$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/ffe8e926-ed80-3c35-913e-02e1578dc1d6.roa File: ffe8e926-ed80-3c35-913e-02e1578dc1d6.roa (raw, json) Hash identifier: y23ZmedhWjVD1uyTRFrNNEfdJwV1RLIaQeMGWUdY3+Q= Subject key identifier: E2:23:27:A1:CD:7C:33:F6:8D:FE:3D:ED:AE:7D:95:EF:0A:E5:C2:1F Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E8D1308BAF03E978B629DD400 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/ffe8e926-ed80-3c35-913e-02e1578dc1d6.roa Signing time: Sun 19 Jul 2026 13:35:50 +0000 ROA not before: Sun 19 Jul 2026 13:35:50 +0000 ROA not after: Tue 29 Sep 2026 17:21:57 +0000 asID: 12083 IP address blocks: 16.216.216.0/24 maxlen: 24 16.217.100.0/22 maxlen: 24 16.217.104.0/22 maxlen: 24 16.217.108.0/22 maxlen: 24 16.217.112.0/22 maxlen: 24 16.217.217.0/24 maxlen: 24 136.162.148.0/22 maxlen: 24 136.162.152.0/22 maxlen: 24 136.162.156.0/22 maxlen: 24 136.162.160.0/22 maxlen: 24 136.162.240.0/22 maxlen: 24 136.162.244.0/22 maxlen: 24 136.162.252.0/22 maxlen: 24 161.114.64.0/22 maxlen: 24 161.114.140.0/22 maxlen: 24 161.114.144.0/22 maxlen: 24 161.114.148.0/22 maxlen: 24 161.114.152.0/22 maxlen: 24 161.114.156.0/22 maxlen: 24 161.114.160.0/22 maxlen: 24 161.114.208.0/22 maxlen: 24 192.26.60.0/22 maxlen: 24 192.26.64.0/24 maxlen: 24 192.26.65.0/24 maxlen: 24 192.26.66.0/24 maxlen: 24 192.26.67.0/24 maxlen: 24 192.26.76.0/22 maxlen: 24 192.26.80.0/23 maxlen: 24 192.48.153.0/24 maxlen: 24 192.82.162.0/23 maxlen: 24 192.82.176.0/21 maxlen: 24 192.132.112.0/24 maxlen: 24 192.132.113.0/24 maxlen: 24 192.132.114.0/24 maxlen: 24 192.132.115.0/24 maxlen: 24 192.132.116.0/24 maxlen: 24 192.132.117.0/24 maxlen: 24 192.132.118.0/24 maxlen: 24 192.132.119.0/24 maxlen: 24 192.132.120.0/24 maxlen: 24 192.132.121.0/24 maxlen: 24 192.132.122.0/24 maxlen: 24 192.132.123.0/24 maxlen: 24 192.132.124.0/22 maxlen: 24 198.29.82.0/24 maxlen: 24 198.29.83.0/24 maxlen: 24 198.29.84.0/24 maxlen: 24 198.29.85.0/24 maxlen: 24 198.29.86.0/23 maxlen: 24 198.29.88.0/24 maxlen: 24 198.29.89.0/24 maxlen: 24 198.29.90.0/24 maxlen: 24 198.29.91.0/24 maxlen: 24 198.29.92.0/24 maxlen: 24 198.29.93.0/24 maxlen: 24 198.29.94.0/24 maxlen: 24 198.29.95.0/24 maxlen: 24 199.74.32.0/20 maxlen: 24 199.74.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:13:08:ba:f0:3e:97:8b:62:9d:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jul 19 13:35:50 2026 GMT Not After : Sep 29 17:21:57 2026 GMT Subject: CN=a8d2e56c-a07b-4b02-83a8-501254c16422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:4e:a4:96:23:98:49:fb:f5:f1:ba:a9:c3: 7f:b4:5c:da:7b:22:0c:8e:0e:f3:0b:de:47:c3:12: 68:e2:77:6b:94:53:d7:d9:f6:2e:7d:87:98:48:e8: 25:a6:3c:eb:91:69:65:63:38:ff:15:be:06:c5:ce: bd:89:2b:7e:ba:d5:9e:91:7f:89:a8:4e:47:46:df: 24:f1:58:82:f4:a0:3d:f4:fe:c7:e1:95:f7:44:da: 16:95:d4:eb:6b:11:d2:a6:70:ae:e1:62:c1:b0:b4: 3f:20:e3:03:0b:32:e2:73:3b:15:df:18:e0:cf:6f: e8:6c:86:70:39:16:64:f9:1d:16:98:39:8b:a5:c9: 8f:3c:66:4a:62:2e:e4:1f:18:67:69:68:06:86:14: 9d:1e:1f:33:18:bf:c5:89:0a:56:ff:eb:65:4c:f6: 52:bd:8c:c6:e4:cc:57:67:26:44:09:14:38:28:b3: 9e:bc:2a:e8:15:ea:96:8a:39:1b:d5:2e:74:e8:d4: 23:45:2d:69:56:d3:9a:2e:8c:fa:54:16:47:1a:c4: 5b:05:e5:2b:e4:e4:68:3c:ed:ff:40:51:ee:71:d0: f1:2c:ff:56:db:fa:08:2f:50:5f:d5:f5:f4:72:f5: 7e:52:9b:ea:d4:cc:8d:70:1c:b1:03:e7:33:ca:8b: bf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:23:27:A1:CD:7C:33:F6:8D:FE:3D:ED:AE:7D:95:EF:0A:E5:C2:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/ffe8e926-ed80-3c35-913e-02e1578dc1d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.216.216.0/24 16.217.100.0-16.217.115.255 16.217.217.0/24 136.162.148.0-136.162.163.255 136.162.240.0/21 136.162.252.0/22 161.114.64.0/22 161.114.140.0-161.114.163.255 161.114.208.0/22 192.26.60.0-192.26.67.255 192.26.76.0-192.26.81.255 192.48.153.0/24 192.82.162.0/23 192.82.176.0/21 192.132.112.0/20 198.29.82.0-198.29.95.255 199.74.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a1:66:e2:e9:69:1c:b2:7c:78:ae:14:2a:33:72:b1:4a:a9: 86:33:b2:b5:88:b9:6f:53:7f:44:cf:0b:40:84:ce:46:c7:a2: aa:d9:ef:18:d9:29:4e:5c:cf:9c:7b:60:6f:09:01:88:65:d7: d5:56:cd:55:13:c7:90:d1:16:ac:bb:81:fd:dd:13:af:91:15: 8d:d6:8e:11:5a:c2:7b:73:82:01:00:c7:0d:49:c8:8a:6f:04: 66:b1:7d:7c:a2:cc:ed:8c:4e:d4:65:a7:1e:a4:9b:c7:0b:00: 35:c7:33:70:81:ba:35:ba:79:1c:15:35:3a:4c:a0:2e:7b:a4: 41:bb:2d:16:e8:b8:2c:47:78:5a:09:46:cb:65:58:43:56:f1: a1:4a:60:4f:75:09:01:c3:ae:8a:02:bc:4e:1f:f0:19:11:72: e6:9f:4b:de:4d:63:ae:85:6d:0f:77:d5:e4:da:88:c8:fe:19: 2a:9b:71:33:97:1c:3b:36:1f:e8:5c:90:d8:3f:5c:7d:79:42: 1c:46:4c:db:d3:08:f2:d2:15:40:82:f5:04:f7:bd:84:ac:b9: af:05:61:f6:8d:8a:c3:6c:84:d3:7c:6e:9a:1e:0d:68:1b:44: e2:e3:71:84:2a:cc:2f:47:59:50:5c:1a:f8:dc:53:55:9e:3d: 61:b7:7c:3f -----BEGIN CERTIFICATE----- MIIG2DCCBcCgAwIBAgIUAQ0Mn0MoWE6NEwi68D6Xi2Kd1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDcxOTEzMzU1MFoXDTI2MDkyOTE3MjE1N1owLzEtMCsGA1UEAxMk YThkMmU1NmMtYTA3Yi00YjAyLTgzYTgtNTAxMjU0YzE2NDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLlOpJYjmEn79fG6qcN/tFzaeyIMjg7zC95H wxJo4ndrlFPX2fYufYeYSOglpjzrkWllYzj/Fb4Gxc69iSt+utWekX+JqE5HRt8k 8ViC9KA99P7H4ZX3RNoWldTraxHSpnCu4WLBsLQ/IOMDCzLiczsV3xjgz2/obIZw ORZk+R0WmDmLpcmPPGZKYi7kHxhnaWgGhhSdHh8zGL/FiQpW/+tlTPZSvYzG5MxX ZyZECRQ4KLOevCroFeqWijkb1S506NQjRS1pVtOaLoz6VBZHGsRbBeUr5ORoPO3/ QFHucdDxLP9W2/oIL1Bf1fX0cvV+Upvq1MyNcByxA+czyou/xQIDAQABo4ID6jCC A+YwHQYDVR0OBBYEFOIjJ6HNfDP2jf497a59le8K5cIfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZmZlOGU5MjYtZWQ4MC0z YzM1LTkxM2UtMDJlMTU3OGRjMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAAQ 2NgwDAMEAhDZZAMEAhDZcAMEABDZ2TAMAwQCiKKUAwQCiKKgAwQDiKLwAwQCiKL8 AwQCoXJAMAwDBAKhcowDBAKhcqADBAKhctAwDAMEAsAaPAMEAsAaQDAMAwQCwBpM AwQBwBpQAwQAwDCZAwQBwFKiAwQDwFKwAwQEwIRwMAwDBAHGHVIDBAXGHUADBAXH SiAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAIqFm4ulpHLJ8eK4UKjNysUqphjOytYi5b1N/RM8LQITORsei qtnvGNkpTlzPnHtgbwkBiGXX1VbNVRPHkNEWrLuB/d0Tr5EVjdaOEVrCe3OCAQDH DUnIim8EZrF9fKLM7YxO1GWnHqSbxwsANcczcIG6Nbp5HBU1OkygLnukQbstFui4 LEd4WglGy2VYQ1bxoUpgT3UJAcOuigK8Th/wGRFy5p9L3k1jroVtD3fV5NqIyP4Z KptxM5ccOzYf6FyQ2D9cfXlCHEZM29MI8tIVQIL1BPe9hKy5rwVh9o2Kw2yE03xu mh4NaBtE4uNxhCrML0dZUFwa+NxTVZ49Ybd8Pw== -----END CERTIFICATE-----Generated at Tue Jul 21 03:35:11 2026 by rpki-client