$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/af173c0d-f4dc-352d-aebe-48f783c50a13.roa File: af173c0d-f4dc-352d-aebe-48f783c50a13.roa (raw, json) Hash identifier: 5Wzq1cG1I+mkgljVENJRyhP8/XEzp75RmWvf+cTcRpc= Subject key identifier: 01:BE:D1:85:DD:96:B4:14:7B:AA:B9:D2:72:9F:D5:B3:51:CE:0F:DD Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584B8EACBFCE6C5A854C0D927B80 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/af173c0d-f4dc-352d-aebe-48f783c50a13.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 6453 IP address blocks: 216.6.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:bf:ce:6c:5a:85:4c:0d:92:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=f697f481-bf7a-45b7-bb22-488a85a03b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:44:35:c1:2b:2b:c8:90:95:2b:9d:72:6d:d2: 17:b3:25:a3:71:71:32:9d:0c:fa:03:fd:d1:b0:84: 5c:47:49:bb:21:59:c3:bd:a6:f9:38:12:cd:d7:af: 27:6f:87:a0:fa:0f:1f:b4:6f:09:23:8b:78:32:a3: 87:ca:2f:fb:90:c4:c6:37:bc:18:72:72:d8:fa:33: 96:04:38:1e:eb:16:d7:f1:54:0f:fe:85:f0:47:14: d1:0e:9c:c3:64:d6:fc:c8:57:80:bd:74:cd:99:31: 2c:f1:c5:1f:a2:93:31:64:46:12:dc:ad:99:e3:a8: f2:36:2a:c5:26:49:bb:45:09:cd:cb:bb:07:4f:ab: f7:a0:ea:9b:80:4c:8c:66:16:97:7a:51:aa:5f:ba: 51:74:72:ca:40:e2:33:c9:a0:8a:e7:98:32:48:88: d5:2c:de:11:e6:e7:ed:49:dc:6e:87:df:4c:07:10: 70:f1:c3:2d:7e:28:1a:91:3c:b3:0e:39:9e:52:9e: d9:42:ad:1f:5d:a6:ba:ce:0b:b5:a2:a1:d8:23:95: 51:5f:c6:1f:51:9b:38:bd:88:a4:bc:0b:1e:70:29: ce:11:4f:ef:38:47:d4:65:6c:2a:95:9e:64:b2:25: c9:cb:76:ca:f2:7b:0c:b3:f1:7e:40:42:b1:39:fc: b4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BE:D1:85:DD:96:B4:14:7B:AA:B9:D2:72:9F:D5:B3:51:CE:0F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/af173c0d-f4dc-352d-aebe-48f783c50a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 216.6.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:74:9a:f1:a9:74:1c:51:f4:89:a3:d1:77:47:06:2e:44:0a: f0:aa:39:5b:e5:e7:90:7c:f1:be:14:21:c1:55:2a:ec:cf:1a: cf:cc:42:f4:8a:ae:35:e8:8e:a8:5c:a7:29:86:9a:be:36:11: e9:54:f3:fb:66:1e:ac:7f:c2:bb:80:6f:e9:c9:da:99:5a:89: 45:ab:0b:75:85:76:de:37:b6:f1:07:53:d6:21:f5:ec:e4:e0: 2e:7b:d4:9d:11:05:30:cc:0b:13:64:74:c9:bf:7b:b0:8b:1e: 0f:1d:89:5a:af:98:39:a2:c5:2e:a3:bc:64:ed:b7:a1:db:e4: 9c:8e:3f:99:89:68:68:0e:c7:8c:5a:fb:0d:d1:7a:c5:a5:07: fc:f0:28:cf:84:bc:30:3f:78:ce:b8:bc:2e:ad:f5:bd:93:2f: 25:25:b4:4a:92:e6:46:d8:e1:7b:c4:97:ff:69:a9:3b:d6:7e: 5f:5a:6d:5d:b9:e3:1e:18:3b:48:1e:52:47:e7:7d:28:9f:78: 4d:8b:bc:ad:fa:c1:1d:e7:26:57:e7:a1:82:2c:7c:34:81:aa: ca:5f:b7:97:07:41:d7:4e:13:4f:3a:ec:25:1a:be:49:e4:1b: 82:27:75:d3:86:67:b7:0c:ea:74:a7:21:75:e3:21:d6:85:92: 7a:8c:aa:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrL/ObFqFTA2Se4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZjY5N2Y0ODEtYmY3YS00NWI3LWJiMjItNDg4YTg1YTAzYjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEQ1wSsryJCVK51ybdIXsyWjcXEynQz6A/3R sIRcR0m7IVnDvab5OBLN168nb4eg+g8ftG8JI4t4MqOHyi/7kMTGN7wYcnLY+jOW BDge6xbX8VQP/oXwRxTRDpzDZNb8yFeAvXTNmTEs8cUfopMxZEYS3K2Z46jyNirF Jkm7RQnNy7sHT6v3oOqbgEyMZhaXelGqX7pRdHLKQOIzyaCK55gySIjVLN4R5uft Sdxuh99MBxBw8cMtfigakTyzDjmeUp7ZQq0fXaa6zgu1oqHYI5VRX8YfUZs4vYik vAsecCnOEU/vOEfUZWwqlZ5ksiXJy3bK8nsMs/F+QEKxOfy0HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG+0YXdlrQUe6q50nKf1bNRzg/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvYWYxNzNjMGQtZjRkYy0z NTJkLWFlYmUtNDhmNzgzYzUwYTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2AYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ0mvGpdBxR9Imj0XdHBi5ECvCqOVvl55B88b4UIcFVKuzPGs/MQvSK rjXojqhcpymGmr42EelU8/tmHqx/wruAb+nJ2plaiUWrC3WFdt43tvEHU9Yh9ezk 4C571J0RBTDMCxNkdMm/e7CLHg8diVqvmDmixS6jvGTtt6Hb5JyOP5mJaGgOx4xa +w3ResWlB/zwKM+EvDA/eM64vC6t9b2TLyUltEqS5kbY4XvEl/9pqTvWfl9abV25 4x4YO0geUkfnfSifeE2LvK36wR3nJlfnoYIsfDSBqspft5cHQddOE0867CUavknk G4InddOGZ7cM6nSnIXXjIdaFknqMqnw= -----END CERTIFICATE-----Generated at Mon Oct 20 05:36:14 2025 by rpki-client