$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/c21d2a74-278c-3cae-8149-c10a9165f6f5.roa File: c21d2a74-278c-3cae-8149-c10a9165f6f5.roa (raw, json) Hash identifier: iX8BZrCkiwTOd7cCNfKS+SUWOHou3B4dgx/+tmfp6Vs= Subject key identifier: E8:F0:B4:0C:B5:36:8F:D8:0B:3C:73:77:2A:5B:F7:87:C2:A5:6E:40 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E4794392444535D45C8DD0900 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/c21d2a74-278c-3cae-8149-c10a9165f6f5.roa Signing time: Wed 24 Jun 2026 16:09:33 +0000 ROA not before: Wed 24 Jun 2026 16:09:33 +0000 ROA not after: Tue 22 Sep 2026 16:09:33 +0000 asID: 219467 IP address blocks: 16.5.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:47:94:39:24:44:53:5d:45:c8:dd:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jun 24 16:09:33 2026 GMT Not After : Sep 22 16:09:33 2026 GMT Subject: CN=142ba203-fbca-4b6d-886f-63d8d92a6fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4d:2e:2c:e7:57:24:36:5c:f1:92:1c:14:cf: ad:ca:b4:a1:30:2b:91:9e:1b:39:ac:4c:2b:a2:95: 00:83:38:2b:5f:13:ca:62:ea:6c:34:fd:36:94:08: ee:e6:e2:39:0a:ca:fc:b3:ab:2c:ec:d5:0e:3e:6e: 90:6a:a1:62:27:1e:ff:6d:a6:3c:15:72:ec:97:a3: e8:9d:aa:3b:3d:e3:35:b4:3a:01:41:7e:53:f0:ed: a5:d8:47:35:f6:26:fc:5b:92:72:b3:a0:9f:03:fe: 8a:ff:52:97:68:bc:44:fa:97:c4:d6:b1:ec:a8:c5: 29:be:0b:96:cf:38:d1:e0:7a:33:26:18:1c:7d:47: fd:54:ef:90:66:94:9e:c8:fd:19:39:76:1f:0f:4d: 0b:7c:19:d4:dd:d7:64:69:ae:08:a6:84:8e:5c:29: cb:fe:61:53:3a:90:19:25:52:ab:3a:cf:28:88:93: 02:d7:38:0f:e8:fe:40:d2:d0:b5:b1:ec:2c:04:dc: 77:6d:f8:d6:0b:29:24:0f:5f:bc:4d:3d:63:08:09: 32:d6:01:e7:33:ab:29:59:39:35:92:6c:41:5b:b6: c6:49:e0:ab:a1:62:01:da:99:22:5f:d9:13:ab:25: f4:41:7c:3a:2a:46:e2:ef:2b:f9:b9:4a:57:a0:37: ee:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F0:B4:0C:B5:36:8F:D8:0B:3C:73:77:2A:5B:F7:87:C2:A5:6E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/c21d2a74-278c-3cae-8149-c10a9165f6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.5.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:06:73:9c:b0:90:40:5b:5e:e3:07:32:12:e4:d2:bb:55:18: 01:a3:f3:a6:62:72:29:df:92:ff:27:b1:1c:c0:05:b2:bb:8c: 60:d1:f7:99:ee:fb:e7:84:65:52:11:f6:41:ed:aa:8d:34:06: 1e:ed:3a:fb:ad:08:a3:a2:3f:a9:28:2a:4d:cb:9e:30:42:01: 7f:fc:d5:92:ec:b4:54:a3:56:f2:51:09:e4:8c:76:d2:3d:22: b2:83:8e:f4:b3:a0:6c:01:f9:38:88:b6:97:4c:3d:d9:9f:24: 86:f2:4b:3e:0b:76:9b:36:16:08:e1:34:00:45:99:66:5f:68: 8f:66:d2:d5:00:d7:ab:b4:e1:ac:c4:14:d5:97:84:7e:7b:b3: a5:c3:01:df:13:38:a6:80:69:5b:97:aa:f4:a5:d0:6d:15:16: 52:a7:c4:9f:c9:3d:6b:7f:7f:b9:fa:68:e8:da:82:90:5c:c4: 40:7a:8e:14:31:f1:bd:33:af:c5:82:23:ab:bb:56:9b:06:17: 61:39:17:ce:41:b3:08:c6:b3:a2:d6:57:51:c5:71:f3:fa:e6: cc:4e:65:40:6a:58:c0:ac:ef:18:84:41:98:62:1c:a2:2b:47: de:72:4c:38:0e:e0:4c:e7:95:55:64:78:d6:e6:5b:2d:69:ec: dd:1b:d3:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5HlDkkRFNdRcjdCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDYyNDE2MDkzM1oXDTI2MDkyMjE2MDkzM1owLzEtMCsGA1UEAxMk MTQyYmEyMDMtZmJjYS00YjZkLTg4NmYtNjNkOGQ5MmE2ZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE0uLOdXJDZc8ZIcFM+tyrShMCuRnhs5rEwr opUAgzgrXxPKYupsNP02lAju5uI5Csr8s6ss7NUOPm6QaqFiJx7/baY8FXLsl6Po nao7PeM1tDoBQX5T8O2l2Ec19ib8W5Jys6CfA/6K/1KXaLxE+pfE1rHsqMUpvguW zzjR4HozJhgcfUf9VO+QZpSeyP0ZOXYfD00LfBnU3ddkaa4IpoSOXCnL/mFTOpAZ JVKrOs8oiJMC1zgP6P5A0tC1sewsBNx3bfjWCykkD1+8TT1jCAky1gHnM6spWTk1 kmxBW7bGSeCroWIB2pkiX9kTqyX0QXw6Kkbi7yv5uUpXoDfugwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjwtAy1No/YCzxzdypb94fCpW5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvYzIxZDJhNzQtMjc4Yy0z Y2FlLTgxNDktYzEwYTkxNjVmNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBEAWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcGc5ywkEBbXuMHMhLk0rtVGAGj86Zicinfkv8nsRzABbK7jGDR95nu ++eEZVIR9kHtqo00Bh7tOvutCKOiP6koKk3LnjBCAX/81ZLstFSjVvJRCeSMdtI9 IrKDjvSzoGwB+TiItpdMPdmfJIbySz4Ldps2FgjhNABFmWZfaI9m0tUA16u04azE FNWXhH57s6XDAd8TOKaAaVuXqvSl0G0VFlKnxJ/JPWt/f7n6aOjagpBcxEB6jhQx 8b0zr8WCI6u7VpsGF2E5F85BswjGs6LWV1HFcfP65sxOZUBqWMCs7xiEQZhiHKIr R95yTDgO4EznlVVkeNbmWy1p7N0b0/Q= -----END CERTIFICATE-----Generated at Mon Jul 13 12:48:10 2026 by rpki-client