$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4537f09e-ccc4-37e4-9c69-941c7d8b0ec2.roa File: 4537f09e-ccc4-37e4-9c69-941c7d8b0ec2.roa (raw, json) Hash identifier: pp1xwP8Banrb6c6dQYHNYWy6MXrsI9GMEzstqyc7sH8= Subject key identifier: 13:7B:01:2B:6C:76:47:D0:5F:85:30:06:70:C7:5D:0A:E6:33:F5:1E Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584EFB4762564F752D86DE4DFF40 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4537f09e-ccc4-37e4-9c69-941c7d8b0ec2.roa Signing time: Fri 28 Aug 2026 01:00:12 +0000 ROA not before: Fri 28 Aug 2026 01:00:12 +0000 ROA not after: Thu 26 Nov 2026 02:00:12 +0000 asID: 397957 IP address blocks: 16.240.0.0/24 maxlen: 24 16.240.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fb:47:62:56:4f:75:2d:86:de:4d:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Aug 28 01:00:12 2026 GMT Not After : Nov 26 02:00:12 2026 GMT Subject: CN=3feee959-af20-4834-80ee-a8dc8f5f0dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c3:6f:37:7c:88:07:05:e3:8a:49:32:81:d6: be:11:8a:03:12:97:5f:ef:63:84:d2:a7:5e:9c:b0: 5f:8e:6d:db:c3:dc:da:59:98:3b:d3:b1:d1:f6:d0: 6f:19:a4:83:cc:72:e5:97:60:fb:f0:9f:83:a5:12: e2:32:b4:ee:fe:bb:4e:e3:e5:89:21:fa:2a:ce:c8: b6:f4:f2:15:f7:c2:d9:52:6e:43:74:cc:4d:30:5b: ff:6a:eb:aa:b4:8e:fa:ae:a5:be:7d:8e:31:83:8e: 52:2f:e0:b5:a8:04:74:c9:0e:e2:81:3c:c0:11:1f: 4a:a0:ad:64:6b:ea:ef:7e:52:65:41:25:6e:8d:32: 14:9a:4d:9f:a1:65:d4:a0:ca:b7:4c:c1:ae:d1:0e: a6:5f:1f:17:74:52:84:43:ef:fd:e8:af:cb:37:37: 71:93:95:59:42:3d:c4:29:a2:20:ea:45:f3:13:10: d4:90:59:b7:c5:e4:a7:a3:6d:5d:78:8d:52:80:4f: ac:f0:f3:73:91:c4:f6:eb:6c:e3:73:90:43:73:e8: 7f:78:a3:4b:81:0e:c7:ec:df:a6:47:d3:35:a9:75: b3:62:6d:c5:18:f5:f3:74:d1:2b:e2:fd:1c:62:29: 1a:13:60:e6:c9:95:1a:2e:35:9c:57:2a:58:e8:5b: e9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7B:01:2B:6C:76:47:D0:5F:85:30:06:70:C7:5D:0A:E6:33:F5:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4537f09e-ccc4-37e4-9c69-941c7d8b0ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.240.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c5:24:73:56:77:40:43:6d:e3:b7:2d:41:03:c1:5f:1e:3d: b4:c7:a0:a8:71:f3:60:f3:24:a1:45:c7:ca:04:de:4a:3f:c1: 1f:20:bb:70:85:2f:42:82:ce:b5:a4:0a:49:ae:83:24:b8:d9: 43:6d:51:2f:82:62:44:e9:18:57:e5:b8:48:60:93:28:2b:ce: ae:9d:c1:9f:ce:44:c2:47:a5:35:a6:16:48:f3:0d:9e:95:b6: 44:19:a5:ed:1f:a7:e6:c6:ef:4b:7d:1a:94:f0:74:14:33:0e: 2f:d8:74:4d:a2:13:7d:78:f0:3b:c4:28:ad:c7:e0:a5:69:c2: c4:8f:f9:9e:37:4d:f1:26:19:5d:f2:b1:8e:69:2c:cf:03:60: fe:05:9d:19:6b:b1:96:aa:ac:18:a9:90:28:1b:ff:73:31:b2: 3b:d5:ba:9a:cd:6a:f8:c7:83:19:7c:c4:2d:06:1a:5f:63:25: fc:c7:85:a7:6d:5c:80:f8:99:29:f0:88:99:b5:41:05:4e:25: 92:83:2b:6b:9d:cf:32:bf:6a:15:9a:44:74:87:6c:c9:b5:ac: cd:5d:01:8c:c2:8f:36:66:e9:7d:dc:b4:4a:80:4c:8b:fb:0d: f9:90:55:2c:0c:47:a2:12:7f:8b:41:a0:f4:a5:3e:4a:1c:7a: 8a:c6:2b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE77R2JWT3Utht5N/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk M2ZlZWU5NTktYWYyMC00ODM0LTgwZWUtYThkYzhmNWYwZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48NvN3yIBwXjikkygda+EYoDEpdf72OE0qde nLBfjm3bw9zaWZg707HR9tBvGaSDzHLll2D78J+DpRLiMrTu/rtO4+WJIfoqzsi2 9PIV98LZUm5DdMxNMFv/auuqtI76rqW+fY4xg45SL+C1qAR0yQ7igTzAER9KoK1k a+rvflJlQSVujTIUmk2foWXUoMq3TMGu0Q6mXx8XdFKEQ+/96K/LNzdxk5VZQj3E KaIg6kXzExDUkFm3xeSno21deI1SgE+s8PNzkcT262zjc5BDc+h/eKNLgQ7H7N+m R9M1qXWzYm3FGPXzdNEr4v0cYikaE2DmyZUaLjWcVypY6FvpBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBN7AStsdkfQX4UwBnDHXQrmM/UeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNDUzN2YwOWUtY2NjNC0z N2U0LTljNjktOTQxYzdkOGIwZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBEPAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/FJHNWd0BDbeO3LUEDwV8ePbTHoKhx82DzJKFFx8oE3ko/wR8gu3CF L0KCzrWkCkmugyS42UNtUS+CYkTpGFfluEhgkygrzq6dwZ/ORMJHpTWmFkjzDZ6V tkQZpe0fp+bG70t9GpTwdBQzDi/YdE2iE3148DvEKK3H4KVpwsSP+Z43TfEmGV3y sY5pLM8DYP4FnRlrsZaqrBipkCgb/3MxsjvVuprNavjHgxl8xC0GGl9jJfzHhadt XID4mSnwiJm1QQVOJZKDK2udzzK/ahWaRHSHbMm1rM1dAYzCjzZm6X3ctEqATIv7 DfmQVSwMR6ISf4tBoPSlPkoceorGK50= -----END CERTIFICATE-----Generated at Sun Sep 13 07:05:43 2026 by rpki-client