$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5ba3de9b-c5ee-39a7-9e7e-34d16a3fe9c8.roa File: 5ba3de9b-c5ee-39a7-9e7e-34d16a3fe9c8.roa (raw, json) Hash identifier: t3WoJIxk6XjtW5jKDLY9VfLtzJJn/XlkTRYAkyI1VDY= Subject key identifier: 98:07:D0:F5:59:A3:66:88:5C:A7:02:13:59:60:F4:C5:33:01:38:9F Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584D465F95A9E8819E666D7A9100 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5ba3de9b-c5ee-39a7-9e7e-34d16a3fe9c8.roa Signing time: Tue 24 Mar 2026 13:00:41 +0000 ROA not before: Tue 24 Mar 2026 13:00:41 +0000 ROA not after: Mon 22 Jun 2026 13:00:41 +0000 asID: 1034 IP address blocks: 16.7.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:5f:95:a9:e8:81:9e:66:6d:7a:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Mar 24 13:00:41 2026 GMT Not After : Jun 22 13:00:41 2026 GMT Subject: CN=569e434a-d050-45a9-92c3-9826ed64f946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:3f:50:7a:f9:dc:fd:d0:52:36:53:c9:d6: 71:25:41:8e:c2:e6:f3:6e:71:4c:c6:5d:49:9f:28: 7e:5b:e3:0e:f9:d1:84:75:4e:36:91:be:d6:45:58: 6f:9c:54:3c:79:48:dc:ef:05:22:16:8b:29:fe:17: 6e:79:0d:00:67:78:ab:3e:cc:a8:ab:b3:f1:86:a4: e3:f5:69:54:7a:91:f9:cf:9b:63:1d:82:cf:89:c8: 90:45:b5:36:36:06:80:73:ba:a4:5e:b6:26:0e:d6: 72:72:36:2f:37:11:f1:8a:3e:82:07:c7:0f:98:c1: 86:07:b7:12:e8:8d:1f:85:55:81:89:03:0e:d1:7f: 2f:15:89:03:1c:65:05:77:2d:71:6c:75:d1:11:6b: 8b:c8:f9:2d:0b:97:cb:12:cd:03:ef:ba:43:dd:eb: c2:6f:35:bb:79:a8:60:45:7f:a4:33:14:50:81:fa: 3f:bb:3d:46:57:f6:41:11:12:16:be:41:f3:ed:a5: e5:0a:b9:2c:0f:fd:b9:c6:79:b9:97:68:4f:61:80: ea:ba:98:6f:2e:b6:73:aa:1c:9d:c7:44:d5:c0:9f: d2:18:3a:20:e5:15:a5:ad:a3:fb:1d:9b:14:ec:9a: 75:50:6d:bd:1f:0d:a1:2c:f2:45:9b:fe:57:60:a4: fd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:07:D0:F5:59:A3:66:88:5C:A7:02:13:59:60:F4:C5:33:01:38:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5ba3de9b-c5ee-39a7-9e7e-34d16a3fe9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.7.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c1:f2:5e:82:1a:2b:0f:92:fb:e8:ec:f4:14:6b:44:6c:0b: df:19:db:1f:f0:a0:aa:9d:76:21:56:57:86:bc:bf:39:22:23: b0:7e:55:f4:55:59:eb:d1:eb:3e:bb:08:e4:9a:e9:94:42:b6: 58:a2:de:d4:c2:f3:f5:5f:88:06:eb:64:63:cb:e9:1d:7c:83: 8c:0f:2f:25:15:7a:ac:e7:c3:25:fe:c0:d6:b2:3e:85:35:95: b8:57:82:65:73:84:3b:02:9a:44:a1:c7:27:97:4a:fa:5a:72: 6d:b2:c8:af:b0:7d:68:67:d9:5a:58:f7:3c:45:36:54:77:f8: ef:a5:c9:5c:cc:60:51:b7:7c:dc:a0:43:7f:c8:f0:1c:8b:cb: 62:6f:27:b4:60:a7:26:a9:b2:cc:93:99:c8:c4:9b:30:49:34: 5b:d6:63:e8:4f:8c:38:c5:5d:44:b3:11:ed:06:ac:ae:e9:33: d2:8d:57:93:fc:e2:88:d1:f2:79:7f:99:34:bf:3c:2d:f8:d8: b7:7b:64:1c:21:b1:22:61:34:5a:47:9f:8b:c5:2e:82:b3:3a: 17:63:f8:42:7e:c6:ae:82:87:19:8d:c1:99:4e:d6:89:26:40: 83:c3:c0:d7:f3:66:ff:99:73:b7:79:e6:0b:e0:a0:6d:17:0a: c3:ad:51:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GX5Wp6IGeZm16kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDMyNDEzMDA0MVoXDTI2MDYyMjEzMDA0MVowLzEtMCsGA1UEAxMk NTY5ZTQzNGEtZDA1MC00NWE5LTkyYzMtOTgyNmVkNjRmOTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNk/UHr53P3QUjZTydZxJUGOwubzbnFMxl1J nyh+W+MO+dGEdU42kb7WRVhvnFQ8eUjc7wUiFosp/hdueQ0AZ3irPsyoq7PxhqTj 9WlUepH5z5tjHYLPiciQRbU2NgaAc7qkXrYmDtZycjYvNxHxij6CB8cPmMGGB7cS 6I0fhVWBiQMO0X8vFYkDHGUFdy1xbHXREWuLyPktC5fLEs0D77pD3evCbzW7eahg RX+kMxRQgfo/uz1GV/ZBERIWvkHz7aXlCrksD/25xnm5l2hPYYDquphvLrZzqhyd x0TVwJ/SGDog5RWlraP7HZsU7Jp1UG29Hw2hLPJFm/5XYKT9NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgH0PVZo2aIXKcCE1lg9MUzATifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNWJhM2RlOWItYzVlZS0z OWE3LTllN2UtMzRkMTZhM2ZlOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCEAcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzB8l6CGisPkvvo7PQUa0RsC98Z2x/woKqddiFWV4a8vzkiI7B+VfRV WevR6z67COSa6ZRCtlii3tTC8/VfiAbrZGPL6R18g4wPLyUVeqznwyX+wNayPoU1 lbhXgmVzhDsCmkShxyeXSvpacm2yyK+wfWhn2VpY9zxFNlR3+O+lyVzMYFG3fNyg Q3/I8ByLy2JvJ7RgpyapssyTmcjEmzBJNFvWY+hPjDjFXUSzEe0GrK7pM9KNV5P8 4ojR8nl/mTS/PC342Ld7ZBwhsSJhNFpHn4vFLoKzOhdj+EJ+xq6ChxmNwZlO1okm QIPDwNfzZv+Zc7d55gvgoG0XCsOtUSk= -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:13 2026 by rpki-client