$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/04487a27-9f1d-3506-a1e2-8d221738234c.roa File: 04487a27-9f1d-3506-a1e2-8d221738234c.roa (raw, json) Hash identifier: WRFzYhsow+Qt8Xg0rvqhEuGbalcpliI2oRkCelKD3jA= Subject key identifier: 73:EE:F9:14:D3:1C:58:BE:65:E6:2A:EB:25:87:C9:74:81:45:98:67 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E7634F3CD359AEEE1FB674F90 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/04487a27-9f1d-3506-a1e2-8d221738234c.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 20096 IP address blocks: 16.7.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:f3:cd:35:9a:ee:e1:fb:67:4f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=a5d79de5-45f4-4414-afb0-8d6c15405b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:aa:33:57:05:33:58:f3:ee:b9:8c:40:e9:92: 88:a4:40:29:36:87:79:96:fd:06:0a:3d:41:02:d5: 9f:17:7b:c8:b8:6f:0c:4e:70:ad:44:c7:3a:d8:88: 34:f9:ba:3d:e6:92:af:13:6a:76:60:23:8b:59:f8: e9:92:b0:8b:9f:c7:24:55:86:28:a2:8c:58:71:d4: ec:df:e0:b5:eb:28:51:3d:bb:47:2d:05:c3:6f:41: 6a:9d:eb:25:9f:a8:2e:24:74:d7:2b:0f:29:fb:48: 68:c4:e6:26:87:a8:ec:6b:ca:2a:5c:39:6e:2c:42: 67:d3:85:b8:a5:15:25:40:44:ca:ce:53:b9:76:05: a8:0c:14:96:ec:2c:41:a7:85:61:44:52:19:6d:44: e1:3d:ff:a4:62:2e:44:84:b6:40:dc:9f:b6:d1:64: 68:b0:aa:5d:76:c5:fa:7a:2c:ca:4a:2e:73:ae:bb: 31:28:c6:16:a4:51:e4:4b:52:4e:45:ac:f2:45:b1: 8b:43:18:1f:07:de:28:90:35:a4:bd:21:ad:d2:23: 52:ed:68:cf:c5:c9:41:5e:49:10:78:85:8d:cb:34: 64:5c:e6:fa:25:3e:08:72:a6:4f:e2:fb:92:24:6b: 5d:29:26:5c:94:19:40:11:59:6b:88:09:06:00:2d: c0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EE:F9:14:D3:1C:58:BE:65:E6:2A:EB:25:87:C9:74:81:45:98:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/04487a27-9f1d-3506-a1e2-8d221738234c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.7.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:64:f9:67:bc:5e:6a:42:e9:39:07:8e:2a:12:7c:0d:8e:44: be:ec:86:82:d9:41:f7:20:d0:75:f2:96:14:4f:09:fa:73:62: 79:d5:c5:b0:08:ba:ee:a3:e1:4c:0c:83:e7:23:9f:c6:5a:41: 01:a2:3a:1c:6b:81:7f:0c:88:9c:67:b8:03:9c:4e:7a:86:c0: b0:ae:02:49:78:fd:9b:00:1c:09:1c:1b:f6:73:f2:22:3f:73: d4:0a:94:18:58:f5:9a:80:57:c7:41:8f:b4:6e:cd:83:24:46: 14:5c:75:08:20:eb:4d:05:c1:09:68:3e:2b:db:69:aa:4b:a3: 5e:4e:22:1b:7d:bb:58:cf:80:e1:bf:a0:66:df:e8:07:bf:18: 4f:a7:d5:2f:ef:9f:e4:dc:b6:08:5c:1f:e4:54:be:62:0f:4b: a6:73:eb:db:0f:d3:d7:b0:29:cc:de:f1:3d:3f:16:e8:e8:a0: e5:a9:ca:fc:c8:7d:ab:96:ea:fb:78:8c:96:23:f5:7f:00:6b: 20:2a:63:54:9a:63:4b:a2:46:cb:ff:4b:f5:cf:16:5a:b3:2a: be:73:ac:0e:d9:ac:5a:75:16:31:b8:04:85:f9:60:ac:68:d6: 7d:af:ff:50:ff:a2:48:7d:05:f2:79:c3:85:f4:99:c3:46:d4: 64:42:7b:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NPPNNZru4ftnT5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YTVkNzlkZTUtNDVmNC00NDE0LWFmYjAtOGQ2YzE1NDA1YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKozVwUzWPPuuYxA6ZKIpEApNod5lv0GCj1B AtWfF3vIuG8MTnCtRMc62Ig0+bo95pKvE2p2YCOLWfjpkrCLn8ckVYYoooxYcdTs 3+C16yhRPbtHLQXDb0Fqnesln6guJHTXKw8p+0hoxOYmh6jsa8oqXDluLEJn04W4 pRUlQETKzlO5dgWoDBSW7CxBp4VhRFIZbUThPf+kYi5EhLZA3J+20WRosKpddsX6 eizKSi5zrrsxKMYWpFHkS1JORazyRbGLQxgfB94okDWkvSGt0iNS7WjPxclBXkkQ eIWNyzRkXOb6JT4IcqZP4vuSJGtdKSZclBlAEVlriAkGAC3AcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPu+RTTHFi+ZeYq6yWHyXSBRZhnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvMDQ0ODdhMjctOWYxZC0z NTA2LWExZTItOGQyMjE3MzgyMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCEAcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxk+We8XmpC6TkHjioSfA2ORL7shoLZQfcg0HXylhRPCfpzYnnVxbAI uu6j4UwMg+cjn8ZaQQGiOhxrgX8MiJxnuAOcTnqGwLCuAkl4/ZsAHAkcG/Zz8iI/ c9QKlBhY9ZqAV8dBj7RuzYMkRhRcdQgg600FwQloPivbaapLo15OIht9u1jPgOG/ oGbf6Ae/GE+n1S/vn+TctghcH+RUvmIPS6Zz69sP09ewKcze8T0/FujooOWpyvzI fauW6vt4jJYj9X8AayAqY1SaY0uiRsv/S/XPFlqzKr5zrA7ZrFp1FjG4BIX5YKxo 1n2v/1D/okh9BfJ5w4X0mcNG1GRCe48= -----END CERTIFICATE-----Generated at Thu Jul 23 23:06:57 2026 by rpki-client