a1:e7:0c:44:f6:bb:9f:41: 3b:e7:be:e0:24:c7:a3:ec:20:01:3a:5e:d1:62:f3: a8:b1:a4:95:88:b6:4e:14:55:61:7e:9b:3b:42:1e: 42:db:d0:d8:24:3b:3f:13:87:c1:1a:eb:ac:24:af: 3a:ed:35:7a:ec:8c:30:4c:24:10:88:46:ee:18:05: 99:7f:e2:a0:71:d1:d4:bd:0a:0d:af:96:51:43:d8: 52:f4:05:a3:f7:52:f2:f5:b5:61:63:4d:f6:40:6d: c3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:57:F3:B4:5C:07:EC:30:E1:FA:DC:7A:6D:1A:22:F2:5F:08:64:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/3f703b63-4025-3c3f-9d32-bd8c8e5e733e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.217.34.0/24 192.48.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ee:a7:4c:08:c1:81:30:b1:49:97:b2:62:1f:32:f5:b0:ae: 09:1b:41:ec:93:03:ac:fa:74:5e:66:a1:13:40:0a:d5:85:68: a0:37:d8:7c:b1:45:3b:25:49:a2:05:9b:3e:d9:40:a1:09:7f: 0d:7d:0d:fa:2d:ef:c7:bc:49:e1:fb:f2:47:92:22:c9:49:96: 75:79:6a:b9:09:76:d2:54:5d:6b:fb:78:ac:75:42:2b:f1:68: 35:b5:85:eb:c9:b1:09:f6:6c:77:fc:6a:cd:16:88:4f:9a:8c: 80:a1:a7:5e:9e:91:fe:d3:0b:00:3f:b2:b5:3d:02:27:93:ef: 82:bf:9f:de:e8:02:4d:ea:d9:bd:9d:b2:36:ce:0d:65:4a:2d: d5:19:f5:db:ea:d0:aa:66:86:7e:aa:2c:60:b8:ef:62:c1:6f: ea:f5:58:e1:10:12:31:83:ed:bd:88:f3:55:04:e2:ca:d4:3c: c4:59:e7:19:71:1d:8e:3b:35:d4:a3:35:8d:67:ce:96:14:45: 7e:cf:78:5b:06:c5:fe:ca:39:9b:61:ac:5a:ef:7c:61:8b:e4: 9a:80:4a:4b:35:ef:ac:a7:5f:12:9b:46:e4:57:5f:74:0c:ed: 82:2f:ca:ff:5a:13:79:2b:d3:78:dd:19:62:0e:d0:47:20:52: 00:dc:69:e4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6v5uy77zSXi0eBVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk YTNhNTRmMjktZjQ5Ny00ZDMxLTk3YTItM2EyM2MxZGY3MDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+4uwvl83t7W6rW8kad5uOD35owq/TDtyyNN nTxesy5UPYxjqIFidJRp51JTwym5DSUGrVGfsDzXc9agcpNoeEL8bxaVICcNfpXj oAmkALriAOlJyFxbbj0vwMEFAat/tPpgc9zS1TcJrNZJSFW5XO2fkAJPoLyXCMNf LL4nRTYy38jemI5P89Lbvv8ZZ3GN4/eXCZ9tQfoQUZ4SoecMRPa7n0E7577gJMej 7CABOl7RYvOosaSViLZOFFVhfps7Qh5C29DYJDs/E4fBGuusJK867TV67IwwTCQQ iEbuGAWZf+KgcdHUvQoNr5ZRQ9hS9AWj91Ly9bVhY032QG3D4wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFC9X87RcB+ww4frcem0aIvJfCGQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvM2Y3MDNiNjMtNDAyNS0z YzNmLTlkMzItYmQ4YzhlNWU3MzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAENkiAwQA wDCTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAITup0wIwYEwsUmXsmIfMvWwrgkbQeyTA6z6dF5moRNACtWF aKA32HyxRTslSaIFmz7ZQKEJfw19Dfot78e8SeH78keSIslJlnV5arkJdtJUXWv7 eKx1QivxaDW1hevJsQn2bHf8as0WiE+ajIChp16ekf7TCwA/srU9AieT74K/n97o Ak3q2b2dsjbODWVKLdUZ9dvq0Kpmhn6qLGC472LBb+r1WOEQEjGD7b2I81UE4srU PMRZ5xlxHY47NdSjNY1nzpYURX7PeFsGxf7KOZthrFrvfGGL5JqASks176ynXxKb RuRXX3QM7YIvyv9aE3kr03jdGWIO0EcgUgDcaeQ= -----END CERTIFICATE-----Generated at Sun Sep 13 07:06:43 2026 by rpki-client