$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa File: de977a80-b422-3e83-bc77-25aec313c480.roa (raw, json) Hash identifier: m+dXJKRkA0W7C2LF9wxqvVzbvjlmtY8qh2fZmArRWq8= Subject key identifier: CA:0D:3E:8F:B4:8D:C4:0B:27:87:95:E9:85:B5:62:53:46:3E:4C:65 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584D9FB57460E2219BAA5FA6F440 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 8635 IP address blocks: 16.1.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:74:60:e2:21:9b:aa:5f:a6:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=089dd552-e49e-4609-ae53-19c8e89900b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0c:f5:c7:b3:72:93:c9:fa:cc:6c:30:f0:d5: fa:19:dd:41:31:6d:2a:1d:2e:db:1c:dc:40:0b:a7: 87:b9:08:95:b6:6a:fb:b1:9c:bb:60:2a:3c:38:ea: 60:35:d3:a0:ea:ac:73:48:6f:d5:19:58:22:b2:c4: 82:ca:29:c3:c7:21:4b:72:66:0c:f7:aa:7a:f8:b1: 7f:6e:35:8e:49:98:72:4a:74:56:d3:d5:0b:f2:47: f9:c7:20:fc:56:36:5d:8c:2c:73:7d:d7:a0:2b:4b: d5:bc:a7:37:2e:98:3a:a1:e0:96:56:7b:9e:2f:29: db:62:94:8e:d1:ff:5c:ff:3e:ce:1d:9a:91:3c:7e: 0e:81:9b:df:11:51:6f:48:32:0d:1a:98:6c:8e:51: 59:71:56:a5:d8:87:e0:b3:da:fc:e8:ab:da:6b:17: d6:d0:a8:99:8c:05:0e:10:84:44:d0:f5:69:e3:ee: af:1b:d7:96:97:24:6a:78:2d:ab:a9:df:50:8b:21: 0e:67:53:7e:d8:2f:e1:de:98:1a:6a:0e:ca:01:5d: cb:d9:61:a5:8d:36:ee:3b:b7:15:ca:a0:21:58:d7: 46:22:1a:fa:0a:10:90:c0:a4:49:f3:88:71:e5:a5: 98:5e:21:16:90:84:f2:04:bf:be:92:96:0a:64:4f: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0D:3E:8F:B4:8D:C4:0B:27:87:95:E9:85:B5:62:53:46:3E:4C:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.1.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:21:8d:70:1e:e5:2b:14:90:7b:26:90:6f:58:85:d0:63:83: 3e:4f:14:41:cd:7b:39:26:23:36:31:44:ca:d5:85:68:50:15: ea:6f:fa:49:95:f4:59:97:c5:19:41:0a:9b:01:d1:ce:81:eb: cc:28:38:45:b8:8e:be:c9:d7:89:94:ee:8e:43:f7:be:4a:e2: 17:88:7c:ff:00:7b:a1:24:32:24:3a:7f:b2:14:83:27:67:73: eb:05:08:ba:1f:07:35:e1:db:40:73:0a:51:20:94:e1:7b:7f: f1:50:63:7c:a3:15:72:8a:a0:ad:f8:a3:c1:9a:17:51:2f:8e: 66:05:ee:31:7d:83:68:80:de:0b:53:32:79:23:69:d3:ad:e3: 03:42:f2:57:40:3c:7e:43:f0:84:9c:2b:72:1e:96:44:c2:78: d0:d7:c5:dc:b9:63:a9:39:a0:58:a5:9c:7d:51:d8:0c:55:04: 6d:f2:52:29:8d:f0:35:d8:4c:ac:e7:0c:15:01:09:bc:ed:d1: 33:ef:05:98:1e:09:87:fd:d4:9a:d8:49:72:d6:b8:64:81:7f: 62:8c:2c:f2:d2:60:b3:a1:4c:f0:4d:75:ef:d5:f9:24:a7:26: e0:6c:f4:cb:41:9e:04:03:e7:f1:8c:93:bc:66:72:10:76:56: 50:7e:8c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXRg4iGbql+m9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk MDg5ZGQ1NTItZTQ5ZS00NjA5LWFlNTMtMTljOGU4OTkwMGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQz1x7Nyk8n6zGww8NX6Gd1BMW0qHS7bHNxA C6eHuQiVtmr7sZy7YCo8OOpgNdOg6qxzSG/VGVgissSCyinDxyFLcmYM96p6+LF/ bjWOSZhySnRW09UL8kf5xyD8VjZdjCxzfdegK0vVvKc3Lpg6oeCWVnueLynbYpSO 0f9c/z7OHZqRPH4OgZvfEVFvSDINGphsjlFZcVal2Ifgs9r86KvaaxfW0KiZjAUO EIRE0PVp4+6vG9eWlyRqeC2rqd9QiyEOZ1N+2C/h3pgaag7KAV3L2WGljTbuO7cV yqAhWNdGIhr6ChCQwKRJ84hx5aWYXiEWkITyBL++kpYKZE/cgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoNPo+0jcQLJ4eV6YW1YlNGPkxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZGU5NzdhODAtYjQyMi0z ZTgzLWJjNzctMjVhZWMzMTNjNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAEAEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0hjXAe5SsUkHsmkG9YhdBjgz5PFEHNezkmIzYxRMrVhWhQFepv+kmV 9FmXxRlBCpsB0c6B68woOEW4jr7J14mU7o5D975K4heIfP8Ae6EkMiQ6f7IUgydn c+sFCLofBzXh20BzClEglOF7f/FQY3yjFXKKoK34o8GaF1EvjmYF7jF9g2iA3gtT MnkjadOt4wNC8ldAPH5D8IScK3IelkTCeNDXxdy5Y6k5oFilnH1R2AxVBG3yUimN 8DXYTKznDBUBCbzt0TPvBZgeCYf91JrYSXLWuGSBf2KMLPLSYLOhTPBNde/V+SSn JuBs9MtBngQD5/GMk7xmchB2VlB+jPI= -----END CERTIFICATE-----Generated at Wed Apr 29 18:34:41 2026 by rpki-client