$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa File: 9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa (raw, json) Hash identifier: 1ztp+I2ZE0jQ4elAdvjal/0Qy3vWWpF/qJukMXOc9PY= Subject key identifier: C7:65:69:99:B2:73:4A:F2:D0:37:D9:9D:A1:E8:93:35:88:DA:A7:DC Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584D8EF565BADCDDB7D3D3A24A80 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 60410 IP address blocks: 16.10.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:65:ba:dc:dd:b7:d3:d3:a2:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=c3e8dfd0-d3ef-4854-bd26-345e8f37d124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:67:3c:09:34:14:f1:a2:2f:bc:47:62:6c:86: df:72:9a:8a:a5:af:14:9e:88:b9:ed:92:c6:1c:05: c7:18:64:1e:d7:0a:10:ab:ab:31:1b:f3:60:47:6e: 54:2b:95:1d:58:00:3d:2b:56:3b:2f:12:90:ac:61: 38:12:d4:84:ec:be:b8:63:00:b3:b0:8f:0b:8f:4e: f1:98:81:56:d6:f6:95:87:d6:9f:48:b7:68:4e:98: 0b:6b:d6:d8:f2:73:33:8a:da:19:3c:fa:7a:f1:3c: 23:53:0d:38:f2:f8:c5:e2:16:10:4c:f4:bb:fa:47: 6a:07:86:45:40:6e:42:58:4c:e5:a1:aa:43:e2:1f: 09:36:ba:0f:ff:32:e3:6d:38:d7:aa:a5:a3:b8:f5: c0:84:81:26:13:12:7b:fb:ab:03:03:d8:44:ed:6c: 5b:7b:d0:ac:c7:3a:b1:3e:14:f8:bf:b1:76:35:6f: 3a:ce:78:9a:d0:f1:b6:09:02:a2:95:c0:6b:21:e7: 95:ef:30:76:9d:f9:bd:97:d4:a3:70:e3:84:a4:da: 2d:9c:bc:a5:35:64:69:c1:1c:59:04:35:27:fd:10: 1e:7a:74:60:82:d6:df:64:3a:b8:dd:9a:d1:53:a6: 72:f8:9b:dc:e1:45:03:54:d3:f2:f1:35:5a:e7:40: b4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:65:69:99:B2:73:4A:F2:D0:37:D9:9D:A1:E8:93:35:88:DA:A7:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.10.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:dc:6d:36:68:d3:a9:a7:f1:5d:91:eb:39:1d:e1:43:dc:47: b1:cc:a3:b6:98:f6:fb:b7:51:07:3d:26:77:ab:02:83:00:0f: 32:45:ec:21:af:f6:45:ce:0f:f0:9d:fb:b9:1e:0a:96:c2:7a: 5c:f7:53:56:48:53:e3:fe:6f:e8:78:c3:75:fc:c1:6c:0a:dc: e7:89:24:78:9e:98:d1:ae:dc:b5:d0:e6:11:52:d7:20:67:08: 79:60:d1:c0:a9:06:c3:8e:fb:90:d0:89:a6:aa:2a:e9:b8:a6: 8d:33:92:c1:68:12:6c:a0:43:fb:36:f3:cf:a6:6d:01:86:d1: b8:72:c0:4c:c9:33:64:fb:cb:cd:cd:c0:a3:f3:c7:fa:1c:25: 81:a4:25:0a:66:85:99:bc:f9:91:93:2c:27:e2:2b:7f:dd:97: 7e:39:95:b5:24:5a:5f:bb:6b:8d:f0:80:a1:54:0b:aa:e7:89: 35:2e:97:88:90:eb:22:ce:18:48:2c:37:a3:e4:fe:cc:e2:28: a4:61:c6:67:6e:b2:10:c4:a8:6c:8d:10:47:4c:61:08:c5:71: ab:5e:0d:22:15:b7:21:02:95:3a:f6:cf:8e:05:41:f8:93:46: 2c:e4:b9:90:63:43:b5:13:30:2b:45:0f:92:83:38:92:e1:bc: 34:44:be:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WW63N2309OiSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YzNlOGRmZDAtZDNlZi00ODU0LWJkMjYtMzQ1ZThmMzdkMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimc8CTQU8aIvvEdibIbfcpqKpa8Unoi57ZLG HAXHGGQe1woQq6sxG/NgR25UK5UdWAA9K1Y7LxKQrGE4EtSE7L64YwCzsI8Lj07x mIFW1vaVh9afSLdoTpgLa9bY8nMzitoZPPp68TwjUw048vjF4hYQTPS7+kdqB4ZF QG5CWEzloapD4h8JNroP/zLjbTjXqqWjuPXAhIEmExJ7+6sDA9hE7Wxbe9Csxzqx PhT4v7F2NW86znia0PG2CQKilcBrIeeV7zB2nfm9l9SjcOOEpNotnLylNWRpwRxZ BDUn/RAeenRggtbfZDq43ZrRU6Zy+Jvc4UUDVNPy8TVa50C0tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdlaZmyc0ry0DfZnaHokzWI2qfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvOWIxOWMyYjgtNTQ4Yi0z NzE3LWI0YzItMjVmM2ZiNjUwYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDEAoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjcbTZo06mn8V2R6zkd4UPcR7HMo7aY9vu3UQc9JnerAoMADzJF7CGv 9kXOD/Cd+7keCpbCelz3U1ZIU+P+b+h4w3X8wWwK3OeJJHiemNGu3LXQ5hFS1yBn CHlg0cCpBsOO+5DQiaaqKum4po0zksFoEmygQ/s288+mbQGG0bhywEzJM2T7y83N wKPzx/ocJYGkJQpmhZm8+ZGTLCfiK3/dl345lbUkWl+7a43wgKFUC6rniTUul4iQ 6yLOGEgsN6Pk/sziKKRhxmdushDEqGyNEEdMYQjFcateDSIVtyEClTr2z44FQfiT RizkuZBjQ7UTMCtFD5KDOJLhvDREvuk= -----END CERTIFICATE-----Generated at Wed Apr 29 18:34:08 2026 by rpki-client