$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d10abdc5-467e-3ce9-8687-a6056b6b135a.roa File: d10abdc5-467e-3ce9-8687-a6056b6b135a.roa (raw, json) Hash identifier: H6uZpjrhs5CKw8sPMV36BZ9ozofUKxGfiP37TQekr/E= Subject key identifier: AC:B8:78:EB:05:42:BD:61:B5:F6:C0:9D:F3:BE:DA:CC:CC:53:9E:1E Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E2BCE06C7DB2267F7161AAF80 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d10abdc5-467e-3ce9-8687-a6056b6b135a.roa Signing time: Sun 14 Jun 2026 17:23:23 +0000 ROA not before: Sun 14 Jun 2026 17:23:23 +0000 ROA not after: Sun 30 Aug 2026 21:00:37 +0000 asID: 209888 IP address blocks: 16.216.22.0/24 maxlen: 24 16.217.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2b:ce:06:c7:db:22:67:f7:16:1a:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jun 14 17:23:23 2026 GMT Not After : Aug 30 21:00:37 2026 GMT Subject: CN=1b66fc43-4b15-4bd5-a581-b251e1175a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:12:cf:0e:cb:dd:96:23:57:ed:a3:6b:e7:80: 34:77:0e:d3:3e:e8:a1:60:ec:6f:c5:4a:32:57:5b: 89:30:03:bc:1c:db:8b:ca:ed:84:f6:4c:1c:12:cc: bb:9e:37:f3:19:7f:b2:6e:b9:01:72:0e:1b:28:fc: 9c:7f:ca:fc:51:33:30:3c:71:3d:3f:9a:ba:13:fd: 5b:85:8d:e4:3c:f0:74:86:ff:46:a4:bb:89:72:09: ca:74:96:7a:0c:fd:cb:63:6d:1a:57:ad:32:74:6e: dc:ca:e0:86:bb:cc:3d:c3:95:db:6d:f0:ef:2e:ba: c1:55:43:52:9c:b5:40:31:3d:a5:cf:eb:f8:13:71: 0b:70:78:a2:bf:bb:f5:0d:7e:88:fc:5c:31:f8:28: 8a:e4:d6:58:c5:b1:4b:b4:c8:42:2c:2c:44:a2:ba: e1:cc:e7:16:00:40:18:7c:a3:ef:41:a6:14:7d:be: 3c:4d:e8:dc:86:ea:a6:0f:5b:b8:5a:fb:ef:4e:85: b5:68:15:ca:a1:36:5a:12:54:5f:54:80:96:5c:6d: 1c:ea:3e:d1:73:b7:54:3d:e3:84:ed:83:6e:29:09: 47:01:31:a9:f7:88:c0:38:eb:3a:57:f3:b8:21:be: 59:19:e8:90:64:10:d6:f4:b0:5a:a2:b6:c5:47:f4: e0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B8:78:EB:05:42:BD:61:B5:F6:C0:9D:F3:BE:DA:CC:CC:53:9E:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d10abdc5-467e-3ce9-8687-a6056b6b135a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.216.22.0/24 16.217.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f0:6f:ba:29:63:6d:a3:cb:37:2d:98:6c:cb:c0:42:fb:73: 8b:85:03:64:af:90:52:1f:8d:92:bf:37:db:13:fa:ad:c1:22: aa:a8:b7:5e:9c:db:b5:85:18:14:6e:6c:e4:9d:55:e9:f5:75: e1:71:50:b2:f4:75:2a:d6:81:2c:85:a5:c0:4e:a3:d9:98:84: 7a:c0:84:fd:34:fb:9b:cc:c5:53:23:f5:26:88:78:84:b8:6f: 75:ec:7c:eb:14:5c:6e:8f:7e:3f:bc:1b:5a:2f:20:c1:79:f4: ef:0a:65:00:5a:a6:64:d3:29:51:db:4f:df:f7:00:79:f6:ad: ca:27:e1:47:d6:7b:b5:2d:61:ae:f7:92:a5:63:04:d3:f9:93: 47:51:9e:12:70:de:4e:e3:27:74:03:5b:d0:2b:be:a5:9a:ce: 87:90:68:bc:f7:92:e5:be:60:e5:28:73:84:e6:85:25:e2:a6: 0e:b1:2a:34:fe:47:89:2b:67:1f:56:90:a6:0a:bd:54:d5:28: f6:00:a9:95:47:8d:5a:8c:0d:0c:7f:bc:41:f3:a9:d4:3c:dd: 5e:6d:f4:ef:11:9f:d0:2c:ce:5a:93:e9:21:9d:2e:4b:56:fd: 86:77:7a:e3:74:90:83:f5:93:78:66:c0:32:44:da:ef:a2:9e: 85:6a:8f:cb -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4rzgbH2yJn9xYar4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDYxNDE3MjMyM1oXDTI2MDgzMDIxMDAzN1owLzEtMCsGA1UEAxMk MWI2NmZjNDMtNGIxNS00YmQ1LWE1ODEtYjI1MWUxMTc1YTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBLPDsvdliNX7aNr54A0dw7TPuihYOxvxUoy V1uJMAO8HNuLyu2E9kwcEsy7njfzGX+ybrkBcg4bKPycf8r8UTMwPHE9P5q6E/1b hY3kPPB0hv9GpLuJcgnKdJZ6DP3LY20aV60ydG7cyuCGu8w9w5XbbfDvLrrBVUNS nLVAMT2lz+v4E3ELcHiiv7v1DX6I/Fwx+CiK5NZYxbFLtMhCLCxEorrhzOcWAEAY fKPvQaYUfb48TejchuqmD1u4WvvvToW1aBXKoTZaElRfVICWXG0c6j7Rc7dUPeOE 7YNuKQlHATGp94jAOOs6V/O4Ib5ZGeiQZBDW9LBaorbFR/TgpQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKy4eOsFQr1htfbAnfO+2szMU54eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZDEwYWJkYzUtNDY3ZS0z Y2U5LTg2ODctYTYwNTZiNmIxMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAENgWAwQA ENmJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC/wb7opY22jyzctmGzLwEL7c4uFA2SvkFIfjZK/N9sT+q3B Iqqot16c27WFGBRubOSdVen1deFxULL0dSrWgSyFpcBOo9mYhHrAhP00+5vMxVMj 9SaIeIS4b3XsfOsUXG6Pfj+8G1ovIMF59O8KZQBapmTTKVHbT9/3AHn2rcon4UfW e7UtYa73kqVjBNP5k0dRnhJw3k7jJ3QDW9ArvqWazoeQaLz3kuW+YOUoc4TmhSXi pg6xKjT+R4krZx9WkKYKvVTVKPYAqZVHjVqMDQx/vEHzqdQ83V5t9O8Rn9AszlqT 6SGdLktW/YZ3euN0kIP1k3hmwDJE2u+inoVqj8s= -----END CERTIFICATE-----Generated at Sun Jun 14 23:27:15 2026 by rpki-client