$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa File: 3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa (raw, json) Hash identifier: PY59YNjORQH9j6JnBkGGoEZnyxGPhHmcm1D8pRYtGSw= Subject key identifier: DB:13:39:6A:39:AF:75:AA:07:76:9D:D9:F7:3F:97:F3:C1:DB:20:25 Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584B84E76E5AC789765F55C92B80 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 7224 IP address blocks: 192.111.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6e:5a:c7:89:76:5f:55:c9:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=17efda6b-0045-4eed-bea6-6af262f2072e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:6c:f2:4a:7c:d7:b7:31:de:e1:cd:45:94:c7: e1:8e:0f:88:1f:02:1f:94:3f:52:ad:6d:49:5a:25: 31:b4:6b:4e:d6:e9:8b:da:8b:cd:fb:0d:ac:90:dc: 91:76:90:62:ac:93:66:d9:8b:59:3b:81:82:75:e8: 98:e7:9c:39:db:77:d2:1a:87:82:93:7d:6c:a0:1a: 91:75:c1:30:ec:85:ba:c1:7a:ec:f6:9f:77:ab:66: 48:e6:fe:2b:73:65:14:77:67:59:5f:de:2c:f0:c1: b3:f9:d1:ba:2c:5c:b6:07:bc:99:6b:14:29:d1:69: f9:ce:6a:ae:5c:f0:94:49:2e:04:a4:64:96:de:8d: e4:f0:70:52:52:c0:d4:34:df:ad:c8:57:47:84:9e: ab:71:82:b8:36:ab:55:bf:61:52:e4:be:e5:2b:f7: ae:40:b5:b8:bd:bf:bb:16:3f:b5:64:e0:4d:aa:4e: c1:6f:33:37:b9:0c:b5:61:db:49:c8:d5:99:15:93: 54:c6:e3:a2:b2:13:76:10:67:70:69:64:77:8c:7f: d6:af:99:bc:f0:77:75:71:12:26:52:d9:26:05:21: da:f0:09:66:b8:b2:1b:09:cc:2c:2f:8b:ee:27:e3: 11:5a:36:34:f9:dd:9a:a4:91:d0:50:e7:c2:26:8f: 12:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:13:39:6A:39:AF:75:AA:07:76:9D:D9:F7:3F:97:F3:C1:DB:20:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:8b:9d:d5:41:46:90:31:d5:b6:59:e6:58:28:20:3d:6f:1b: 0c:40:7a:ae:42:a4:ce:0d:91:c6:12:f3:2c:3b:2d:9b:8e:50: 1e:7e:d8:46:1f:ef:fc:25:54:cb:da:24:9a:45:8c:14:29:23: 42:86:eb:bb:91:d7:a1:02:0d:fe:00:2c:b8:fb:80:ca:95:26: 6f:5c:c5:d0:1e:8d:99:80:80:35:a7:b6:75:aa:66:d0:9d:fe: 94:7a:bd:a4:95:42:e8:a3:ed:bd:e9:d7:a2:9a:dc:af:ee:37: 9c:f1:17:57:29:48:8e:45:d6:ee:49:33:a3:69:a9:57:81:78: 2b:55:01:a8:14:84:cc:d6:bf:be:a2:de:e8:31:9b:cc:34:10: bc:21:23:03:42:57:e6:fe:47:51:47:9a:9f:63:5d:bb:a4:6b: 47:71:df:92:64:b9:f4:1a:b3:48:17:33:b2:8e:04:8f:96:c2: 99:0e:dd:a8:cf:c7:5b:ee:55:4b:4b:f9:57:c0:1e:ce:3f:ef: 0a:dc:76:8b:b9:7d:e6:fe:19:aa:dd:3e:e1:fd:e7:90:42:0a: 8f:d4:dc:a7:86:b2:fb:81:6d:30:53:e4:f0:b7:20:ad:f4:3e: 1d:d9:28:c3:6c:79:1a:96:af:91:b7:3d:5c:53:6a:c7:58:3a: 17:68:1b:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE525ax4l2X1XJK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MTdlZmRhNmItMDA0NS00ZWVkLWJlYTYtNmFmMjYyZjIwNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+2zySnzXtzHe4c1FlMfhjg+IHwIflD9SrW1J WiUxtGtO1umL2ovN+w2skNyRdpBirJNm2YtZO4GCdeiY55w523fSGoeCk31soBqR dcEw7IW6wXrs9p93q2ZI5v4rc2UUd2dZX94s8MGz+dG6LFy2B7yZaxQp0Wn5zmqu XPCUSS4EpGSW3o3k8HBSUsDUNN+tyFdHhJ6rcYK4NqtVv2FS5L7lK/euQLW4vb+7 Fj+1ZOBNqk7BbzM3uQy1YdtJyNWZFZNUxuOishN2EGdwaWR3jH/Wr5m88Hd1cRIm UtkmBSHa8AlmuLIbCcwsL4vuJ+MRWjY0+d2apJHQUOfCJo8SxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsTOWo5r3WqB3ad2fc/l/PB2yAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvM2ZiMDhkYzctYmVlYS0z NDU4LTkwOGQtOWIxYThiZjZhMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6LndVBRpAx1bZZ5lgoID1vGwxAeq5CpM4NkcYS8yw7LZuOUB5+2EYf 7/wlVMvaJJpFjBQpI0KG67uR16ECDf4ALLj7gMqVJm9cxdAejZmAgDWntnWqZtCd /pR6vaSVQuij7b3p16Ka3K/uN5zxF1cpSI5F1u5JM6NpqVeBeCtVAagUhMzWv76i 3ugxm8w0ELwhIwNCV+b+R1FHmp9jXbuka0dx35JkufQas0gXM7KOBI+WwpkO3ajP x1vuVUtL+VfAHs4/7wrcdou5feb+GardPuH955BCCo/U3KeGsvuBbTBT5PC3IK30 Ph3ZKMNseRqWr5G3PVxTasdYOhdoG84= -----END CERTIFICATE-----Generated at Mon Oct 20 09:28:12 2025 by rpki-client