$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/af173c0d-f4dc-352d-aebe-48f783c50a13.roa File: af173c0d-f4dc-352d-aebe-48f783c50a13.roa (raw, json) Hash identifier: Cx1C5MQqdvE8rRpnMNQhX4X7xIToN7l9AsXT+qlvPXI= Subject key identifier: A5:65:A8:DC:9F:8A:D5:87:FC:60:58:7C:C3:37:2A:1F:33:8A:AE:5A Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584F71ED80F3C06577C1C3739A00 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/af173c0d-f4dc-352d-aebe-48f783c50a13.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 6453 IP address blocks: 216.6.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:80:f3:c0:65:77:c1:c3:73:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=171faa8f-f21a-49f2-a810-e72b3e223f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7d:38:07:2c:0a:da:09:1b:76:a1:fb:86:ba: fe:64:5d:84:43:0f:64:d0:af:8f:c6:67:cd:2d:5d: 31:cc:d4:d6:6b:b0:8e:1b:15:d0:b1:37:11:3e:93: 2a:0d:57:e3:d1:87:0d:5f:10:9d:73:7b:57:96:38: 28:2a:a6:e2:7c:66:b2:6d:8a:aa:6f:73:a5:31:f8: 5b:13:20:13:52:75:f2:b6:15:c3:4c:00:ef:45:e4: 07:db:6d:52:85:1c:4f:7c:8a:63:8b:bf:89:15:85: 14:7e:e6:66:ed:79:18:f4:be:82:9d:fe:e0:2b:f9: ed:4f:0c:65:fc:e9:f7:1d:70:b6:c4:f4:37:89:8a: ff:29:82:84:96:2a:6f:c4:36:05:e0:cb:4c:d8:fc: f5:9d:8a:2c:57:39:a3:9c:4a:12:0c:32:37:93:1c: 0a:24:17:a5:8d:65:04:89:49:06:ed:42:c5:d0:9a: 2a:60:2a:6b:c9:7c:e0:a0:3d:14:a5:88:37:75:0b: 36:50:34:60:85:a4:b1:7a:96:30:46:39:f0:36:64: f4:09:32:f1:1d:b0:7d:20:25:6d:7a:7d:1d:4f:a8: 1c:dd:88:2e:58:6e:93:cf:fd:a3:78:72:ef:a2:ef: cd:a7:d2:8e:c9:a4:74:26:eb:80:cd:ae:a1:c6:b6: 07:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:65:A8:DC:9F:8A:D5:87:FC:60:58:7C:C3:37:2A:1F:33:8A:AE:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/af173c0d-f4dc-352d-aebe-48f783c50a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 216.6.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:fd:33:c8:e9:6e:37:58:47:dc:dd:d3:18:a8:72:9c:56:28: 0f:6f:39:34:ee:a4:0c:d5:db:14:f0:f2:91:a6:40:d2:a0:3f: a3:fa:d2:48:df:d1:f1:de:4e:58:3c:50:db:f0:fd:18:fc:d9: f4:26:ae:85:8a:8a:4c:0b:47:a5:a3:8e:f2:c6:bf:86:01:f5: 94:21:7e:94:ca:79:cb:e5:96:e9:07:2a:3e:80:64:4d:c1:cf: ab:85:04:7b:9b:05:fb:96:18:fb:a7:66:62:8c:52:6e:4b:a5: ed:36:06:30:dc:a6:d6:24:34:e0:1d:c8:4d:24:f2:6f:af:45: ba:34:f1:3e:e2:df:79:86:20:d9:00:9d:34:56:78:30:6f:72: f7:9a:c9:59:d9:d4:19:8e:e7:4e:0e:61:03:f9:fe:9e:f2:af: b7:13:7b:84:9d:07:bd:b8:a0:f5:6c:bf:4f:85:68:91:c4:e0: eb:67:9a:f1:af:8e:3e:1a:97:a1:a6:f8:84:37:41:11:c6:a5: ba:8f:78:71:7b:d1:85:fb:c8:bb:b2:9c:02:77:1d:8a:c9:5c: 85:7b:66:65:3e:5e:b9:a6:b4:98:f5:5c:90:22:fe:e6:98:5f: 4c:72:5f:e8:07:c6:f5:69:1b:05:31:e0:e8:ce:e2:69:ed:18: 49:cf:0a:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7YDzwGV3wcNzmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MTcxZmFhOGYtZjIxYS00OWYyLWE4MTAtZTcyYjNlMjIzZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj304BywK2gkbdqH7hrr+ZF2EQw9k0K+PxmfN LV0xzNTWa7COGxXQsTcRPpMqDVfj0YcNXxCdc3tXljgoKqbifGaybYqqb3OlMfhb EyATUnXythXDTADvReQH221ShRxPfIpji7+JFYUUfuZm7XkY9L6Cnf7gK/ntTwxl /On3HXC2xPQ3iYr/KYKElipvxDYF4MtM2Pz1nYosVzmjnEoSDDI3kxwKJBeljWUE iUkG7ULF0JoqYCpryXzgoD0UpYg3dQs2UDRghaSxepYwRjnwNmT0CTLxHbB9ICVt en0dT6gc3YguWG6Tz/2jeHLvou/Np9KOyaR0JuuAza6hxrYH+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVlqNyfitWH/GBYfMM3Kh8ziq5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvYWYxNzNjMGQtZjRkYy0z NTJkLWFlYmUtNDhmNzgzYzUwYTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2AYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP9M8jpbjdYR9zd0xiocpxWKA9vOTTupAzV2xTw8pGmQNKgP6P60kjf 0fHeTlg8UNvw/Rj82fQmroWKikwLR6WjjvLGv4YB9ZQhfpTKecvllukHKj6AZE3B z6uFBHubBfuWGPunZmKMUm5Lpe02BjDcptYkNOAdyE0k8m+vRbo08T7i33mGINkA nTRWeDBvcveayVnZ1BmO504OYQP5/p7yr7cTe4SdB724oPVsv0+FaJHE4OtnmvGv jj4al6Gm+IQ3QRHGpbqPeHF70YX7yLuynAJ3HYrJXIV7ZmU+XrmmtJj1XJAi/uaY X0xyX+gHxvVpGwUx4OjO4mntGEnPCkc= -----END CERTIFICATE-----Generated at Tue Oct 13 13:53:54 2026 by rpki-client