$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa File: 38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa (raw, json) Hash identifier: qco60ysWo8lsGRBh62EhNFCq7Sw+XXh6l2V2jRYacAg= Subject key identifier: 76:3F:68:21:92:65:B8:9F:65:A6:2B:38:AA:C9:BC:A7:1D:CC:68:00 Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584D44FA3085624C55E1A251DE80 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 7224 IP address blocks: 192.111.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:30:85:62:4c:55:e1:a2:51:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=76f07aa8-5c65-48bc-bedb-ab471129a93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:99:be:27:41:e7:44:5d:13:e0:35:ee:e4: a4:61:2e:84:0c:00:b1:71:b2:cb:5a:18:e1:12:d2: a9:5f:36:06:2e:69:66:76:96:5d:50:1f:84:e6:dc: af:27:08:93:5d:db:10:6f:ec:86:12:d5:00:bd:01: 7f:be:35:1b:d2:60:d7:f8:74:02:6d:4d:cf:13:74: 5a:d3:4b:e8:ee:8e:1e:7e:a8:3b:9d:bc:34:b8:20: 83:ed:b6:ea:53:95:db:90:f0:9b:6d:15:db:ad:96: b1:0d:11:63:9a:25:ae:a0:22:0c:8e:79:e1:b5:21: 81:66:0d:8d:cd:90:5c:38:ae:a5:2a:dd:fb:95:13: b2:b1:79:54:ea:3e:de:2f:60:8b:b6:eb:09:7a:2b: 51:b8:20:d7:25:f8:cf:86:11:38:71:11:44:c9:35: aa:6d:ec:a5:8d:86:5b:08:a7:a3:56:9a:0a:58:97: 3a:56:b0:c0:09:44:68:6e:6e:44:c1:ad:05:eb:1a: 52:c2:39:aa:49:9f:98:3a:10:4f:62:26:2d:fb:17: 0c:8e:62:fb:4e:2e:87:cb:f5:0a:19:cc:de:52:2d: c9:57:0d:72:81:43:38:4d:04:61:e6:b4:f0:1d:07: 39:9f:f0:f2:d3:d8:9d:0e:65:98:bf:24:39:33:b7: 6e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3F:68:21:92:65:B8:9F:65:A6:2B:38:AA:C9:BC:A7:1D:CC:68:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:2b:c3:38:33:d5:c4:b0:66:9b:a6:ce:97:31:4b:34:a5:f8: d9:57:d1:91:38:7e:d4:93:f9:fc:9d:24:ce:46:54:76:f1:2a: 35:1d:17:f5:7c:7c:09:0b:e4:e2:9a:92:fc:74:af:46:42:f0: 47:57:4c:3d:af:6b:65:eb:5b:2b:44:31:58:b5:9b:5d:81:dc: 43:58:da:4e:d9:2f:b2:e9:ab:c6:c0:cd:9c:29:ea:16:40:bb: 71:28:e2:5f:d5:49:67:99:5b:e8:da:c3:cc:a3:0a:ce:4a:f3: f5:cc:7f:2e:b2:82:c4:04:3f:90:68:62:18:51:79:c6:13:8c: 33:02:ca:b6:f9:03:d3:7a:b1:2a:9d:48:f9:28:56:2f:cb:df: 14:71:74:a1:fb:a2:cf:ee:00:b6:6b:f0:11:2d:c0:e7:96:37: 36:c9:14:ef:25:ca:f0:04:c3:df:44:ab:58:fb:ec:3b:4c:1f: 6d:31:13:10:97:b2:d4:8a:50:c1:f1:45:13:37:3b:2a:e8:e8: 9b:bd:90:c1:d7:1d:e2:bf:7a:8d:e8:53:cd:65:d1:9c:2b:36: 83:78:09:d7:8c:98:cb:5c:6e:26:a8:10:af:41:d5:5e:9c:f2: c2:a4:1d:9a:fd:19:16:9f:e2:fd:40:ca:62:88:be:86:0c:20: f2:24:65:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jCFYkxV4aJR3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NzZmMDdhYTgtNWM2NS00OGJjLWJlZGItYWI0NzExMjlhOTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTyZvidB50RdE+A17uSkYS6EDACxcbLLWhjh EtKpXzYGLmlmdpZdUB+E5tyvJwiTXdsQb+yGEtUAvQF/vjUb0mDX+HQCbU3PE3Ra 00vo7o4efqg7nbw0uCCD7bbqU5XbkPCbbRXbrZaxDRFjmiWuoCIMjnnhtSGBZg2N zZBcOK6lKt37lROysXlU6j7eL2CLtusJeitRuCDXJfjPhhE4cRFEyTWqbeyljYZb CKejVpoKWJc6VrDACURobm5Ewa0F6xpSwjmqSZ+YOhBPYiYt+xcMjmL7Ti6Hy/UK GczeUi3JVw1ygUM4TQRh5rTwHQc5n/Dy09idDmWYvyQ5M7duwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHY/aCGSZbifZaYrOKrJvKcdzGgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvMzhjYmFmZTUtYWMxZi0z MDRlLTk5YzQtN2IwMGFiNDJlOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUrwzgz1cSwZpumzpcxSzSl+NlX0ZE4ftST+fydJM5GVHbxKjUdF/V8 fAkL5OKakvx0r0ZC8EdXTD2va2XrWytEMVi1m12B3ENY2k7ZL7Lpq8bAzZwp6hZA u3Eo4l/VSWeZW+jaw8yjCs5K8/XMfy6ygsQEP5BoYhhRecYTjDMCyrb5A9N6sSqd SPkoVi/L3xRxdKH7os/uALZr8BEtwOeWNzbJFO8lyvAEw99Eq1j77DtMH20xExCX stSKUMHxRRM3Oyro6Ju9kMHXHeK/eo3oU81l0ZwrNoN4CdeMmMtcbiaoEK9B1V6c 8sKkHZr9GRaf4v1AymKIvoYMIPIkZZ4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:07:05 2026 by rpki-client