$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d5abd05e-a567-35ae-bfbf-02a46996a24d.roa File: d5abd05e-a567-35ae-bfbf-02a46996a24d.roa (raw, json) Hash identifier: v/RWl23mZXlHRgcGTaHzYZBB7st/aWqzoWg62GZgrhQ= Subject key identifier: 27:FC:AE:50:5F:67:A6:77:EE:3C:22:16:C2:38:FE:DA:FA:CA:79:AC Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584D465F9CB23667C05FEC028A80 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d5abd05e-a567-35ae-bfbf-02a46996a24d.roa Signing time: Tue 24 Mar 2026 13:00:41 +0000 ROA not before: Tue 24 Mar 2026 13:00:41 +0000 ROA not after: Mon 22 Jun 2026 13:00:41 +0000 asID: 1033 IP address blocks: 16.7.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:5f:9c:b2:36:67:c0:5f:ec:02:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Mar 24 13:00:41 2026 GMT Not After : Jun 22 13:00:41 2026 GMT Subject: CN=c466eb67-8100-4b75-bd2e-c0a283680906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a8:51:42:17:99:e5:7d:7c:c8:2b:97:30:a7: 1e:6d:1a:f0:6f:52:2a:d5:af:74:81:02:48:79:07: d4:82:04:6f:42:ae:64:61:fa:3e:4d:16:d1:4b:09: a9:30:dd:39:89:d7:66:ef:43:43:6c:75:c1:a4:88: a6:79:81:e3:78:a9:e7:7c:f8:9a:fc:9c:8e:c5:71: c8:43:b9:89:84:f3:df:c2:e8:4c:a4:ea:1c:23:36: 18:12:4d:e4:85:0c:59:24:67:f2:1b:db:2a:49:af: b1:db:0a:60:0a:77:a5:5c:9f:0a:f1:00:04:7e:f6: 71:27:8c:ff:40:7d:41:01:64:67:71:fd:d7:af:58: 8d:ea:d2:0b:48:85:7b:d4:66:7e:58:22:ee:c5:49: 54:46:1c:f4:88:26:80:5f:9b:72:2f:9f:ca:35:52: 04:c0:13:26:0f:fc:40:95:bb:d6:8e:75:1f:40:09: 61:21:b1:77:18:17:86:15:77:49:ac:3d:4d:08:5b: 5c:f2:fc:1f:56:55:14:4f:c7:2f:e8:20:60:47:a2: c0:01:43:e9:83:d8:9f:c0:6f:af:5e:53:d3:c2:a6: 67:8d:0a:50:1e:ba:1a:71:1c:15:62:25:94:d2:47: 26:16:75:82:bd:d9:80:b2:46:3a:07:9d:62:b1:f0: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FC:AE:50:5F:67:A6:77:EE:3C:22:16:C2:38:FE:DA:FA:CA:79:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d5abd05e-a567-35ae-bfbf-02a46996a24d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.7.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:fb:0a:94:72:37:bb:20:0e:95:b0:f6:30:7c:49:c8:5e:ec: 9b:08:06:66:8b:19:f0:ef:5f:c3:67:1c:17:69:8f:6a:50:97: 51:7e:15:03:08:ca:be:c3:bd:9c:3c:dd:82:a4:1b:d5:54:d8: a3:5e:c2:b9:92:ee:e8:06:63:9a:85:34:81:13:a3:4a:39:7c: 00:3e:3b:67:c2:f2:b4:43:f2:c2:6c:4c:f4:9e:12:d9:8c:49: b0:f6:d9:11:d8:2f:f5:02:db:23:ab:af:a7:f9:4a:90:14:e0: 7e:b9:ec:ed:d6:84:35:3e:ed:07:92:b3:49:f3:19:3a:b6:c6: a7:96:ec:1a:2e:f0:c4:61:d2:9c:a1:32:10:56:95:bc:d6:a6: be:83:fa:5f:4f:ed:2d:5c:5e:60:ca:83:4c:35:30:21:47:3f: 76:2b:7f:4d:a2:06:80:cc:e7:1d:23:85:de:ee:69:64:57:5e: b4:fe:a0:8f:23:4a:c3:6d:4f:92:7c:dc:be:b8:79:71:db:62: 82:84:b1:f2:95:2d:b5:a0:a3:95:54:82:1e:47:72:53:fa:75: ef:fd:98:79:6a:3f:e8:24:37:90:0f:12:a2:7f:fc:02:c9:ae: 94:67:77:86:17:e9:24:8b:e0:6e:4e:ad:ce:e9:f2:47:57:47: e3:5d:cb:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GX5yyNmfAX+wCioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDMyNDEzMDA0MVoXDTI2MDYyMjEzMDA0MVowLzEtMCsGA1UEAxMk YzQ2NmViNjctODEwMC00Yjc1LWJkMmUtYzBhMjgzNjgwOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlahRQheZ5X18yCuXMKcebRrwb1Iq1a90gQJI eQfUggRvQq5kYfo+TRbRSwmpMN05iddm70NDbHXBpIimeYHjeKnnfPia/JyOxXHI Q7mJhPPfwuhMpOocIzYYEk3khQxZJGfyG9sqSa+x2wpgCnelXJ8K8QAEfvZxJ4z/ QH1BAWRncf3Xr1iN6tILSIV71GZ+WCLuxUlURhz0iCaAX5tyL5/KNVIEwBMmD/xA lbvWjnUfQAlhIbF3GBeGFXdJrD1NCFtc8vwfVlUUT8cv6CBgR6LAAUPpg9ifwG+v XlPTwqZnjQpQHroacRwVYiWU0kcmFnWCvdmAskY6B51isfD9VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCf8rlBfZ6Z37jwiFsI4/tr6ynmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZDVhYmQwNWUtYTU2Ny0z NWFlLWJmYmYtMDJhNDY5OTZhMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAEAcWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz7CpRyN7sgDpWw9jB8Sche7JsIBmaLGfDvX8NnHBdpj2pQl1F+FQMI yr7DvZw83YKkG9VU2KNewrmS7ugGY5qFNIETo0o5fAA+O2fC8rRD8sJsTPSeEtmM SbD22RHYL/UC2yOrr6f5SpAU4H657O3WhDU+7QeSs0nzGTq2xqeW7Bou8MRh0pyh MhBWlbzWpr6D+l9P7S1cXmDKg0w1MCFHP3Yrf02iBoDM5x0jhd7uaWRXXrT+oI8j SsNtT5J83L64eXHbYoKEsfKVLbWgo5VUgh5HclP6de/9mHlqP+gkN5APEqJ//ALJ rpRnd4YX6SSL4G5Orc7p8kdXR+Ndy+A= -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:23 2026 by rpki-client