$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa File: de977a80-b422-3e83-bc77-25aec313c480.roa (raw, json) Hash identifier: ri3EcGnzC0k8D972RXY83mYEaL2jiVKtCEYpKodw8P8= Subject key identifier: 92:6F:AB:E2:99:18:9C:17:FF:40:00:08:4C:2D:29:D7:B3:96:A4:84 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E7FFA3B163EEA46CD20C37F60 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 8635 IP address blocks: 16.1.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:3b:16:3e:ea:46:cd:20:c3:7f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=2ab936d5-50bf-4a72-8e4e-c79537655990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:97:4f:64:4f:1c:b6:72:b8:24:b0:e0:3b: e6:3a:a1:2f:0f:96:60:48:c1:70:5c:dd:aa:bb:57: 38:f0:72:d5:bd:c3:52:a4:36:08:be:85:34:a4:10: 85:7b:ad:07:4b:8b:56:27:e8:1b:8c:79:dd:b5:d9: 41:80:53:cb:2a:9a:7f:6a:f6:42:55:f9:82:80:1d: 19:4a:b2:0e:e2:4d:90:6c:d6:53:d8:2b:ca:0b:98: 5a:c3:c0:98:05:23:8a:06:a1:d5:f7:6c:76:f1:f5: 75:74:49:cb:2f:85:ee:1e:f6:b5:b6:af:ad:88:63: 2d:df:02:23:ad:93:4e:6a:a7:8a:54:c6:b8:34:07: 39:12:02:6d:27:fe:a0:de:fe:c9:03:92:20:09:0e: 0a:39:71:93:19:35:80:74:fa:59:40:2d:2c:9e:4a: ee:27:43:f9:1e:8a:7c:3a:b8:1d:88:ef:f6:90:f7: c7:05:61:72:47:05:fc:9d:35:a4:ae:c5:88:f7:39: 5c:a9:0c:4e:9e:10:cc:76:7b:04:b7:0c:9a:65:c1: aa:27:97:98:70:4e:f2:e5:80:16:2e:94:d1:94:36: 7d:a0:46:b1:ff:a1:09:66:3f:cb:1a:f7:01:3c:f4: 09:1c:9b:a3:27:c7:bb:a8:4f:b5:27:57:1c:3a:0d: d7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6F:AB:E2:99:18:9C:17:FF:40:00:08:4C:2D:29:D7:B3:96:A4:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.1.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:41:5f:88:9f:b4:9d:bd:fd:4b:9b:cc:67:51:b5:36:d9:94: 41:b4:54:dd:a9:7e:20:ab:90:70:10:ea:cd:ae:fb:10:5b:84: 63:df:5e:6e:f2:46:5a:b6:00:49:5d:dc:60:c0:98:b0:fb:04: 01:50:0f:98:cf:71:40:55:86:1e:8d:9b:a2:97:f9:a7:e2:46: f3:cc:20:01:ae:17:07:68:2c:a5:9f:76:a5:52:8c:a3:8d:03: 10:cf:a0:a7:c6:86:d8:e0:f4:7c:85:91:bb:56:0a:d3:4e:4f: eb:d4:97:4c:4d:6f:33:38:e2:33:e5:b7:fb:a4:b8:1d:5c:58: 0b:b5:cc:5d:2c:02:ab:04:0c:48:44:93:05:86:1a:42:c6:87: 68:b7:d7:a2:31:0f:0b:d3:2e:2e:14:20:da:0a:fc:47:9e:a9: 0b:0d:82:e3:92:a0:64:ca:19:ab:de:4a:ca:32:ad:b4:44:45: 64:6a:cc:03:96:03:b1:33:62:d6:fc:4a:ba:74:77:a8:b4:ad: 47:0f:90:ca:5c:98:b5:b8:49:4b:9c:0b:67:98:a8:37:ee:23: 7c:25:e1:7c:2b:1c:17:81:21:0a:ad:41:13:75:c3:a4:ca:13: 1a:c0:17:ea:18:8a:de:22:c8:74:69:5d:33:4a:fd:50:2e:76: 21:9d:17:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+jsWPupGzSDDf2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk MmFiOTM2ZDUtNTBiZi00YTcyLThlNGUtYzc5NTM3NjU1OTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSCXT2RPHLZyuCSw4DvmOqEvD5ZgSMFwXN2q u1c48HLVvcNSpDYIvoU0pBCFe60HS4tWJ+gbjHndtdlBgFPLKpp/avZCVfmCgB0Z SrIO4k2QbNZT2CvKC5haw8CYBSOKBqHV92x28fV1dEnLL4XuHva1tq+tiGMt3wIj rZNOaqeKVMa4NAc5EgJtJ/6g3v7JA5IgCQ4KOXGTGTWAdPpZQC0snkruJ0P5Hop8 OrgdiO/2kPfHBWFyRwX8nTWkrsWI9zlcqQxOnhDMdnsEtwyaZcGqJ5eYcE7y5YAW LpTRlDZ9oEax/6EJZj/LGvcBPPQJHJujJ8e7qE+1J1ccOg3XmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJvq+KZGJwX/0AACEwtKdezlqSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZGU5NzdhODAtYjQyMi0z ZTgzLWJjNzctMjVhZWMzMTNjNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAEAEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5BX4iftJ29/UubzGdRtTbZlEG0VN2pfiCrkHAQ6s2u+xBbhGPfXm7y Rlq2AEld3GDAmLD7BAFQD5jPcUBVhh6Nm6KX+afiRvPMIAGuFwdoLKWfdqVSjKON AxDPoKfGhtjg9HyFkbtWCtNOT+vUl0xNbzM44jPlt/ukuB1cWAu1zF0sAqsEDEhE kwWGGkLGh2i316IxDwvTLi4UINoK/EeeqQsNguOSoGTKGaveSsoyrbRERWRqzAOW A7EzYtb8Srp0d6i0rUcPkMpcmLW4SUucC2eYqDfuI3wl4XwrHBeBIQqtQRN1w6TK ExrAF+oYit4iyHRpXTNK/VAudiGdFzg= -----END CERTIFICATE-----Generated at Fri Jul 24 03:15:47 2026 by rpki-client