$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/bcf02311-b955-3c25-82ad-94b36409fd5b.roa File: bcf02311-b955-3c25-82ad-94b36409fd5b.roa (raw, json) Hash identifier: gPQMVrwGsykDZ/0n+2hjxQ8iMxkDXhVjJxjj/FutFDw= Subject key identifier: 59:66:DC:BD:93:85:55:CB:8C:2D:4F:B3:14:AE:E5:88:74:1F:D1:38 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F1090DBA9620AA9E582C5E7E0 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/bcf02311-b955-3c25-82ad-94b36409fd5b.roa Signing time: Fri 04 Sep 2026 16:00:15 +0000 ROA not before: Fri 04 Sep 2026 16:00:15 +0000 ROA not after: Sun 29 Nov 2026 16:25:37 +0000 asID: 402947 IP address blocks: 16.5.12.0/24 maxlen: 24 16.5.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:90:db:a9:62:0a:a9:e5:82:c5:e7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 4 16:00:15 2026 GMT Not After : Nov 29 16:25:37 2026 GMT Subject: CN=7bc8a3cf-2085-40cd-a3a1-52889b33bc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:94:33:da:0c:ef:81:83:5b:49:36:94:8a:e6: c3:73:de:b0:8f:81:86:81:cd:21:ab:15:4a:44:6a: 0f:65:ac:71:2b:91:5d:8e:52:2e:6d:a5:22:06:87: b6:a7:e8:eb:9e:db:3c:f9:66:63:64:22:71:11:02: 55:ce:fc:15:b6:15:72:54:57:4e:fa:3e:ac:b8:85: 28:96:cc:16:1f:48:09:24:84:26:da:26:f6:49:57: 65:6f:36:2c:80:f3:6e:4d:01:f2:b0:5f:8b:8d:4b: 13:c8:74:45:68:72:7a:14:82:62:83:e7:90:50:e6: 60:3c:76:7a:50:93:50:a9:44:0b:9a:15:dd:40:87: 14:d8:c0:f4:12:26:69:6a:57:09:4c:f4:61:75:8c: ba:19:52:e8:95:b5:9f:fe:60:93:ef:b4:81:be:a4: e1:0c:b9:ec:d5:a7:90:98:eb:f4:c8:80:b6:84:7e: 94:c9:11:61:55:26:be:0c:c8:33:ab:69:f9:8e:8e: 46:7b:7c:4b:1f:4e:25:08:2e:e7:3b:f2:d0:75:d6: 06:26:0a:66:b1:c4:41:31:a6:0a:de:d3:43:9e:79: 13:43:c2:da:df:9d:61:c7:bf:7b:5a:bd:de:01:ad: dd:71:88:bb:a9:bd:e6:1c:d3:15:ec:04:cb:24:a2: e1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:66:DC:BD:93:85:55:CB:8C:2D:4F:B3:14:AE:E5:88:74:1F:D1:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/bcf02311-b955-3c25-82ad-94b36409fd5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.5.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:fd:a7:f2:e0:ac:ce:0c:9a:fd:b5:07:e9:f9:10:18:79:70: 69:3f:1d:f2:61:3c:6f:e8:64:2d:25:ba:3f:fd:4b:37:72:4b: 01:00:16:56:62:9a:8b:9d:1b:60:ef:01:5a:28:97:be:f0:1f: 41:a8:e1:82:b3:20:2c:e7:51:b9:e9:54:11:df:2a:94:8a:f0: 93:d9:25:86:a9:e7:e8:e0:31:03:27:9e:ef:48:7d:ee:78:3d: 74:16:fc:a2:97:12:2e:d7:4e:66:33:d4:98:89:a5:4a:f4:15: e4:9d:11:33:08:96:38:93:f4:3a:12:71:11:b1:71:6e:df:18: 08:ed:34:00:34:27:c5:bf:27:3f:1f:f3:73:82:86:1a:a8:d5: f7:dd:81:9e:5e:8c:38:16:75:9b:6e:f6:b6:19:16:53:90:2d: e3:33:f8:32:b6:6a:4c:09:c5:32:fe:60:a9:73:e7:03:d8:89: 31:79:9d:48:7a:36:ed:81:d3:b5:c6:3c:29:98:c9:6c:aa:d6: fc:c8:64:5d:5d:8c:40:f4:8c:6d:4d:d8:bf:0f:46:f2:c5:59: c7:56:11:03:23:0a:1b:e5:39:c5:b0:90:34:00:37:e0:68:b6: 71:7e:da:c0:23:5b:b0:ef:d1:c0:a7:48:09:46:54:71:1c:ca: 5d:3f:24:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QkNupYgqp5YLF5+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDkwNDE2MDAxNVoXDTI2MTEyOTE2MjUzN1owLzEtMCsGA1UEAxMk N2JjOGEzY2YtMjA4NS00MGNkLWEzYTEtNTI4ODliMzNiYzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJQz2gzvgYNbSTaUiubDc96wj4GGgc0hqxVK RGoPZaxxK5FdjlIubaUiBoe2p+jrnts8+WZjZCJxEQJVzvwVthVyVFdO+j6suIUo lswWH0gJJIQm2ib2SVdlbzYsgPNuTQHysF+LjUsTyHRFaHJ6FIJig+eQUOZgPHZ6 UJNQqUQLmhXdQIcU2MD0EiZpalcJTPRhdYy6GVLolbWf/mCT77SBvqThDLns1aeQ mOv0yIC2hH6UyRFhVSa+DMgzq2n5jo5Ge3xLH04lCC7nO/LQddYGJgpmscRBMaYK 3tNDnnkTQ8La351hx797Wr3eAa3dcYi7qb3mHNMV7ATLJKLhJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlm3L2ThVXLjC1PsxSu5Yh0H9E4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvYmNmMDIzMTEtYjk1NS0z YzI1LTgyYWQtOTRiMzY0MDlmZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBEAUMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/9p/LgrM4Mmv21B+n5EBh5cGk/HfJhPG/oZC0luj/9SzdySwEAFlZi moudG2DvAVool77wH0Go4YKzICznUbnpVBHfKpSK8JPZJYap5+jgMQMnnu9Ife54 PXQW/KKXEi7XTmYz1JiJpUr0FeSdETMIljiT9DoScRGxcW7fGAjtNAA0J8W/Jz8f 83OChhqo1ffdgZ5ejDgWdZtu9rYZFlOQLeMz+DK2akwJxTL+YKlz5wPYiTF5nUh6 Nu2B07XGPCmYyWyq1vzIZF1djED0jG1N2L8PRvLFWcdWEQMjChvlOcWwkDQAN+Bo tnF+2sAjW7Dv0cCnSAlGVHEcyl0/JL4= -----END CERTIFICATE-----Generated at Sun Sep 13 07:51:42 2026 by rpki-client