$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/db43c042-fe89-31ad-bc4b-47ed165240b4.roa File: db43c042-fe89-31ad-bc4b-47ed165240b4.roa (raw, json) Hash identifier: kIeeGkBDQtZzA6C7lgc/P8yfuFIjWq1tcgqVwWIp76Q= Subject key identifier: B0:4A:9C:E0:86:25:92:13:73:5B:4B:BF:98:6C:72:AC:5A:DE:BB:EE Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E9873A6384485F4A869263600 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/db43c042-fe89-31ad-bc4b-47ed165240b4.roa Signing time: Thu 23 Jul 2026 15:24:24 +0000 ROA not before: Thu 23 Jul 2026 15:24:24 +0000 ROA not after: Wed 21 Oct 2026 15:24:24 +0000 asID: 200169 IP address blocks: 16.217.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:98:73:a6:38:44:85:f4:a8:69:26:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jul 23 15:24:24 2026 GMT Not After : Oct 21 15:24:24 2026 GMT Subject: CN=8aa3f8f6-4ab6-4b52-879d-a734da9cfb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bd:ef:d1:78:bb:a2:2d:dc:5b:7a:3f:22:75: eb:e8:40:76:00:10:ba:e7:c0:85:56:4d:7f:ef:40: 64:8d:3c:27:31:1b:d7:90:17:af:4c:e3:0d:91:1d: 9d:00:9a:b7:60:b4:d1:a4:03:89:1f:22:2d:db:b7: d1:e5:fa:cd:b0:01:e3:58:7c:12:64:50:c8:3d:a3: 7b:9b:ee:12:6e:28:7f:1d:30:5a:29:54:eb:1e:0c: 59:b6:e7:79:16:2d:b7:56:4c:23:b1:94:4c:e1:f9: ee:8b:07:e6:bd:15:a4:ee:c1:9f:2b:96:86:99:42: da:39:93:88:64:bf:a1:6a:02:02:3c:d2:52:1d:18: d9:f2:b4:36:aa:a6:66:14:58:b6:9a:c0:07:75:06: 74:47:b2:4f:2d:48:a5:c0:f8:10:20:bb:a0:86:9d: 2b:24:46:bc:ee:c7:87:5a:8b:01:1d:b1:14:f7:df: 42:eb:8a:df:50:76:13:fb:36:31:f5:d0:88:ea:15: ca:76:26:e0:93:d8:3f:78:ae:9e:b7:1c:a4:82:05: d1:1a:48:59:d3:19:3c:b9:98:cf:63:d5:74:d4:73: 66:84:44:b4:4a:ac:84:83:e3:f6:66:fe:4a:b1:83: 3b:1b:ab:f6:53:41:87:e5:23:cd:89:71:8c:db:cf: 6c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4A:9C:E0:86:25:92:13:73:5B:4B:BF:98:6C:72:AC:5A:DE:BB:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/db43c042-fe89-31ad-bc4b-47ed165240b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.217.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:4c:13:e6:05:bf:f5:45:4e:2b:57:03:cb:57:4b:a9:73:01: ee:cd:ed:e5:41:3e:b5:ff:34:b0:bd:ee:66:96:9d:15:92:b4: 21:10:7b:8c:df:d0:86:45:db:7c:55:cf:c9:19:a8:bf:53:41: bb:3a:b0:00:f0:e8:43:32:b7:8f:68:74:91:b8:25:53:e2:d8: 09:bb:fa:e7:83:1c:0b:74:f1:33:88:6d:10:94:9b:d2:1c:82: 49:03:73:d4:01:6c:c8:d4:46:59:5f:ac:91:48:75:83:2d:40: 61:38:31:cb:b8:26:83:39:9e:7c:44:8a:c0:02:5f:2d:5e:b2: 1c:c8:2b:88:fc:04:15:55:da:7a:04:82:03:56:cc:94:1e:92: ff:0f:0f:00:f1:76:9d:87:ab:dd:45:ee:6b:f9:bb:f7:14:fc: c6:44:20:96:33:7e:bf:e1:34:45:ba:e1:55:43:3d:81:10:86: 98:7c:93:08:70:12:46:8f:1b:95:c2:b8:e0:45:e4:aa:fd:b4: d4:b6:66:20:e6:df:d0:a2:fb:5f:b4:45:36:6f:2f:b0:44:3f: 40:f5:e3:4e:50:68:0a:eb:12:8a:4c:fa:89:96:51:ea:b0:0d: 5b:63:ee:fb:6b:43:4a:b9:35:61:66:b7:f8:c9:8e:92:79:9a: c6:38:cb:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Yc6Y4RIX0qGkmNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDcyMzE1MjQyNFoXDTI2MTAyMTE1MjQyNFowLzEtMCsGA1UEAxMk OGFhM2Y4ZjYtNGFiNi00YjUyLTg3OWQtYTczNGRhOWNmYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL3v0Xi7oi3cW3o/InXr6EB2ABC658CFVk1/ 70BkjTwnMRvXkBevTOMNkR2dAJq3YLTRpAOJHyIt27fR5frNsAHjWHwSZFDIPaN7 m+4Sbih/HTBaKVTrHgxZtud5Fi23VkwjsZRM4fnuiwfmvRWk7sGfK5aGmULaOZOI ZL+hagICPNJSHRjZ8rQ2qqZmFFi2msAHdQZ0R7JPLUilwPgQILughp0rJEa87seH WosBHbEU999C64rfUHYT+zYx9dCI6hXKdibgk9g/eK6etxykggXRGkhZ0xk8uZjP Y9V01HNmhES0SqyEg+P2Zv5KsYM7G6v2U0GH5SPNiXGM289srwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBKnOCGJZITc1tLv5hscqxa3rvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZGI0M2MwNDItZmU4OS0z MWFkLWJjNGItNDdlZDE2NTI0MGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAENkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFME+YFv/VFTitXA8tXS6lzAe7N7eVBPrX/NLC97maWnRWStCEQe4zf 0IZF23xVz8kZqL9TQbs6sADw6EMyt49odJG4JVPi2Am7+ueDHAt08TOIbRCUm9Ic gkkDc9QBbMjURllfrJFIdYMtQGE4Mcu4JoM5nnxEisACXy1eshzIK4j8BBVV2noE ggNWzJQekv8PDwDxdp2Hq91F7mv5u/cU/MZEIJYzfr/hNEW64VVDPYEQhph8kwhw EkaPG5XCuOBF5Kr9tNS2ZiDm39Ci+1+0RTZvL7BEP0D1405QaArrEopM+omWUeqw DVtj7vtrQ0q5NWFmt/jJjpJ5msY4y+8= -----END CERTIFICATE-----Generated at Fri Jul 24 00:05:26 2026 by rpki-client