$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa File: 91f86db8-b3a9-3f88-8959-fe31be15f550.roa (raw, json) Hash identifier: +8GOb1mqPezJJlgWxMBiqBVG/NBtU7kMe0shjfMTT0M= Subject key identifier: D7:58:5C:D5:45:86:DA:29:02:69:B4:70:16:D2:48:BD:05:D1:C9:0E Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584B84E76E9809F3404AB6AFE380 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 192.111.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6e:98:09:f3:40:4a:b6:af:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=e6b1858e-d037-48f2-a739-52139f2b64a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:56:51:a4:2c:ed:4d:19:90:8e:b6:13:e6: 41:e2:94:85:bb:97:f2:9e:a4:cc:fa:c4:0e:79:df: a3:98:3e:66:77:a1:2c:36:ba:ac:a2:7c:bb:29:41: a0:14:e4:bc:2e:6d:51:9d:dd:00:4f:0e:34:32:bc: c9:80:c2:ee:6b:98:63:a1:c4:34:e3:2d:28:0e:b2: ac:e5:43:11:ce:1e:60:b1:49:5b:99:6b:ea:f5:77: 04:73:32:5b:b8:f4:68:4b:1f:83:85:18:20:f0:ca: 1a:2e:eb:3a:9f:da:b8:74:1e:d9:12:ec:d9:b3:2f: 0d:a8:4f:91:81:6b:94:fd:d2:76:ad:89:da:26:e8: f6:6b:58:71:5a:1a:37:40:6f:ec:88:fb:f6:b2:f1: 84:74:27:03:09:3b:9e:3e:67:7f:7c:c1:7c:c9:bf: 7a:7b:87:d6:3c:d1:89:3e:84:9a:81:68:d3:0b:95: 80:bf:01:06:ae:c7:b7:e1:d5:17:9e:85:49:cd:46: e4:48:2f:31:d4:72:60:a4:d9:37:92:43:3d:42:a7: 71:a2:1f:13:51:76:55:63:1b:9b:63:f9:27:9c:69: 46:a4:25:97:8f:d4:7f:7f:24:4d:d2:d6:9c:58:83: 4a:bf:91:e9:1c:cd:ac:31:a7:83:77:07:32:f1:a6: 11:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:58:5C:D5:45:86:DA:29:02:69:B4:70:16:D2:48:BD:05:D1:C9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e2:4a:a2:8d:28:e3:10:d0:ae:73:04:06:ae:c9:27:97:34: 1c:ab:0a:36:a6:07:84:8f:fa:eb:4a:c2:e8:85:dc:89:d8:67: 92:f9:84:b9:f9:8b:9c:ed:93:55:ef:65:bb:ce:67:4d:41:db: 50:9a:bf:67:48:0a:d8:44:00:4a:92:31:c7:b7:64:58:70:f7: 36:08:41:0d:14:65:84:1b:c9:94:bd:f1:fb:7c:2f:1d:ca:e5: 05:b8:58:02:ee:b5:0e:02:e7:34:d8:d9:18:3f:45:8f:37:f9: 86:fb:50:9a:9f:f9:4d:ef:59:58:c8:82:bb:60:9b:19:87:68: 04:62:f2:8a:9a:59:1e:cc:e2:c6:03:d2:a4:e6:46:8f:f3:67: 5d:c7:de:ef:f8:f6:d2:c3:73:f1:cd:e4:21:57:17:a0:29:0d: 33:a4:24:20:d3:db:82:44:2f:7f:f7:3f:43:74:76:41:a3:4e: e3:f5:78:44:ad:fe:d4:09:fb:e9:bc:f2:33:0d:bb:d0:01:b0: 33:6a:76:aa:a3:20:28:3d:61:73:91:7c:21:21:cd:7d:f8:10: fb:75:b9:f7:f3:a7:bc:e0:83:bc:b7:22:99:dc:56:cc:8c:0a: 70:43:c6:72:c9:1e:7d:b3:29:f4:56:14:f3:b8:9f:27:a1:f5: 9e:13:b4:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE526YCfNASrav44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZTZiMTg1OGUtZDAzNy00OGYyLWE3MzktNTIxMzlmMmI2NGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC9WUaQs7U0ZkI62E+ZB4pSFu5fynqTM+sQO ed+jmD5md6EsNrqsony7KUGgFOS8Lm1Rnd0ATw40MrzJgMLua5hjocQ04y0oDrKs 5UMRzh5gsUlbmWvq9XcEczJbuPRoSx+DhRgg8MoaLus6n9q4dB7ZEuzZsy8NqE+R gWuU/dJ2rYnaJuj2a1hxWho3QG/siPv2svGEdCcDCTuePmd/fMF8yb96e4fWPNGJ PoSagWjTC5WAvwEGrse34dUXnoVJzUbkSC8x1HJgpNk3kkM9Qqdxoh8TUXZVYxub Y/knnGlGpCWXj9R/fyRN0tacWINKv5HpHM2sMaeDdwcy8aYRMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdYXNVFhtopAmm0cBbSSL0F0ckOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvOTFmODZkYjgtYjNhOS0z Zjg4LTg5NTktZmUzMWJlMTVmNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEziSqKNKOMQ0K5zBAauySeXNByrCjamB4SP+utKwuiF3InYZ5L5hLn5 i5ztk1XvZbvOZ01B21Cav2dICthEAEqSMce3ZFhw9zYIQQ0UZYQbyZS98ft8Lx3K 5QW4WALutQ4C5zTY2Rg/RY83+Yb7UJqf+U3vWVjIgrtgmxmHaARi8oqaWR7M4sYD 0qTmRo/zZ13H3u/49tLDc/HN5CFXF6ApDTOkJCDT24JEL3/3P0N0dkGjTuP1eESt /tQJ++m88jMNu9ABsDNqdqqjICg9YXORfCEhzX34EPt1uffzp7zgg7y3IpncVsyM CnBDxnLJHn2zKfRWFPO4nyeh9Z4TtKo= -----END CERTIFICATE-----Generated at Mon Oct 20 09:24:28 2025 by rpki-client