$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cfa8f1fd-2143-3cf3-a520-e5a30df387cc.roa File: cfa8f1fd-2143-3cf3-a520-e5a30df387cc.roa (raw, json) Hash identifier: FZLxs8kZqYO7hwE5k5OzOjgOCKvxrOYFPM9Sc1D5aJQ= Subject key identifier: FC:82:70:60:1F:F4:21:C0:3E:C1:3C:A8:D3:80:7C:46:89:7F:C7:6A Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E2BD1F53F20FA1A1213754F00 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cfa8f1fd-2143-3cf3-a520-e5a30df387cc.roa Signing time: Sun 14 Jun 2026 17:31:19 +0000 ROA not before: Sun 14 Jun 2026 17:31:19 +0000 ROA not after: Sun 30 Aug 2026 14:59:41 +0000 asID: 402276 IP address blocks: 16.216.12.0/24 maxlen: 24 16.217.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2b:d1:f5:3f:20:fa:1a:12:13:75:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jun 14 17:31:19 2026 GMT Not After : Aug 30 14:59:41 2026 GMT Subject: CN=69fb2688-676f-426e-94b2-304cd39a5502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6c:93:3e:61:f5:8d:01:5d:59:d7:02:ea:45: 7d:f4:c4:ac:11:bc:ad:96:53:a2:a3:bd:76:80:60: b1:b2:42:ce:79:a1:d4:f7:ff:0c:00:23:6e:c8:91: c0:7f:23:08:0c:28:7c:75:07:23:8e:6e:c3:df:04: 1b:00:48:61:0e:17:14:a6:cb:6b:98:a6:f1:b5:33: 98:e5:09:b6:77:63:21:e4:52:fc:45:0b:36:64:a5: 60:54:1a:6c:ac:72:be:bc:20:1c:a7:37:a7:f6:6f: 52:0f:da:41:8a:f9:8c:7e:fb:86:5d:30:72:41:f3: 77:b7:89:1d:c0:38:15:ea:63:95:2d:87:d5:1d:63: 90:84:b4:9b:84:00:2b:05:4e:c4:ec:f8:4d:13:89: a2:73:ef:1b:c4:5d:e2:7a:bb:c1:30:69:e4:58:d5: 79:25:4b:e9:f6:d8:91:81:71:06:76:f9:81:f2:09: eb:64:4d:e9:34:c4:d1:aa:d3:0c:ab:ff:57:38:51: a3:d8:51:07:a5:ca:c8:52:bf:08:f4:f8:06:b8:96: 7b:68:b3:48:fe:76:a2:86:99:7e:5c:d0:63:cb:3d: cc:3b:40:34:a5:26:38:43:80:40:e8:42:13:8d:59: 83:5c:fb:87:0d:b6:17:13:61:66:7a:3d:12:70:23: 57:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:82:70:60:1F:F4:21:C0:3E:C1:3C:A8:D3:80:7C:46:89:7F:C7:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cfa8f1fd-2143-3cf3-a520-e5a30df387cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.216.12.0/24 16.217.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:27:56:de:ac:62:c5:94:ef:8a:a6:b2:38:8c:36:18:fd:ac: be:7d:2f:1b:89:5a:40:22:3a:52:a0:9f:c8:b7:82:7b:0d:0f: e9:73:5d:d5:b6:6d:7f:08:7a:66:c3:ca:31:ad:99:a3:cf:a9: 55:9a:db:4f:2d:84:b9:05:0c:1c:f5:53:0d:30:09:fc:f4:4d: 10:15:e2:ab:96:80:ea:c0:94:bc:ac:e3:c1:2a:fd:7b:5e:69: a4:13:aa:21:a1:2d:c7:ea:d7:48:ba:bb:3b:65:45:33:9e:98: 84:c8:63:b2:a1:ce:ae:ba:15:5d:a4:dc:f9:70:9c:75:b9:d8: e8:cc:1b:e9:52:de:83:8c:3b:58:49:db:d4:b6:8b:02:80:92: bf:d2:a2:50:f7:bd:85:e4:16:13:95:8f:04:24:50:69:00:df: b2:f0:b9:37:f2:34:b6:bb:b9:b6:a1:55:fa:ae:a2:c1:99:09: 40:47:a1:79:a8:c5:fe:6e:b5:37:d0:75:f1:68:b4:30:d8:e3: f4:1c:6a:3c:b2:f0:15:f6:70:9c:81:97:1d:7a:8d:e9:da:7b: b5:07:32:71:2d:ce:40:03:4c:31:f5:be:11:7a:bb:5c:a1:37: 4b:68:b6:bd:f8:7f:61:5e:af:ea:83:08:6f:3c:98:36:51:09: ba:a4:b0:da -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4r0fU/IPoaEhN1TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDYxNDE3MzExOVoXDTI2MDgzMDE0NTk0MVowLzEtMCsGA1UEAxMk NjlmYjI2ODgtNjc2Zi00MjZlLTk0YjItMzA0Y2QzOWE1NTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWyTPmH1jQFdWdcC6kV99MSsEbytllOio712 gGCxskLOeaHU9/8MACNuyJHAfyMIDCh8dQcjjm7D3wQbAEhhDhcUpstrmKbxtTOY 5Qm2d2Mh5FL8RQs2ZKVgVBpsrHK+vCAcpzen9m9SD9pBivmMfvuGXTByQfN3t4kd wDgV6mOVLYfVHWOQhLSbhAArBU7E7PhNE4mic+8bxF3iervBMGnkWNV5JUvp9tiR gXEGdvmB8gnrZE3pNMTRqtMMq/9XOFGj2FEHpcrIUr8I9PgGuJZ7aLNI/naihpl+ XNBjyz3MO0A0pSY4Q4BA6EITjVmDXPuHDbYXE2Fmej0ScCNXgwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPyCcGAf9CHAPsE8qNOAfEaJf8dqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvY2ZhOGYxZmQtMjE0My0z Y2YzLWE1MjAtZTVhMzBkZjM4N2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAENgMAwQA ENl4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADQnVt6sYsWU74qmsjiMNhj9rL59LxuJWkAiOlKgn8i3gnsN D+lzXdW2bX8IembDyjGtmaPPqVWa208thLkFDBz1Uw0wCfz0TRAV4quWgOrAlLys 48Eq/XteaaQTqiGhLcfq10i6uztlRTOemITIY7Khzq66FV2k3PlwnHW52OjMG+lS 3oOMO1hJ29S2iwKAkr/SolD3vYXkFhOVjwQkUGkA37LwuTfyNLa7ubahVfquosGZ CUBHoXmoxf5utTfQdfFotDDY4/Qcajyy8BX2cJyBlx16jenae7UHMnEtzkADTDH1 vhF6u1yhN0totr34f2Fer+qDCG88mDZRCbqksNo= -----END CERTIFICATE-----Generated at Sun Jun 14 23:26:46 2026 by rpki-client