$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa File: 6f3608bf-3d7e-3946-adc4-5ab836814644.roa (raw, json) Hash identifier: uzx6bXS1GwD6oGe9APXe+N40w9xgZvi1eF3vIK6eKMo= Subject key identifier: 92:5A:A4:C1:A8:0D:EC:E6:42:4C:C0:88:AF:80:61:E6:38:6C:87:58 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584D9FB571B295F31E07A2608200 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 8635 IP address blocks: 16.1.38.0/24 maxlen: 24 16.240.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:71:b2:95:f3:1e:07:a2:60:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=63adb4c8-7d3d-4e81-a88f-eaf2f969e1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e2:0d:f6:35:34:2d:73:6b:7f:b5:73:2c:fd: c6:a9:55:1f:97:2f:ac:8a:a8:07:d2:06:8a:e8:9a: 40:ec:e5:e4:47:d8:e5:1c:43:a0:45:d6:fb:53:d8: 0b:e6:85:95:ed:d7:9a:57:bd:1f:95:9c:ad:6b:ff: 4e:38:2e:44:0f:c6:80:a9:f4:a1:d9:d5:94:cf:1b: 0a:4f:f9:68:68:9f:37:4e:12:77:b0:9e:17:0e:eb: f5:18:93:ac:3b:a7:d4:08:74:43:f2:73:2b:c6:7f: bc:91:f3:6d:8f:03:28:a0:d9:8b:07:04:4e:12:51: 10:69:18:9d:e4:e3:06:10:18:45:fb:2a:58:cb:44: d2:56:69:c8:7a:1b:70:a2:6c:59:c0:38:6d:bb:1a: 0f:b7:bd:8c:ba:71:50:51:ac:6f:f9:80:12:61:e2: c1:95:47:eb:51:34:b5:f5:f6:bc:54:83:5d:c1:e8: d0:6c:68:9a:2f:2d:4b:23:ca:3a:4d:f2:d2:c8:d0: 96:75:12:11:28:f7:d5:08:93:79:86:69:34:60:ff: 64:94:a0:4e:ef:6e:b0:44:4e:d2:6d:b0:e0:70:bb: 45:8d:98:d7:e4:b3:17:ba:c2:cf:bf:3c:a0:30:05: 93:47:60:ea:75:f7:07:80:3e:9e:3f:2d:7d:33:9a: aa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5A:A4:C1:A8:0D:EC:E6:42:4C:C0:88:AF:80:61:E6:38:6C:87:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.1.38.0/24 16.240.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1f:b0:0b:2c:74:d1:40:14:03:8d:80:b9:ca:ca:65:05:07: c1:e8:09:94:48:43:57:3c:04:4b:f4:a5:c7:be:09:79:be:31: dd:fe:27:69:e4:4e:de:ba:5f:b7:2b:90:19:eb:7e:14:6a:36: ba:e6:e4:7a:3e:41:dd:3d:5f:bb:71:f5:74:a7:01:0a:1f:5b: d8:3e:b0:e0:93:17:60:85:ca:46:a4:d1:12:c1:d3:df:51:d7: c2:bb:44:09:c5:06:39:9d:cb:1f:3e:c1:92:eb:69:08:c8:78: 6b:23:a7:4d:f9:ea:b8:29:96:d3:9e:e0:3e:14:7d:2d:ca:30: 4b:10:85:10:5d:c1:e2:53:0a:18:54:66:ae:19:e4:7b:f9:76: 28:d8:0b:fc:48:e6:74:45:81:6b:63:84:fa:8d:d2:ba:5b:46: f6:de:94:82:96:90:cc:cc:55:57:0b:ce:8f:df:e0:bd:75:9e: 46:c3:25:3a:73:31:81:2d:78:19:f3:e8:3f:86:86:9c:c9:57: d4:ac:88:e1:49:ba:55:2f:09:5e:6f:71:f4:47:71:6a:fb:48: b7:2e:1f:a0:f7:91:ec:74:70:aa:95:67:fd:c2:f8:a0:35:4b: ae:63:17:51:c6:22:5a:26:4b:0f:9f:34:2b:b0:18:72:66:4b: 02:42:33:ff -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2ftXGylfMeB6JgggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk NjNhZGI0YzgtN2QzZC00ZTgxLWE4OGYtZWFmMmY5NjllMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+IN9jU0LXNrf7VzLP3GqVUfly+siqgH0gaK 6JpA7OXkR9jlHEOgRdb7U9gL5oWV7deaV70flZyta/9OOC5ED8aAqfSh2dWUzxsK T/loaJ83ThJ3sJ4XDuv1GJOsO6fUCHRD8nMrxn+8kfNtjwMooNmLBwROElEQaRid 5OMGEBhF+ypYy0TSVmnIehtwomxZwDhtuxoPt72MunFQUaxv+YASYeLBlUfrUTS1 9fa8VINdwejQbGiaLy1LI8o6TfLSyNCWdRIRKPfVCJN5hmk0YP9klKBO726wRE7S bbDgcLtFjZjX5LMXusLPvzygMAWTR2DqdfcHgD6ePy19M5qqUwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJJapMGoDezmQkzAiK+AYeY4bIdYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNmYzNjA4YmYtM2Q3ZS0z OTQ2LWFkYzQtNWFiODM2ODE0NjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAEAEmAwQA EPACMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC4fsAssdNFAFAONgLnKymUFB8HoCZRIQ1c8BEv0pce+CXm+ Md3+J2nkTt66X7crkBnrfhRqNrrm5Ho+Qd09X7tx9XSnAQofW9g+sOCTF2CFykak 0RLB099R18K7RAnFBjmdyx8+wZLraQjIeGsjp0356rgpltOe4D4UfS3KMEsQhRBd weJTChhUZq4Z5Hv5dijYC/xI5nRFgWtjhPqN0rpbRvbelIKWkMzMVVcLzo/f4L11 nkbDJTpzMYEteBnz6D+GhpzJV9SsiOFJulUvCV5vcfRHcWr7SLcuH6D3kex0cKqV Z/3C+KA1S65jF1HGIlomSw+fNCuwGHJmSwJCM/8= -----END CERTIFICATE-----Generated at Wed Apr 29 18:35:56 2026 by rpki-client