$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa File: 90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa (raw, json) Hash identifier: pYmnqsR6zIgBq5R5zo739nyOhEUxTaOuNBlzop6XhTY= Subject key identifier: 09:5E:E3:A8:D1:F1:F1:80:07:5A:90:30:E7:DC:8C:E2:AC:00:D0:24 Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584B84E76EA96151028EFCFCD200 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 192.111.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6e:a9:61:51:02:8e:fc:fc:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=04f476ac-4b5a-4ee9-ba9f-50b8a703bb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ef:0c:c2:68:45:08:60:8c:dd:46:15:76:2b: bb:3c:8e:65:e1:96:d5:41:6b:25:dd:b6:8f:ce:69: d4:98:1e:4c:f7:4d:c2:7b:c8:0d:d9:b9:31:2a:08: 34:ca:b9:fe:ad:26:84:5e:26:db:99:45:79:ba:0b: ba:ea:a6:bc:15:8d:22:ee:23:7a:28:59:aa:b3:81: 51:7f:d3:db:9e:67:4a:84:d4:a8:22:83:48:94:d0: 35:95:c1:1c:59:0c:19:86:dc:61:35:66:2d:9b:e4: 32:73:b0:dd:30:f4:5f:cb:22:6c:1c:56:ce:c8:e6: 9b:6d:0b:25:7c:a9:d7:dc:1b:56:71:16:b2:3d:1f: 4e:53:c2:c1:ad:65:a9:1a:5a:ec:59:4a:3b:80:44: 5e:78:82:cb:65:49:b7:6f:ed:43:4d:aa:82:f3:56: 3c:2c:f3:98:f9:55:c5:cd:5c:71:50:ba:cf:56:d8: 9c:fa:23:75:fe:de:51:7f:da:4d:3a:e2:8a:39:65: 15:be:57:be:69:c1:0f:cf:0b:d8:d7:97:51:be:d6: 26:f1:ce:10:69:77:19:4f:17:62:7e:55:05:c0:5f: ee:8c:4c:eb:16:93:7d:aa:0d:8e:0e:c2:f7:34:bb: cd:6c:d1:28:27:7b:1f:ce:35:f4:c6:50:a5:8b:fe: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5E:E3:A8:D1:F1:F1:80:07:5A:90:30:E7:DC:8C:E2:AC:00:D0:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:53:75:b4:e5:fc:f7:88:14:d7:42:2d:a2:79:9a:da:af:e6: b0:eb:68:0d:ea:5d:e3:6a:3b:6a:58:52:da:68:13:37:b3:04: 06:56:7d:03:81:df:d4:3a:d0:4b:30:0c:f1:60:93:69:4d:42: 3f:99:5b:eb:32:06:81:3a:f0:8e:4c:35:b1:ef:9f:26:93:83: 49:d3:cb:4d:dc:7c:3d:90:89:40:ba:d6:e3:22:b3:3b:fe:2c: af:64:ee:2b:40:83:70:d8:88:8c:5f:5e:c5:08:49:f4:16:cd: ad:60:5a:88:eb:7e:3d:14:09:98:a9:c3:aa:76:22:9e:bc:00: b7:a7:81:72:d8:b8:e7:3e:c1:1c:93:bd:74:a8:13:44:fa:5e: 12:38:d4:3a:51:4c:9a:76:1d:b5:2a:72:a5:3a:2c:e9:7b:86: c5:d0:67:ec:87:09:01:b2:b0:ec:2d:76:4b:1c:4b:df:8c:fc: 1c:af:87:25:91:16:bc:89:0f:a7:5e:4a:fa:e1:34:29:36:d9: 77:45:7c:b0:1c:6d:13:7e:57:01:fa:db:99:75:af:dd:53:d7: cc:79:1d:42:76:9b:ae:2d:c1:4f:bd:f2:43:e1:69:2e:9a:5b: 9e:80:6a:ef:27:63:89:b1:a9:c1:b9:ff:43:1f:dd:09:af:ba: 24:2b:9f:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE526pYVECjvz80gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MDRmNDc2YWMtNGI1YS00ZWU5LWJhOWYtNTBiOGE3MDNiYjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO8MwmhFCGCM3UYVdiu7PI5l4ZbVQWsl3baP zmnUmB5M903Ce8gN2bkxKgg0yrn+rSaEXibbmUV5ugu66qa8FY0i7iN6KFmqs4FR f9PbnmdKhNSoIoNIlNA1lcEcWQwZhtxhNWYtm+Qyc7DdMPRfyyJsHFbOyOabbQsl fKnX3BtWcRayPR9OU8LBrWWpGlrsWUo7gEReeILLZUm3b+1DTaqC81Y8LPOY+VXF zVxxULrPVtic+iN1/t5Rf9pNOuKKOWUVvle+acEPzwvY15dRvtYm8c4QaXcZTxdi flUFwF/ujEzrFpN9qg2ODsL3NLvNbNEoJ3sfzjX0xlCli/7fywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAle46jR8fGAB1qQMOfcjOKsANAkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvOTBmOGFlOWItYzNiOS0z NGI0LTliMzgtMTc5ZDZlNWEwMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlTdbTl/PeIFNdCLaJ5mtqv5rDraA3qXeNqO2pYUtpoEzezBAZWfQOB 39Q60EswDPFgk2lNQj+ZW+syBoE68I5MNbHvnyaTg0nTy03cfD2QiUC61uMiszv+ LK9k7itAg3DYiIxfXsUISfQWza1gWojrfj0UCZipw6p2Ip68ALengXLYuOc+wRyT vXSoE0T6XhI41DpRTJp2HbUqcqU6LOl7hsXQZ+yHCQGysOwtdkscS9+M/ByvhyWR FryJD6deSvrhNCk22XdFfLAcbRN+VwH625l1r91T18x5HUJ2m64twU+98kPhaS6a W56Aau8nY4mxqcG5/0Mf3QmvuiQrn/A= -----END CERTIFICATE-----Generated at Mon Oct 20 18:03:34 2025 by rpki-client