$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/a627f048-e576-32bf-95b7-cf8ffbb7b95e.roa File: a627f048-e576-32bf-95b7-cf8ffbb7b95e.roa (raw, json) Hash identifier: OAaAy0ci7wbQ3AtYXTdSyRod9vGLBC+Vc9525t/dSC4= Subject key identifier: 7E:CA:7E:19:48:49:A7:28:85:46:14:82:EC:F2:44:5D:BE:FE:43:B5 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584ED6FC815595091E75B3F01600 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/a627f048-e576-32bf-95b7-cf8ffbb7b95e.roa Signing time: Sat 15 Aug 2026 01:00:12 +0000 ROA not before: Sat 15 Aug 2026 01:00:12 +0000 ROA not after: Fri 13 Nov 2026 02:00:12 +0000 asID: 402343 IP address blocks: 16.217.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d6:fc:81:55:95:09:1e:75:b3:f0:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Aug 15 01:00:12 2026 GMT Not After : Nov 13 02:00:12 2026 GMT Subject: CN=d29daed2-0f47-4487-a270-790d071214c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:2b:e8:5f:24:8d:df:c2:96:b5:ac:2d:d0: 36:27:dd:48:28:e8:2b:f9:52:57:24:ce:26:ca:af: 00:43:ae:1f:d4:f5:98:cd:a8:cd:34:aa:1c:ec:86: e4:7d:0e:46:fc:a4:02:01:b8:6f:ed:84:7c:bb:c9: 40:84:a3:12:08:fc:b2:97:10:6e:dd:a4:86:39:19: da:af:9e:17:93:25:09:ac:32:1e:58:7b:85:b7:6f: 8c:d9:cb:85:62:f4:42:9e:65:4d:3b:82:17:4a:7b: a7:61:e3:49:ce:16:7a:e7:a5:91:73:b3:36:73:5d: 82:a1:26:dd:28:6a:0c:9d:7c:fa:f4:ee:4b:ab:e0: 5c:78:25:55:1c:e3:e7:7d:b8:44:80:ff:fb:a9:4d: e9:01:df:67:8b:ef:9c:cb:42:e7:73:23:d3:d7:0f: 83:9a:d3:23:8c:90:d1:23:ff:b6:b9:35:02:9d:e3: 79:f2:43:f2:cf:d9:38:47:68:20:2e:66:9b:08:2c: 2a:77:52:8f:f6:b9:48:7d:e5:e9:7f:7e:a5:87:10: 26:94:26:c5:9c:62:42:70:26:a9:64:f2:31:40:60: 4f:32:58:67:99:22:9b:c2:f2:d7:20:f6:0c:e4:65: 0b:19:02:0e:01:6e:ec:2b:da:77:d6:7a:77:cf:38: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CA:7E:19:48:49:A7:28:85:46:14:82:EC:F2:44:5D:BE:FE:43:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/a627f048-e576-32bf-95b7-cf8ffbb7b95e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.217.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:66:b4:95:85:f1:c6:f3:10:2e:d5:c1:54:7b:52:59:a4:d4: 25:e9:40:ab:06:ff:d6:18:0f:ba:6a:2f:3c:31:eb:30:a0:e6: ac:e7:b7:de:60:3a:0e:b2:77:82:f8:8c:be:98:ca:57:f0:b8: 3b:fe:21:0c:40:f2:0b:d5:9f:60:d4:37:d3:fb:19:fa:e2:58: 6e:95:12:73:e7:9e:7e:67:da:09:9b:d8:5c:fb:b2:80:9e:4f: 81:b4:cf:46:39:f5:87:86:62:ff:22:b7:c3:e1:0c:6d:8d:69: 0a:25:cf:34:bd:b0:ce:f7:fc:5e:89:39:82:6c:7f:00:69:38: 46:12:1c:3c:67:6e:15:1e:d1:38:8f:83:43:45:f4:b8:a7:59: 23:a0:cf:7f:7d:21:20:45:ef:4f:cf:6e:bb:29:50:58:85:51: d4:ef:81:08:3c:04:65:7c:1b:c7:a2:f0:bf:8a:d6:22:5f:df: fa:88:eb:c9:bd:fd:9f:24:55:12:85:6a:7f:70:f0:3d:2f:65: 3c:e2:d1:e8:7a:54:3f:fe:18:de:a2:14:77:b6:95:66:74:31: 5d:cd:1a:75:b0:b6:1c:61:21:26:e8:a8:bd:8c:54:98:a6:73: b3:66:29:64:fe:34:5b:a7:c4:bd:65:e7:c1:14:07:97:34:ff: 27:05:65:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7W/IFVlQkedbPwFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDgxNTAxMDAxMloXDTI2MTExMzAyMDAxMlowLzEtMCsGA1UEAxMk ZDI5ZGFlZDItMGY0Ny00NDg3LWEyNzAtNzkwZDA3MTIxNGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAMr6F8kjd/ClrWsLdA2J91IKOgr+VJXJM4m yq8AQ64f1PWYzajNNKoc7IbkfQ5G/KQCAbhv7YR8u8lAhKMSCPyylxBu3aSGORna r54XkyUJrDIeWHuFt2+M2cuFYvRCnmVNO4IXSnunYeNJzhZ656WRc7M2c12CoSbd KGoMnXz69O5Lq+BceCVVHOPnfbhEgP/7qU3pAd9ni++cy0LncyPT1w+DmtMjjJDR I/+2uTUCneN58kPyz9k4R2ggLmabCCwqd1KP9rlIfeXpf36lhxAmlCbFnGJCcCap ZPIxQGBPMlhnmSKbwvLXIPYM5GULGQIOAW7sK9p31np3zzjJHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7KfhlISacohUYUguzyRF2+/kO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvYTYyN2YwNDgtZTU3Ni0z MmJmLTk1YjctY2Y4ZmZiYjdiOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAENnaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdmtJWF8cbzEC7VwVR7Ulmk1CXpQKsG/9YYD7pqLzwx6zCg5qznt95g Og6yd4L4jL6YylfwuDv+IQxA8gvVn2DUN9P7GfriWG6VEnPnnn5n2gmb2Fz7soCe T4G0z0Y59YeGYv8it8PhDG2NaQolzzS9sM73/F6JOYJsfwBpOEYSHDxnbhUe0TiP g0NF9LinWSOgz399ISBF70/PbrspUFiFUdTvgQg8BGV8G8ei8L+K1iJf3/qI68m9 /Z8kVRKFan9w8D0vZTzi0eh6VD/+GN6iFHe2lWZ0MV3NGnWwthxhISboqL2MVJim c7NmKWT+NFunxL1l58EUB5c0/ycFZZE= -----END CERTIFICATE-----Generated at Wed Aug 26 22:13:54 2026 by rpki-client