$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/40a5dfdf-20d8-3ab1-a65b-aa1b14a56aad.roa File: 40a5dfdf-20d8-3ab1-a65b-aa1b14a56aad.roa (raw, json) Hash identifier: J1rXPQrCQXkAQQKEtiUKqeQEODHAyno7e59AfhKGnLc= Subject key identifier: 97:8C:C4:6E:B1:91:81:A2:3A:37:85:31:16:18:46:96:BA:1F:A3:77 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F0DE3221C2464A8FCA1EC4700 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/40a5dfdf-20d8-3ab1-a65b-aa1b14a56aad.roa Signing time: Thu 03 Sep 2026 16:58:36 +0000 ROA not before: Thu 03 Sep 2026 16:58:36 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 393559 IP address blocks: 16.5.84.0/24 maxlen: 24 16.216.48.0/22 maxlen: 24 198.29.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:e3:22:1c:24:64:a8:fc:a1:ec:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 3 16:58:36 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=7eee8f6d-1857-40db-8163-d14ec0aaf871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:ce:08:e0:7b:3d:7b:48:b0:ad:bd:17:a6: d3:60:30:f9:41:ab:09:f5:9b:7b:3c:fb:f1:24:c4: b2:e0:cb:9e:0a:e4:4a:06:72:a6:8c:18:61:5c:e5: 00:9a:45:e5:04:58:80:14:02:00:28:cd:42:fa:84: e1:c3:a8:d4:b5:41:3a:0a:01:8f:98:d5:e0:8e:28: 98:57:ca:a5:1e:aa:14:88:42:98:7c:ad:78:ed:d6: 0d:20:8c:82:31:92:f6:a2:8d:3a:45:7b:e2:5f:77: c7:4b:26:76:6f:a3:d0:6a:f7:da:3a:c6:3b:58:6f: e4:a1:a8:2e:32:1f:57:12:0e:55:82:98:a3:95:89: dd:1a:bd:b8:c9:45:a6:50:12:13:5c:d5:7c:b0:93: 31:d9:bf:11:33:13:ce:03:08:5a:af:c9:bb:10:e3: 80:34:53:0e:ac:ca:5b:51:ad:0f:48:ff:38:4b:95: be:48:65:8d:7a:ea:11:3a:32:c8:09:29:ff:05:56: 58:94:69:e1:f8:6a:7c:f5:ce:dd:41:be:a7:fb:1c: 9f:7c:1e:b6:b4:24:64:be:4d:a5:43:ac:cd:d1:7c: fe:4c:f2:0b:27:a5:4f:ca:d4:85:12:97:5f:df:89: 0d:60:f9:dc:49:68:9e:2e:53:9e:cb:e0:b5:a0:cf: 83:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8C:C4:6E:B1:91:81:A2:3A:37:85:31:16:18:46:96:BA:1F:A3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/40a5dfdf-20d8-3ab1-a65b-aa1b14a56aad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.5.84.0/24 16.216.48.0/22 198.29.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e2:5c:90:9d:c3:91:c0:1a:45:4b:8f:03:9c:1d:ad:c8:74: c0:6a:52:f1:fd:76:62:3d:da:03:58:4a:af:8b:11:48:ac:23: ca:c5:1d:fa:56:88:f6:4b:0e:0f:dc:f8:1e:3b:e0:23:13:05: 8c:82:3e:28:66:32:90:bb:c2:1d:25:cc:62:61:06:19:d9:82: b1:96:6b:39:d6:81:2c:1b:d9:3a:ae:cc:6e:27:59:f7:97:99: 0b:79:7a:c7:0d:de:5f:c1:58:ea:b6:61:80:2a:4e:e6:a5:98: 51:ec:84:5a:43:68:0b:4b:8e:c3:ce:31:a7:51:4b:04:5e:69: 40:41:ad:67:4a:6c:5d:a9:a9:61:0f:b8:e4:03:2b:4c:9f:d2: a5:64:6e:5c:60:c5:c0:68:90:9a:ba:34:7a:50:5c:d0:44:ac: ee:0f:29:f3:04:03:ca:3d:4c:50:fb:fd:3d:5a:e9:81:cc:33: 3d:7c:88:4d:16:b8:da:80:97:6c:51:7a:a8:1e:5d:11:bf:b0: 3e:00:0b:47:99:b1:0d:17:83:fa:5a:c1:f9:59:fb:7d:a7:9e: 09:14:5c:f5:36:a7:3d:9d:b7:28:6f:2d:b6:e1:ac:98:4f:0f: 63:a6:07:6e:a2:1d:13:a0:8b:a6:81:82:d7:2b:4a:c7:05:57: 12:9f:e0:e8 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8N4yIcJGSo/KHsRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDkwMzE2NTgzNloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk N2VlZThmNmQtMTg1Ny00MGRiLTgxNjMtZDE0ZWMwYWFmODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdDOCOB7PXtIsK29F6bTYDD5QasJ9Zt7PPvx JMSy4MueCuRKBnKmjBhhXOUAmkXlBFiAFAIAKM1C+oThw6jUtUE6CgGPmNXgjiiY V8qlHqoUiEKYfK147dYNIIyCMZL2oo06RXviX3fHSyZ2b6PQavfaOsY7WG/koagu Mh9XEg5VgpijlYndGr24yUWmUBITXNV8sJMx2b8RMxPOAwhar8m7EOOANFMOrMpb Ua0PSP84S5W+SGWNeuoROjLICSn/BVZYlGnh+Gp89c7dQb6n+xyffB62tCRkvk2l Q6zN0Xz+TPILJ6VPytSFEpdf34kNYPncSWieLlOey+C1oM+DvwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJeMxG6xkYGiOjeFMRYYRpa6H6N3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNDBhNWRmZGYtMjBkOC0z YWIxLWE2NWItYWExYjE0YTU2YWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAEAVUAwQC ENgwAwQBxh1OMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACHiXJCdw5HAGkVLjwOcHa3IdMBqUvH9dmI92gNY Sq+LEUisI8rFHfpWiPZLDg/c+B474CMTBYyCPihmMpC7wh0lzGJhBhnZgrGWaznW gSwb2TquzG4nWfeXmQt5escN3l/BWOq2YYAqTualmFHshFpDaAtLjsPOMadRSwRe aUBBrWdKbF2pqWEPuOQDK0yf0qVkblxgxcBokJq6NHpQXNBErO4PKfMEA8o9TFD7 /T1a6YHMMz18iE0WuNqAl2xReqgeXRG/sD4AC0eZsQ0Xg/pawflZ+32nngkUXPU2 pz2dtyhvLbbhrJhPD2OmB26iHROgi6aBgtcrSscFVxKf4Og= -----END CERTIFICATE-----Generated at Sun Sep 13 07:05:58 2026 by rpki-client