$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/af879eaa-b2c9-33b7-8219-e782fabad559.roa File: af879eaa-b2c9-33b7-8219-e782fabad559.roa (raw, json) Hash identifier: OUXUCfrHnviVoC6DEnICXEOSRyrteSz42R2y6pNCymE= Subject key identifier: 66:28:B8:B3:83:E0:E6:D4:F8:C5:10:B8:57:4B:32:18:36:75:AB:D4 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584EFF7786E5BDB39B256A745148 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/af879eaa-b2c9-33b7-8219-e782fabad559.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 402215 IP address blocks: 16.216.19.0/24 maxlen: 24 192.48.152.0/24 maxlen: 24 192.82.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:86:e5:bd:b3:9b:25:6a:74:51:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=02c978ce-f3f1-45b3-9dce-0319bafb567e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e0:0e:4c:22:b3:b8:84:33:0e:84:f6:64:53: 65:30:ad:0a:98:cb:49:f5:35:9e:03:bb:d1:78:25: 1d:05:31:9d:8a:70:6f:62:e2:ef:da:63:08:41:ca: 86:df:e6:44:8e:e9:cb:46:5a:bf:b1:ab:c9:df:a0: 5f:17:bf:60:a8:a3:8b:87:c5:d9:c8:de:61:6b:e8: a3:86:b0:ee:e5:de:90:cd:1e:e3:8c:bf:a3:bd:d3: 34:9e:2b:d8:dd:37:04:67:d6:18:77:8a:80:19:c3: 87:c1:d6:20:66:b8:07:c1:ea:7a:7b:47:48:dd:4d: fe:52:bd:57:22:84:e8:23:cc:f8:b3:0e:74:03:84: 51:6c:b5:b2:67:5d:58:4c:d9:73:09:4a:36:f2:89: 88:0b:e2:c2:b8:30:12:33:75:52:d2:58:19:f9:4e: 82:52:a3:62:ec:e5:0e:3b:50:b1:df:60:db:58:49: 74:ed:7a:8a:91:c5:b1:d4:f9:20:3d:87:81:ac:12: 21:87:3b:a7:f8:50:30:f1:8f:a7:9b:5d:e8:da:70: 23:0d:c8:32:d0:c2:75:07:60:dd:06:18:49:57:87: 67:0a:f4:01:a2:02:20:e4:40:5e:40:5b:40:23:af: 1d:80:40:60:dc:22:35:9f:fa:b3:51:ce:98:5a:73: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:28:B8:B3:83:E0:E6:D4:F8:C5:10:B8:57:4B:32:18:36:75:AB:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/af879eaa-b2c9-33b7-8219-e782fabad559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.216.19.0/24 192.48.152.0/24 192.82.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:40:93:0b:b9:84:5e:73:95:6b:96:02:46:e6:dd:b3:48:94: 4f:de:77:f0:0a:1f:44:7f:08:86:46:aa:f8:dc:fc:98:d1:5a: cf:fa:b5:7c:f4:87:12:df:d4:82:b5:c7:39:ee:c0:b4:82:b8: e2:fc:51:3e:1f:03:c6:67:08:e0:5f:90:01:e0:6b:ae:1f:49: ca:50:a0:a4:16:57:90:e7:4a:23:55:e7:f6:5d:b2:eb:73:f3: 23:f8:fe:2d:86:8a:26:26:3d:6a:40:7a:4e:31:13:a7:a5:75: c0:b2:95:9b:a2:06:fb:d6:9f:50:dd:5d:4e:60:2e:83:b7:bb: 1b:34:17:2e:4e:0a:b3:0b:30:0d:72:1b:8b:33:3d:e9:ee:8e: aa:56:cd:f0:2a:5c:67:7b:6b:9f:27:af:a7:e2:d7:a3:cb:de: ce:0e:b0:29:7d:cb:72:8d:ab:53:5a:79:56:ea:a2:cf:a0:7c: 41:d5:1a:51:de:6b:92:67:43:4c:69:8e:ca:c8:ba:d3:98:4a: 13:ef:50:ae:24:ae:9c:92:c8:43:4e:e5:53:60:c3:9d:da:d8: d0:6a:99:1b:a1:2f:d4:85:25:4b:b4:3e:61:ac:03:c0:f4:ff: fa:2f:90:50:8e:6b:71:96:bd:39:e8:c1:aa:c3:f1:89:d1:53: 64:f0:4f:d3 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE7/d4blvbObJWp0UUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk MDJjOTc4Y2UtZjNmMS00NWIzLTlkY2UtMDMxOWJhZmI1NjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuAOTCKzuIQzDoT2ZFNlMK0KmMtJ9TWeA7vR eCUdBTGdinBvYuLv2mMIQcqG3+ZEjunLRlq/savJ36BfF79gqKOLh8XZyN5ha+ij hrDu5d6QzR7jjL+jvdM0nivY3TcEZ9YYd4qAGcOHwdYgZrgHwep6e0dI3U3+Ur1X IoToI8z4sw50A4RRbLWyZ11YTNlzCUo28omIC+LCuDASM3VS0lgZ+U6CUqNi7OUO O1Cx32DbWEl07XqKkcWx1PkgPYeBrBIhhzun+FAw8Y+nm13o2nAjDcgy0MJ1B2Dd BhhJV4dnCvQBogIg5EBeQFtAI68dgEBg3CI1n/qzUc6YWnM/WQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGYouLOD4ObU+MUQuFdLMhg2davUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvYWY4NzllYWEtYjJjOS0z M2I3LTgyMTktZTc4MmZhYmFkNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAENgTAwQA wDCYAwQAwFLQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGRAkwu5hF5zlWuWAkbm3bNIlE/ed/AKH0R/CIZG qvjc/JjRWs/6tXz0hxLf1IK1xznuwLSCuOL8UT4fA8ZnCOBfkAHga64fScpQoKQW V5DnSiNV5/Zdsutz8yP4/i2GiiYmPWpAek4xE6eldcCylZuiBvvWn1DdXU5gLoO3 uxs0Fy5OCrMLMA1yG4szPenujqpWzfAqXGd7a58nr6fi16PL3s4OsCl9y3KNq1Na eVbqos+gfEHVGlHea5JnQ0xpjsrIutOYShPvUK4krpySyENO5VNgw53a2NBqmRuh L9SFJUu0PmGsA8D0//ovkFCOa3GWvTnowarD8YnRU2TwT9M= -----END CERTIFICATE-----Generated at Tue Sep 1 04:51:35 2026 by rpki-client