$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa File: 91f86db8-b3a9-3f88-8959-fe31be15f550.roa (raw, json) Hash identifier: GkAbD9c7jY7agdRb03pPfYGwyVBQqfegZVyOUQnCksA= Subject key identifier: C1:72:4B:F2:D5:05:23:6A:44:3A:14:0D:2E:45:DD:F8:98:83:C0:1E Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584F698D78741FDDA610E63087E0 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 192.111.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:78:74:1f:dd:a6:10:e6:30:87:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=e7434a7c-e71a-48ba-8087-9d9a934192c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:15:cf:21:38:70:34:26:34:cd:4e:bb:54:1f: 02:dd:cb:db:38:da:f0:c5:2d:30:62:41:64:59:a3: 9e:3e:a0:17:80:c9:61:33:6a:b9:2d:3f:66:4a:6e: e6:17:f1:0e:a9:e0:95:52:ea:97:70:72:b3:12:4c: 2b:4f:be:1f:1a:fe:f6:c7:52:82:2d:a6:c3:66:84: 9a:ac:98:7f:e2:ca:54:81:eb:a2:da:ec:1f:3d:37: 79:e4:50:bc:15:db:0f:e7:95:d4:78:60:48:73:70: f3:e8:92:d1:16:bc:6e:f6:62:b8:70:5b:29:a6:27: d0:f0:1b:8f:f8:71:24:af:68:99:aa:04:51:e5:0b: da:ef:b0:6c:84:f5:25:50:ae:65:9d:d8:0e:41:27: 5c:ad:b1:36:21:a0:ff:a6:39:45:26:26:f9:38:c3: 51:88:9e:65:3f:b0:1e:f3:f7:df:7f:52:ad:4c:b5: 14:60:ad:6d:0c:7e:3e:fe:96:1c:40:aa:fc:d8:8b: 37:e8:b0:1c:5d:ab:4d:88:5b:b6:24:32:a8:fc:5d: 93:46:2f:f8:82:d0:52:9e:50:18:8b:63:4d:e3:ea: ff:b8:6f:20:8c:ae:3d:f6:c4:49:ff:ea:4c:ed:f8: 88:2b:85:bb:fd:e5:1d:83:70:96:f5:51:4e:6f:49: 56:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:72:4B:F2:D5:05:23:6A:44:3A:14:0D:2E:45:DD:F8:98:83:C0:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:79:6a:c8:e6:6c:88:d2:2f:ac:4e:53:00:f4:46:86:f3:8e: d4:c9:2e:b9:df:bb:db:6d:d8:e4:0b:be:29:2a:af:db:53:33: be:28:29:d4:81:04:13:e2:3d:2c:79:cf:07:cd:d1:2d:b6:c3: 93:41:3e:f9:90:35:3b:7a:59:21:0e:78:58:83:7e:15:4f:3f: d4:e1:b3:cb:69:c3:a3:59:f7:b2:6a:38:19:3f:1c:38:5a:03: 43:12:1c:54:67:e8:6d:5f:08:25:65:3f:6f:ad:d2:46:01:d4: 21:59:28:98:0e:4b:91:ec:79:51:c4:b6:f2:a4:3b:66:d8:ad: dc:e8:72:a3:10:99:d9:d8:f3:cb:f0:e4:c1:29:72:20:c7:d0: 99:0a:99:bc:2f:d3:11:9e:74:0c:36:b7:bb:de:c8:5e:d5:45: 8d:dd:17:21:e9:8e:a6:8c:cd:6b:8d:2e:91:bf:ee:70:b6:75: d0:6e:52:ea:a4:8c:1b:7e:0c:40:82:06:bc:56:9d:29:79:b6: 99:85:5f:06:f1:87:06:fb:cc:18:af:b5:a3:ed:5e:5a:36:1b: 80:ba:20:16:b3:5e:8c:e7:b7:37:57:09:39:44:45:13:67:05: 61:ad:3f:dd:51:c7:3d:a1:71:9d:4e:69:27:0b:71:da:93:22: f3:52:fd:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXh0H92mEOYwh+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZTc0MzRhN2MtZTcxYS00OGJhLTgwODctOWQ5YTkzNDE5MmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RXPIThwNCY0zU67VB8C3cvbONrwxS0wYkFk WaOePqAXgMlhM2q5LT9mSm7mF/EOqeCVUuqXcHKzEkwrT74fGv72x1KCLabDZoSa rJh/4spUgeui2uwfPTd55FC8FdsP55XUeGBIc3Dz6JLRFrxu9mK4cFsppifQ8BuP +HEkr2iZqgRR5Qva77BshPUlUK5lndgOQSdcrbE2IaD/pjlFJib5OMNRiJ5lP7Ae 8/fff1KtTLUUYK1tDH4+/pYcQKr82Is36LAcXatNiFu2JDKo/F2TRi/4gtBSnlAY i2NN4+r/uG8gjK499sRJ/+pM7fiIK4W7/eUdg3CW9VFOb0lWAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFyS/LVBSNqRDoUDS5F3fiYg8AeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvOTFmODZkYjgtYjNhOS0z Zjg4LTg5NTktZmUzMWJlMTVmNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ5asjmbIjSL6xOUwD0RobzjtTJLrnfu9tt2OQLvikqr9tTM74oKdSB BBPiPSx5zwfN0S22w5NBPvmQNTt6WSEOeFiDfhVPP9Ths8tpw6NZ97JqOBk/HDha A0MSHFRn6G1fCCVlP2+t0kYB1CFZKJgOS5HseVHEtvKkO2bYrdzocqMQmdnY88vw 5MEpciDH0JkKmbwv0xGedAw2t7veyF7VRY3dFyHpjqaMzWuNLpG/7nC2ddBuUuqk jBt+DECCBrxWnSl5tpmFXwbxhwb7zBivtaPtXlo2G4C6IBazXozntzdXCTlERRNn BWGtP91Rxz2hcZ1OaScLcdqTIvNS/Y8= -----END CERTIFICATE-----Generated at Tue Oct 6 20:31:37 2026 by rpki-client