$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/234bf583-c62d-31b3-9195-5968d7d37e95.roa File: 234bf583-c62d-31b3-9195-5968d7d37e95.roa (raw, json) Hash identifier: S9f2gQJw63wp4HjrWPXwnm0Y6lmrvPIPIi+7C0qPtBw= Subject key identifier: E8:C1:3E:99:42:C2:9A:8A:6F:F4:42:59:C7:1D:49:1D:53:58:56:44 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584DADAAD57D785B9785298A7280 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/234bf583-c62d-31b3-9195-5968d7d37e95.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 22149 IP address blocks: 16.7.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d5:7d:78:5b:97:85:29:8a:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=3dbe8e9b-bb82-4cdc-a293-2d8a03ce2b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:57:83:66:59:5c:3f:54:e7:8a:9d:31:12:af: de:70:7f:ee:dd:0c:29:e2:c7:d2:51:86:e2:f5:a1: 56:31:c0:52:2b:a6:72:b8:66:0a:ec:c1:bd:c8:59: f5:86:79:5a:a0:a4:78:cf:39:f1:d9:11:4e:78:d0: 32:58:31:85:67:db:5b:73:e1:0e:b3:74:2d:b0:9e: 94:9d:68:bf:bb:ea:29:d7:74:fe:ed:6a:37:e1:1f: e8:25:46:c9:40:83:85:83:5b:57:70:2e:40:45:ef: 17:5f:27:d7:ad:56:8d:b7:38:a7:28:17:ff:14:f7: b1:de:3a:d8:45:3f:cb:ff:d7:ca:2e:0a:2f:63:76: 85:aa:08:28:8b:4f:4e:56:1f:23:f8:f7:1e:bd:d0: 7e:cb:fa:89:43:fa:76:af:17:24:f4:35:71:86:64: 77:2a:41:b2:ae:46:3b:c7:dc:97:62:47:e9:3c:a0: 7f:ea:f6:92:da:40:d1:8f:69:72:f8:33:14:bc:96: 27:5d:c5:45:de:99:75:c8:3b:04:4e:06:67:db:54: 18:76:f5:69:e6:db:a4:11:8f:8f:ed:8b:bd:43:46: a2:60:98:9b:b8:db:2e:2e:cf:69:30:7d:12:b0:5c: ed:e1:53:ff:a2:94:5f:37:ed:31:05:24:7e:ab:57: 41:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C1:3E:99:42:C2:9A:8A:6F:F4:42:59:C7:1D:49:1D:53:58:56:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/234bf583-c62d-31b3-9195-5968d7d37e95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.7.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d0:c1:fd:bc:a7:f9:eb:b1:3e:92:6c:50:5d:03:c0:2d:71: b2:96:00:1c:56:39:24:55:f5:68:45:0b:eb:9b:96:7d:33:93: 17:3e:c6:64:78:2d:2a:f9:bb:18:62:8a:5d:46:77:d5:1a:27: 52:a6:58:88:b1:52:73:c7:c3:be:37:0e:98:d4:8d:e9:5d:25: 9b:40:f5:f4:bc:a4:74:56:05:4a:0b:bd:4d:1e:af:50:a8:62: 29:fa:34:cf:22:b6:51:6f:a3:ea:9f:5b:07:60:18:29:e0:17: 2d:c9:63:14:07:21:fd:5b:b7:9f:a5:06:5b:53:3a:98:50:42: 7c:5e:8f:30:4a:9f:13:7c:74:42:0a:50:b4:d3:1c:59:17:1f: 34:99:c0:26:a8:59:63:37:84:0d:54:e2:fb:3e:fc:5f:0f:32: a0:b9:ee:e6:fe:d3:85:70:77:df:58:ad:9f:9d:4b:76:cc:b2: 6d:3a:45:46:cf:2a:ca:d5:28:6b:e2:70:04:d2:31:d3:07:d9: 6f:b4:bd:68:99:12:53:fb:b5:60:ea:9a:59:6e:b5:e6:d4:44: 9a:a8:09:d3:f1:15:e2:77:98:b0:ee:15:c8:67:99:f1:e8:92: ed:43:dd:45:66:63:51:61:d8:0a:0a:b9:86:9e:29:85:91:35: 44:f8:20:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtV9eFuXhSmKcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk M2RiZThlOWItYmI4Mi00Y2RjLWEyOTMtMmQ4YTAzY2UyYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVeDZllcP1Tnip0xEq/ecH/u3Qwp4sfSUYbi 9aFWMcBSK6ZyuGYK7MG9yFn1hnlaoKR4zznx2RFOeNAyWDGFZ9tbc+EOs3QtsJ6U nWi/u+op13T+7Wo34R/oJUbJQIOFg1tXcC5ARe8XXyfXrVaNtzinKBf/FPex3jrY RT/L/9fKLgovY3aFqggoi09OVh8j+PcevdB+y/qJQ/p2rxck9DVxhmR3KkGyrkY7 x9yXYkfpPKB/6vaS2kDRj2ly+DMUvJYnXcVF3pl1yDsETgZn21QYdvVp5tukEY+P 7Yu9Q0aiYJibuNsuLs9pMH0SsFzt4VP/opRfN+0xBSR+q1dBDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjBPplCwpqKb/RCWccdSR1TWFZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvMjM0YmY1ODMtYzYyZC0z MWIzLTkxOTUtNTk2OGQ3ZDM3ZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCEAcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzQwf28p/nrsT6SbFBdA8AtcbKWABxWOSRV9WhFC+ubln0zkxc+xmR4 LSr5uxhiil1Gd9UaJ1KmWIixUnPHw743DpjUjeldJZtA9fS8pHRWBUoLvU0er1Co Yin6NM8itlFvo+qfWwdgGCngFy3JYxQHIf1bt5+lBltTOphQQnxejzBKnxN8dEIK ULTTHFkXHzSZwCaoWWM3hA1U4vs+/F8PMqC57ub+04Vwd99YrZ+dS3bMsm06RUbP KsrVKGvicATSMdMH2W+0vWiZElP7tWDqmllutebURJqoCdPxFeJ3mLDuFchnmfHo ku1D3UVmY1Fh2AoKuYaeKYWRNUT4IMo= -----END CERTIFICATE-----Generated at Wed May 13 07:09:36 2026 by rpki-client