$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/79ff9556-4d86-3fdb-83ec-21bd15bc8902.roa File: 79ff9556-4d86-3fdb-83ec-21bd15bc8902.roa (raw, json) Hash identifier: xDQRyjc0hs6XI6b+axMfc3MIGv6e2N9x9A+5HNNleXI= Subject key identifier: F0:38:A7:EE:FB:6C:FE:44:85:0A:5E:0D:67:4C:83:3D:A8:DD:87:8A Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584B87374FC7A0C9AEA78B058E00 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/79ff9556-4d86-3fdb-83ec-21bd15bc8902.roa Signing time: Wed 15 Oct 2025 08:53:16 +0000 ROA not before: Wed 15 Oct 2025 08:53:16 +0000 ROA not after: Tue 13 Jan 2026 09:53:16 +0000 asID: 1033 IP address blocks: 16.7.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:37:4f:c7:a0:c9:ae:a7:8b:05:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Oct 15 08:53:16 2025 GMT Not After : Jan 13 09:53:16 2026 GMT Subject: CN=0706257d-3000-4a5b-a8d9-b6d26ecbc1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1a:f9:ed:99:df:1d:93:b0:f9:ad:ae:3e:3b: 1f:d9:c2:eb:4f:72:1d:fe:7d:72:4d:6b:e3:1d:ca: ca:7a:2a:59:68:2d:a5:0a:12:0a:e9:ef:ea:45:45: fb:e2:10:c4:57:f7:8f:a5:f1:e6:ef:e8:4c:dc:71: 90:42:2c:b1:6d:a4:10:97:ea:be:a1:f0:da:fa:11: 4d:8d:1c:0e:4e:dd:2a:40:e0:eb:18:49:bc:02:36: 88:2a:4a:2d:ed:d6:09:76:3a:c0:0c:cc:22:ff:93: d6:73:8a:31:ce:98:43:1e:d4:ae:36:14:f0:e4:28: af:fb:d5:05:70:14:47:5f:ea:e6:16:e8:c7:3c:c6: 79:52:10:bd:7f:b3:cd:66:83:66:a1:63:25:c7:0d: d7:91:e6:f7:31:12:6c:a8:8d:62:74:1c:03:91:ac: fa:1a:e3:0a:9e:7a:2e:4e:b7:c8:27:b5:aa:25:c9: c5:3d:0d:22:cc:0b:2b:37:0b:82:a6:0f:47:43:10: 6b:f3:fe:8d:53:f5:57:0f:bb:25:06:f1:91:63:d6: 45:37:9b:05:94:41:33:f7:6e:2a:c5:62:7b:85:fe: 5a:33:e8:a5:3b:80:33:5f:51:72:a3:84:8f:01:b7: 32:1f:f3:1a:e2:d9:ac:3e:69:1a:ec:fb:05:25:c7: a6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:38:A7:EE:FB:6C:FE:44:85:0A:5E:0D:67:4C:83:3D:A8:DD:87:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/79ff9556-4d86-3fdb-83ec-21bd15bc8902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.7.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:45:3c:19:6b:0a:90:d1:63:b8:de:42:94:ac:68:5f:aa:7e: a8:07:98:b1:87:89:29:a1:1f:5f:23:ac:c7:fc:90:1a:9d:da: f0:26:9e:ba:b2:17:6b:ca:bf:cd:75:c0:7c:94:24:af:fa:0f: 93:ab:db:07:d7:b8:ba:4c:00:20:f8:91:6c:17:82:a0:7b:54: 74:ea:44:ab:6e:cf:c7:63:79:56:9d:0e:d4:60:5e:24:bc:dc: 2e:5d:fd:2e:ab:19:b1:9d:24:e4:32:12:d1:6f:be:9f:8b:38: 99:4e:98:ac:f1:90:4d:84:77:b9:4a:45:f5:02:16:4f:29:3d: f3:cf:ad:d5:e5:c8:31:97:ad:6f:d7:08:28:5b:94:69:cd:b6: bf:ca:96:f4:d3:99:22:80:0f:b3:49:fc:ed:37:32:db:91:31: c9:30:b4:2e:06:0e:f5:82:49:29:b0:98:78:fa:ab:7b:06:ca: fa:dd:e8:e2:8a:a0:27:31:54:b1:1d:ea:aa:a7:27:b2:d0:ed: 81:0a:6c:0c:d3:4d:17:ca:0d:af:75:ed:e7:b9:21:b6:04:a9: 3b:34:cf:39:fc:e7:a9:13:c4:ad:19:3e:49:21:07:55:f9:e1: f3:0b:97:9c:be:1e:79:b7:56:a5:33:ac:b9:ae:e3:39:9a:31: 45:44:da:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHN0/HoMmup4sFjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI1MTAxNTA4NTMxNloXDTI2MDExMzA5NTMxNlowLzEtMCsGA1UEAxMk MDcwNjI1N2QtMzAwMC00YTViLWE4ZDktYjZkMjZlY2JjMWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixr57ZnfHZOw+a2uPjsf2cLrT3Id/n1yTWvj HcrKeipZaC2lChIK6e/qRUX74hDEV/ePpfHm7+hM3HGQQiyxbaQQl+q+ofDa+hFN jRwOTt0qQODrGEm8AjaIKkot7dYJdjrADMwi/5PWc4oxzphDHtSuNhTw5Civ+9UF cBRHX+rmFujHPMZ5UhC9f7PNZoNmoWMlxw3Xkeb3MRJsqI1idBwDkaz6GuMKnnou TrfIJ7WqJcnFPQ0izAsrNwuCpg9HQxBr8/6NU/VXD7slBvGRY9ZFN5sFlEEz924q xWJ7hf5aM+ilO4AzX1Fyo4SPAbcyH/Ma4tmsPmka7PsFJcemVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA4p+77bP5EhQpeDWdMgz2o3YeKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNzlmZjk1NTYtNGQ4Ni0z ZmRiLTgzZWMtMjFiZDE1YmM4OTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCEAcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJFPBlrCpDRY7jeQpSsaF+qfqgHmLGHiSmhH18jrMf8kBqd2vAmnrqy F2vKv811wHyUJK/6D5Or2wfXuLpMACD4kWwXgqB7VHTqRKtuz8djeVadDtRgXiS8 3C5d/S6rGbGdJOQyEtFvvp+LOJlOmKzxkE2Ed7lKRfUCFk8pPfPPrdXlyDGXrW/X CChblGnNtr/KlvTTmSKAD7NJ/O03MtuRMckwtC4GDvWCSSmwmHj6q3sGyvrd6OKK oCcxVLEd6qqnJ7LQ7YEKbAzTTRfKDa917ee5IbYEqTs0zzn856kTxK0ZPkkhB1X5 4fMLl5y+Hnm3VqUzrLmu4zmaMUVE2jE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:58:40 2025 by rpki-client