$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa File: 38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa (raw, json) Hash identifier: WNY5+Zj3svdWX72jJ3cE4Fgl0ZEPF2jZngyrXj95+yk= Subject key identifier: FA:E9:9F:3D:25:E8:21:54:5F:47:D7:8B:88:7A:53:43:77:01:DB:98 Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584B84E76E814525D588E8EC9680 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 7224 IP address blocks: 192.111.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6e:81:45:25:d5:88:e8:ec:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=3fc906c7-7c43-4168-9e97-5b354af47e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5f:d4:a1:9b:59:d5:5e:eb:f9:e4:e9:6f:12: 16:84:dd:85:c7:4a:d4:84:ee:3e:73:38:37:b2:11: a5:a8:a0:9e:fe:7a:68:73:63:7d:8c:e8:d4:fe:14: 98:63:7f:6c:7f:98:d9:71:c4:c9:d3:e0:92:95:25: c8:fd:19:53:d4:5b:c2:f0:c2:f5:dc:9f:4f:f8:61: 6f:75:cd:5f:a1:ab:dc:27:d1:99:13:4d:09:b6:14: 23:3c:b4:31:4b:45:d4:02:23:36:27:7d:8f:db:4f: 14:86:94:a9:18:15:3e:8e:55:e1:8f:d5:b7:23:e2: 27:07:6e:2f:d6:8b:ae:8e:c1:9c:56:32:7f:98:20: dd:78:67:12:4e:4f:9a:18:d1:5b:ec:b1:69:76:70: f7:05:3a:db:89:ba:f7:ca:5f:da:73:53:eb:05:e6: 44:f1:c0:67:33:4b:35:41:4b:ed:d9:5a:2e:10:0e: a3:b7:7f:01:a3:f9:54:0d:65:d8:0f:15:37:2b:1a: d1:17:a3:19:ac:15:b7:b7:33:68:5c:77:95:8a:1d: 44:02:ea:1a:be:22:ff:95:c1:5c:90:2e:87:9e:20: 98:69:e3:23:23:1a:d0:9f:8f:85:e7:6f:f9:a5:c6: 3c:31:c1:13:c9:c5:a9:70:2a:1e:4b:a1:b0:21:e4: 6c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E9:9F:3D:25:E8:21:54:5F:47:D7:8B:88:7A:53:43:77:01:DB:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:67:30:b5:51:02:c5:db:49:b4:8f:fe:85:09:e6:c5:43:49: 99:e4:d5:24:ee:1e:21:ea:54:74:25:80:78:45:cc:1f:ac:83: 55:32:99:e3:7e:93:8f:9e:9d:df:6e:ec:cd:7f:fa:9b:1c:d9: 9e:2b:39:1c:90:18:73:ca:4b:83:d4:db:6d:1d:f8:d4:84:d0: 25:07:6b:36:db:e0:45:cb:e6:a4:ed:0d:42:70:7c:d4:93:e1: f5:86:62:0c:c4:e3:4e:55:ca:0e:0f:ae:fe:88:35:0f:83:fa: dd:0d:03:da:4a:46:f1:60:06:82:c5:a6:da:10:9a:71:6d:02: eb:4f:02:0a:c4:5d:53:4d:0b:29:42:c4:68:f8:88:cb:5a:19: 36:85:50:d7:2b:99:8a:08:76:93:e0:94:79:2c:c4:ef:37:e8: 32:2b:0c:1d:65:11:ed:0e:e3:c0:7d:fa:c4:a7:22:fd:15:6f: 64:a3:6d:d8:80:74:71:bc:c8:3b:e5:61:cc:5c:d7:1c:ac:de: 17:9f:ea:d7:08:58:73:5c:b6:fb:a4:d6:3a:87:26:9a:ac:e0: 66:e4:b5:fc:99:33:ed:04:8d:9c:0f:7c:ec:cd:20:e6:3a:55: bd:9c:9b:91:26:48:fa:78:62:bd:4f:f3:a0:58:11:fd:eb:c5: fd:6c:63:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE526BRSXViOjsloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk M2ZjOTA2YzctN2M0My00MTY4LTllOTctNWIzNTRhZjQ3ZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF/UoZtZ1V7r+eTpbxIWhN2Fx0rUhO4+czg3 shGlqKCe/npoc2N9jOjU/hSYY39sf5jZccTJ0+CSlSXI/RlT1FvC8ML13J9P+GFv dc1foavcJ9GZE00JthQjPLQxS0XUAiM2J32P208UhpSpGBU+jlXhj9W3I+InB24v 1ouujsGcVjJ/mCDdeGcSTk+aGNFb7LFpdnD3BTrbibr3yl/ac1PrBeZE8cBnM0s1 QUvt2VouEA6jt38Bo/lUDWXYDxU3KxrRF6MZrBW3tzNoXHeVih1EAuoaviL/lcFc kC6HniCYaeMjIxrQn4+F52/5pcY8McETycWpcCoeS6GwIeRsFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrpnz0l6CFUX0fXi4h6U0N3AduYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvMzhjYmFmZTUtYWMxZi0z MDRlLTk5YzQtN2IwMGFiNDJlOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdnMLVRAsXbSbSP/oUJ5sVDSZnk1STuHiHqVHQlgHhFzB+sg1UymeN+ k4+end9u7M1/+psc2Z4rORyQGHPKS4PU220d+NSE0CUHazbb4EXL5qTtDUJwfNST 4fWGYgzE405Vyg4Prv6INQ+D+t0NA9pKRvFgBoLFptoQmnFtAutPAgrEXVNNCylC xGj4iMtaGTaFUNcrmYoIdpPglHksxO836DIrDB1lEe0O48B9+sSnIv0Vb2SjbdiA dHG8yDvlYcxc1xys3hef6tcIWHNctvuk1jqHJpqs4GbktfyZM+0EjZwPfOzNIOY6 Vb2cm5EmSPp4Yr1P86BYEf3rxf1sY2w= -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:28 2025 by rpki-client