$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9ebc61a4-e3af-3569-a4c6-db7562e3a39b.roa File: 9ebc61a4-e3af-3569-a4c6-db7562e3a39b.roa (raw, json) Hash identifier: bkf1SPsWIcKJBxezYOi8D0wNFIujsPATAXA8SfuG6Pc= Subject key identifier: 95:EF:EA:52:F3:73:E5:65:8E:A8:85:51:A8:36:3C:35:40:18:14:1F Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584FC611BD3951A77CAF537F3E80 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9ebc61a4-e3af-3569-a4c6-db7562e3a39b.roa Signing time: Sun 08 Nov 2026 16:21:15 +0000 ROA not before: Sun 08 Nov 2026 16:21:15 +0000 ROA not after: Sat 06 Feb 2027 16:21:15 +0000 asID: 273134 IP address blocks: 16.221.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c6:11:bd:39:51:a7:7c:af:53:7f:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Nov 8 16:21:15 2026 GMT Not After : Feb 6 16:21:15 2027 GMT Subject: CN=e90451b7-992b-403d-8f28-ad9033b724d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:16:32:be:4f:e0:d0:50:12:46:32:85:2c: 36:cc:4e:44:4a:e1:b2:0e:5d:55:40:34:8d:26:0e: 01:7a:78:53:99:45:4c:00:be:02:aa:ca:a9:9f:cf: 99:bf:ab:67:44:57:fd:de:c0:f6:93:06:a3:0f:36: c2:22:6f:cb:6c:a9:49:75:2d:c2:79:9d:80:d8:d8: 79:26:1d:40:03:61:c3:a4:6b:ce:6e:1c:9d:e6:16: ac:dd:45:ba:69:ee:e7:52:e7:28:ff:aa:ec:1d:0b: 7b:30:9c:b2:f9:e0:ab:97:bb:b4:07:52:1b:8b:1c: 20:da:a2:e3:ad:c2:a1:b2:d7:ad:6a:5f:53:32:ca: 83:9c:82:e4:4f:f6:04:cc:55:16:d4:fd:35:67:74: b3:46:3c:02:2f:39:06:f9:b4:6e:e6:7d:ae:94:36: b4:bb:b3:cc:4f:b7:e1:19:2f:f3:0e:69:98:95:a2: 36:00:14:ec:c0:3b:c1:29:05:1e:f8:e5:b1:0e:7c: e9:88:9b:e4:37:67:1b:d7:1e:ce:d1:09:83:60:7b: 52:75:2c:e2:c3:36:1c:46:0c:6b:00:fb:bd:1d:19: a7:df:ab:f5:61:77:b5:c5:a6:be:39:84:be:02:37: 2f:fc:47:28:62:e7:26:ae:5e:97:f2:79:bd:52:e3: fe:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EF:EA:52:F3:73:E5:65:8E:A8:85:51:A8:36:3C:35:40:18:14:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9ebc61a4-e3af-3569-a4c6-db7562e3a39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.221.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:cf:9c:c9:23:74:88:5f:af:7c:19:da:a7:c6:1f:f4:9e:ba: 4c:4e:70:24:74:6d:6c:35:d0:a6:69:fd:88:80:ac:d0:c8:79: 37:ca:e6:2d:26:bc:03:dc:13:7d:96:47:03:6c:d1:11:7a:92: 11:ce:d2:62:a2:ee:ec:3c:82:27:5c:f0:0c:93:97:64:d7:be: 4c:8b:42:a8:74:b2:6f:f1:86:f4:2e:8e:6e:a5:ce:7d:a5:2a: 0a:fe:4e:6d:67:a8:0d:c3:a0:58:d0:af:0f:55:25:37:6d:30: 7b:75:37:dc:e5:cf:42:4c:0e:72:0e:20:af:0a:72:6c:66:cf: 85:b1:ad:c0:b9:cb:6c:f1:0b:87:87:ae:8f:c7:48:3d:93:6e: 2a:6c:f8:c4:95:fe:ee:dc:a3:b8:d8:c3:ed:8e:71:90:eb:c2: bd:b3:66:1e:af:e3:99:8a:51:45:80:85:ad:aa:a2:29:8c:27: a6:c5:39:e4:76:e6:de:0f:d9:8b:8b:d0:47:81:a8:0b:56:66: 14:8d:44:b1:34:74:d7:24:31:df:ac:c9:28:24:c6:46:06:c6: e0:1f:24:d7:45:79:c3:d6:94:75:57:a7:0d:8b:db:db:ea:61: ee:4e:ab:aa:5b:a2:01:6a:28:13:42:75:5c:74:17:c7:ef:36: d3:15:5b:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/GEb05Uad8r1N/PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MTEwODE2MjExNVoXDTI3MDIwNjE2MjExNVowLzEtMCsGA1UEAxMk ZTkwNDUxYjctOTkyYi00MDNkLThmMjgtYWQ5MDMzYjcyNGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC0WMr5P4NBQEkYyhSw2zE5ESuGyDl1VQDSN Jg4BenhTmUVMAL4Cqsqpn8+Zv6tnRFf93sD2kwajDzbCIm/LbKlJdS3CeZ2A2Nh5 Jh1AA2HDpGvObhyd5has3UW6ae7nUuco/6rsHQt7MJyy+eCrl7u0B1Ibixwg2qLj rcKhstetal9TMsqDnILkT/YEzFUW1P01Z3SzRjwCLzkG+bRu5n2ulDa0u7PMT7fh GS/zDmmYlaI2ABTswDvBKQUe+OWxDnzpiJvkN2cb1x7O0QmDYHtSdSziwzYcRgxr APu9HRmn36v1YXe1xaa+OYS+Ajcv/EcoYucmrl6X8nm9UuP+fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXv6lLzc+VljqiFUag2PDVAGBQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvOWViYzYxYTQtZTNhZi0z NTY5LWE0YzYtZGI3NTYyZTNhMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDEN3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTPnMkjdIhfr3wZ2qfGH/SeukxOcCR0bWw10KZp/YiArNDIeTfK5i0m vAPcE32WRwNs0RF6khHO0mKi7uw8gidc8AyTl2TXvkyLQqh0sm/xhvQujm6lzn2l Kgr+Tm1nqA3DoFjQrw9VJTdtMHt1N9zlz0JMDnIOIK8Kcmxmz4WxrcC5y2zxC4eH ro/HSD2Tbips+MSV/u7co7jYw+2OcZDrwr2zZh6v45mKUUWAha2qoimMJ6bFOeR2 5t4P2YuL0EeBqAtWZhSNRLE0dNckMd+sySgkxkYGxuAfJNdFecPWlHVXpw2L29vq Ye5Oq6pbogFqKBNCdVx0F8fvNtMVW5g= -----END CERTIFICATE-----Generated at Sun Nov 15 12:41:07 2026 by rpki-client