$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/63313157-c4a7-4731-9367-e54dd56ad6a4/5d3172af-929e-3d14-9412-2740ce3af588.roa File: 5d3172af-929e-3d14-9412-2740ce3af588.roa (raw, json) Hash identifier: 8KLqKi+Bh6R8ixtNqEvY5NWu0ABcJfuJyLksZHIhU/A= Subject key identifier: BE:44:5E:D7:30:15:7E:3D:68:0F:82:43:0B:85:20:46:D1:59:8F:CF Certificate issuer: /CN=63313157-c4a7-4731-9367-e54dd56ad6a4 Certificate serial: 010D0C9F4328584F99E3F6F272F8C45B1509A700 Authority key identifier: 26:FF:CC:A5:78:5A:39:EF:40:7F:A3:17:30:92:92:D8:CD:8C:C2:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/63313157-c4a7-4731-9367-e54dd56ad6a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/63313157-c4a7-4731-9367-e54dd56ad6a4/5d3172af-929e-3d14-9412-2740ce3af588.roa Signing time: Fri 23 Oct 2026 20:33:27 +0000 ROA not before: Fri 23 Oct 2026 20:33:27 +0000 ROA not after: Thu 21 Jan 2027 21:33:27 +0000 asID: 395245 IP address blocks: 216.171.206.0/24 maxlen: 24 216.171.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/63313157-c4a7-4731-9367-e54dd56ad6a4/63313157-c4a7-4731-9367-e54dd56ad6a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/63313157-c4a7-4731-9367-e54dd56ad6a4/63313157-c4a7-4731-9367-e54dd56ad6a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/63313157-c4a7-4731-9367-e54dd56ad6a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:e3:f6:f2:72:f8:c4:5b:15:09:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63313157-c4a7-4731-9367-e54dd56ad6a4 Validity Not Before: Oct 23 20:33:27 2026 GMT Not After : Jan 21 21:33:27 2027 GMT Subject: CN=b8cae7f7-c3bc-4e45-9039-fee99a5b5491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:2f:e4:98:85:c8:04:72:60:06:0b:17:a6: c6:4b:a9:16:a9:e2:de:b1:2b:bc:fd:a6:76:91:24: 7c:ed:34:44:d7:84:8a:10:3a:b8:a4:5e:3c:61:d7: 20:49:2f:29:43:2b:27:98:1a:62:a2:c9:33:1b:a0: fe:69:ef:cc:99:b7:ec:47:84:96:b1:4b:e3:19:8e: 06:42:7d:5a:3d:a6:9d:58:15:33:d8:27:3e:e9:e0: cd:52:19:f6:7d:66:5f:f0:8d:c3:60:ee:0d:68:fd: 6e:ba:02:4c:85:80:8e:4e:0b:91:af:83:71:76:4b: 3a:5b:06:6b:09:fa:8d:7b:e3:eb:07:38:6c:68:1b: 2f:11:8c:21:56:fe:08:dd:03:a3:9d:2e:8e:3d:82: 34:4c:09:19:d5:02:ab:08:0f:96:d0:23:4e:d0:25: 7f:14:7a:08:bb:17:71:a3:69:44:b3:53:b0:d8:37: 33:c1:26:cd:45:4d:e9:20:dd:f5:1f:26:39:97:cf: ef:b4:51:85:31:d3:82:f5:75:1c:4f:55:0b:d9:8a: f7:22:0a:cd:f1:b4:e6:1a:b9:f3:7b:12:f2:18:59: cb:aa:f3:cd:3c:83:bf:c7:85:bd:ab:20:cb:14:48: a2:fe:e0:e1:b0:a0:b9:8b:2a:c6:21:f1:07:e1:f6: c7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:44:5E:D7:30:15:7E:3D:68:0F:82:43:0B:85:20:46:D1:59:8F:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/63313157-c4a7-4731-9367-e54dd56ad6a4/5d3172af-929e-3d14-9412-2740ce3af588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/63313157-c4a7-4731-9367-e54dd56ad6a4/63313157-c4a7-4731-9367-e54dd56ad6a4.crl X509v3 Authority Key Identifier: keyid:26:FF:CC:A5:78:5A:39:EF:40:7F:A3:17:30:92:92:D8:CD:8C:C2:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/63313157-c4a7-4731-9367-e54dd56ad6a4.cer sbgp-ipAddrBlock: critical IPv4: 216.171.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9f:20:fa:a8:14:1a:1b:c7:bf:72:27:56:d9:43:ef:70:3e: 8f:94:fd:b4:68:d6:25:6c:cf:51:05:7f:14:5f:77:f4:9c:3b: ae:0e:e0:bd:76:f5:c9:62:89:c8:43:ec:04:34:f3:c1:e2:be: 8a:81:56:98:e2:d4:be:fa:c5:c7:8c:64:0d:21:84:d5:09:2a: ab:25:25:7d:ac:15:eb:36:8a:c1:c5:d5:0b:e1:19:39:55:c0: 0c:bb:db:31:61:fa:42:8a:c6:89:91:f5:5c:3e:c1:7a:13:1f: b1:87:a6:45:11:b1:66:3a:d2:bc:99:34:36:5a:40:f9:f1:f5: 6a:ea:f5:65:54:13:35:4f:a1:b8:44:a3:9f:b2:97:d6:2c:63: 73:23:17:d8:0c:e0:3e:82:35:9b:d4:93:05:6c:33:b1:8d:88: 6f:f3:aa:08:8b:fa:4a:e7:b0:95:8c:4f:e7:a9:22:f9:a2:17: fb:c5:23:97:98:4a:89:7d:d4:6c:7d:af:8b:74:6a:3e:74:4d: 5b:4a:1e:73:0a:e0:f0:a4:cc:bf:fc:7d:0e:fd:54:41:3b:e3: 06:5f:3f:a8:76:38:09:a8:01:0d:a3:f8:2c:59:78:c6:29:03: d3:fc:47:72:fa:4c:5b:a2:4e:f5:16:f0:43:42:f0:39:08:fd: 81:a2:2b:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Z4/bycvjEWxUJpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzMTMxNTctYzRhNy00NzMxLTkzNjctZTU0ZGQ1NmFk NmE0MB4XDTI2MTAyMzIwMzMyN1oXDTI3MDEyMTIxMzMyN1owLzEtMCsGA1UEAxMk YjhjYWU3ZjctYzNiYy00ZTQ1LTkwMzktZmVlOTlhNWI1NDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp14v5JiFyARyYAYLF6bGS6kWqeLesSu8/aZ2 kSR87TRE14SKEDq4pF48YdcgSS8pQysnmBpioskzG6D+ae/MmbfsR4SWsUvjGY4G Qn1aPaadWBUz2Cc+6eDNUhn2fWZf8I3DYO4NaP1uugJMhYCOTguRr4Nxdks6WwZr CfqNe+PrBzhsaBsvEYwhVv4I3QOjnS6OPYI0TAkZ1QKrCA+W0CNO0CV/FHoIuxdx o2lEs1Ow2DczwSbNRU3pIN31HyY5l8/vtFGFMdOC9XUcT1UL2Yr3IgrN8bTmGrnz exLyGFnLqvPNPIO/x4W9qyDLFEii/uDhsKC5iyrGIfEH4fbHWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5EXtcwFX49aA+CQwuFIEbRWY/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS82MzMx MzE1Ny1jNGE3LTQ3MzEtOTM2Ny1lNTRkZDU2YWQ2YTQvNWQzMTcyYWYtOTI5ZS0z ZDE0LTk0MTItMjc0MGNlM2FmNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNjMzMTMxNTctYzRhNy00NzMxLTkz NjctZTU0ZGQ1NmFkNmE0LzYzMzEzMTU3LWM0YTctNDczMS05MzY3LWU1NGRkNTZh ZDZhNC5jcmwwHwYDVR0jBBgwFoAUJv/MpXhaOe9Af6MXMJKS2M2MwikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS82MzMxMzE1Ny1jNGE3LTQ3MzEtOTM2Ny1lNTRk ZDU2YWQ2YTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KvOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKfIPqoFBobx79yJ1bZQ+9wPo+U/bRo1iVsz1EFfxRfd/ScO64O4L12 9cliichD7AQ088HivoqBVpji1L76xceMZA0hhNUJKqslJX2sFes2isHF1QvhGTlV wAy72zFh+kKKxomR9Vw+wXoTH7GHpkURsWY60ryZNDZaQPnx9Wrq9WVUEzVPobhE o5+yl9YsY3MjF9gM4D6CNZvUkwVsM7GNiG/zqgiL+krnsJWMT+epIvmiF/vFI5eY Sol91Gx9r4t0aj50TVtKHnMK4PCkzL/8fQ79VEE74wZfP6h2OAmoAQ2j+CxZeMYp A9P8R3L6TFuiTvUW8ENC8DkI/YGiKx0= -----END CERTIFICATE-----Generated at Sun Nov 1 17:33:02 2026 by rpki-client