$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d1721332-76d6-3103-9282-c8953ddc4b85.roa File: d1721332-76d6-3103-9282-c8953ddc4b85.roa (raw, json) Hash identifier: JdmGjJ1JrDc/YYgnCtMvkUaJO3RqZbQyJe7c6CL8Njc= Subject key identifier: C0:C4:50:DA:8D:37:98:4F:29:CC:ED:4A:49:5E:FE:C6:9C:2A:05:26 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584F48361B71FC96D130C12B6760 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d1721332-76d6-3103-9282-c8953ddc4b85.roa Signing time: Thu 24 Sep 2026 14:22:40 +0000 ROA not before: Thu 24 Sep 2026 14:22:40 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 402509 IP address blocks: 16.5.24.0/24 maxlen: 24 16.217.239.0/24 maxlen: 24 192.102.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:36:1b:71:fc:96:d1:30:c1:2b:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Sep 24 14:22:40 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=44cdac13-976c-49a9-a7bf-3757caa8b8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a9:ee:1f:85:a3:9d:97:be:47:e6:1d:e2:e2: 00:71:ca:90:16:b9:33:53:45:f3:0f:03:15:9f:d8: a3:c9:7d:2d:36:b8:fc:33:32:68:cd:77:b8:58:39: 5f:56:e2:88:e5:41:c1:c4:40:4d:22:a5:c2:6c:4d: 6e:be:51:c3:9f:0c:9c:43:fa:af:1b:3e:d3:a4:3b: 5d:2a:9a:5e:d3:68:67:24:06:c2:f9:f7:bf:15:85: 78:cd:96:66:47:e5:8b:68:d3:bd:02:10:d0:0b:92: 81:1f:4a:ad:53:fd:84:35:64:de:7e:cd:7e:f6:ca: 1c:7b:f4:c4:f8:cd:7e:81:5e:de:d0:90:37:88:63: a4:76:17:43:0f:be:00:f7:2d:2d:cc:da:1c:37:21: b3:6b:f3:95:41:b7:50:55:10:8f:b2:75:7b:4c:0d: 8a:65:16:c1:8b:28:30:eb:a5:bf:54:c7:ff:3d:fe: 8d:dd:d8:25:f2:5a:d2:0b:e9:8c:73:5d:6a:fb:7a: 66:da:fc:ff:4a:4e:48:44:b5:1c:92:5e:98:3b:86: 2e:37:aa:13:ae:f1:57:ca:71:6b:1b:21:f3:18:4b: bc:0f:9b:8d:7a:b0:b1:79:e9:45:28:7c:ae:a8:76: 3e:b8:30:03:c4:56:4a:d0:78:c6:fc:3e:97:44:ed: 73:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C4:50:DA:8D:37:98:4F:29:CC:ED:4A:49:5E:FE:C6:9C:2A:05:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d1721332-76d6-3103-9282-c8953ddc4b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.5.24.0/24 16.217.239.0/24 192.102.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9e:7e:30:2c:f2:5d:ce:e7:7b:36:b3:57:a2:f8:ba:91:5a: 53:d9:9f:d4:c9:77:17:d8:f5:59:01:43:76:14:31:68:0a:49: b6:54:63:84:c4:c8:a1:68:7c:13:26:34:92:5d:7b:32:77:e5: 27:be:f5:bc:38:09:57:23:4b:6c:a4:ef:e4:75:e9:55:aa:37: a8:1d:5e:ff:27:3b:bc:7c:82:bb:46:13:2c:10:a7:c8:0b:28: d8:0b:ea:1a:41:f8:bb:50:58:1b:bb:e4:4f:7e:7e:b2:c4:cd: 05:89:47:9a:8e:98:5e:7b:1b:bf:88:55:f4:2f:a4:8b:df:4b: 9d:56:bf:ef:03:da:1e:03:aa:70:38:42:e4:10:31:b8:24:21: 04:ce:22:4f:9c:a7:3c:a5:a1:16:2b:50:43:90:7f:43:3a:29: 4a:3e:1b:55:ec:a9:37:9f:01:9b:93:15:89:8f:d8:0a:c1:d6: 09:01:6d:81:40:7c:0c:a7:34:42:c7:ef:8c:bc:f9:20:ab:b9: 01:cb:02:72:6b:69:eb:0e:8a:da:a1:5f:6c:97:84:72:ad:f0: 99:4f:22:cc:71:31:11:83:a6:8a:04:2b:d4:06:f4:43:34:20: 87:22:26:c4:f4:d2:98:dd:f4:9c:0e:2f:a7:9f:38:15:45:5f: 7a:e7:7b:27 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9INhtx/JbRMMErZ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDkyNDE0MjI0MFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk NDRjZGFjMTMtOTc2Yy00OWE5LWE3YmYtMzc1N2NhYThiOGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKnuH4WjnZe+R+Yd4uIAccqQFrkzU0XzDwMV n9ijyX0tNrj8MzJozXe4WDlfVuKI5UHBxEBNIqXCbE1uvlHDnwycQ/qvGz7TpDtd Kppe02hnJAbC+fe/FYV4zZZmR+WLaNO9AhDQC5KBH0qtU/2ENWTefs1+9soce/TE +M1+gV7e0JA3iGOkdhdDD74A9y0tzNocNyGza/OVQbdQVRCPsnV7TA2KZRbBiygw 66W/VMf/Pf6N3dgl8lrSC+mMc11q+3pm2vz/Sk5IRLUckl6YO4YuN6oTrvFXynFr GyHzGEu8D5uNerCxeelFKHyuqHY+uDADxFZK0HjG/D6XRO1zQQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMDEUNqNN5hPKcztSkle/sacKgUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZDE3MjEzMzItNzZkNi0z MTAzLTkyODItYzg5NTNkZGM0Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAEAUYAwQA ENnvAwQAwGaKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAG+efjAs8l3O53s2s1ei+LqRWlPZn9TJdxfY9VkB Q3YUMWgKSbZUY4TEyKFofBMmNJJdezJ35Se+9bw4CVcjS2yk7+R16VWqN6gdXv8n O7x8grtGEywQp8gLKNgL6hpB+LtQWBu75E9+frLEzQWJR5qOmF57G7+IVfQvpIvf S51Wv+8D2h4DqnA4QuQQMbgkIQTOIk+cpzyloRYrUEOQf0M6KUo+G1XsqTefAZuT FYmP2ArB1gkBbYFAfAynNELH74y8+SCruQHLAnJraesOitqhX2yXhHKt8JlPIsxx MRGDpooEK9QG9EM0IIciJsT00pjd9JwOL6efOBVFX3rneyc= -----END CERTIFICATE-----Generated at Thu Sep 24 23:47:03 2026 by rpki-client