$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa File: db155d25-f432-3f34-9f10-30f49558b253.roa (raw, json) Hash identifier: JDDT3to8JMqmbVAAlLH0ctzsoDnuPyRs+xCVI+E0cCw= Subject key identifier: 0E:BB:2A:E1:AA:0E:08:8D:08:84:C4:71:56:99:30:C4:D4:C5:A3:D4 Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584B84E7761E165C0025113514A0 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 192.111.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:76:1e:16:5c:00:25:11:35:14:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=1a62387e-f3e5-438e-9d93-0252c46ddea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7e:25:77:41:95:a2:83:c9:ec:62:d0:bd:fc: 90:13:ab:f7:96:43:d0:e4:4c:d4:d7:67:32:e0:c8: 1b:31:04:a8:6c:25:6a:01:af:c8:f6:de:17:32:4f: 73:19:0c:04:24:4f:0b:a5:22:d2:87:38:5d:0a:ca: 67:81:b6:ba:93:e0:d6:e6:17:a2:52:f1:31:ff:cd: c8:ff:57:39:88:d3:d9:96:51:6a:34:3c:28:43:bf: 96:ce:3a:9b:07:d3:2f:1d:e7:0b:7d:0d:4d:ef:83: d1:1a:2c:6e:41:d3:33:d1:eb:44:e1:e6:e1:4f:c6: a4:25:b7:d5:f4:d1:d8:1d:0f:33:15:c5:09:f6:44: 57:5a:c7:0a:f3:72:37:96:17:de:c6:b3:47:cc:32: 2d:19:41:39:b5:c4:12:3b:ae:f3:0d:4d:2b:e2:73: 99:b1:90:1d:d0:d5:ac:02:d5:f8:45:ea:e2:9a:f6: bd:6c:fa:b0:7e:af:72:2e:62:cd:a9:a2:9d:ad:18: 09:e4:4a:07:a2:e3:1a:ed:ed:0c:36:24:a5:3f:e7: d5:dc:01:93:41:18:0b:2e:23:6a:11:00:1f:a9:06: 57:59:4e:51:9a:4c:b1:9d:f5:6b:47:d5:9e:06:d7: 65:77:2d:8b:c1:1b:60:67:5b:4e:0d:45:cd:8b:11: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BB:2A:E1:AA:0E:08:8D:08:84:C4:71:56:99:30:C4:D4:C5:A3:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:4a:c0:a1:db:47:64:42:b7:fc:56:97:c8:d9:f1:b6:70:1d: 5d:42:ed:85:8e:0e:47:a2:4f:da:63:b4:ca:37:80:bc:05:ff: e9:da:7c:09:5a:db:f5:98:f3:38:08:fc:02:ce:89:3e:30:41: a4:5b:62:72:8a:fc:74:49:56:1d:86:1c:bd:fc:c9:76:a8:46: c7:d2:67:94:ce:4d:7d:0f:4e:4d:28:92:67:b0:41:fb:69:2b: b0:f9:61:0c:92:af:e5:7e:40:ac:1b:b5:5e:87:dc:ff:39:41: 05:a6:f3:b8:6f:33:b6:98:c2:c1:16:e3:1a:8c:b1:8f:63:2f: 76:ff:0e:73:0c:fb:ed:44:9e:9a:97:27:f6:6b:65:79:1a:55: ff:88:d2:18:31:bc:f8:d1:92:49:06:ac:fd:c0:f8:3c:8a:71: 66:70:b6:5e:96:fe:cd:88:b0:fa:29:34:7c:02:ba:66:1d:ce: a2:09:b9:9d:d3:04:d1:93:1c:5c:87:c0:22:b4:81:c1:4a:68: cf:c4:f9:d6:62:fa:d0:19:cf:2b:a2:84:81:58:b3:73:5b:3c: cd:8f:fc:80:f5:68:0d:90:db:71:aa:23:37:86:1c:64:89:26: 99:d6:31:a0:b1:b0:f5:06:6b:89:51:db:28:ad:24:28:44:f1: 9f:09:bf:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53YeFlwAJRE1FKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MWE2MjM4N2UtZjNlNS00MzhlLTlkOTMtMDI1MmM0NmRkZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX4ld0GVooPJ7GLQvfyQE6v3lkPQ5EzU12cy 4MgbMQSobCVqAa/I9t4XMk9zGQwEJE8LpSLShzhdCspngba6k+DW5heiUvEx/83I /1c5iNPZllFqNDwoQ7+WzjqbB9MvHecLfQ1N74PRGixuQdMz0etE4ebhT8akJbfV 9NHYHQ8zFcUJ9kRXWscK83I3lhfexrNHzDItGUE5tcQSO67zDU0r4nOZsZAd0NWs AtX4Rerimva9bPqwfq9yLmLNqaKdrRgJ5EoHouMa7e0MNiSlP+fV3AGTQRgLLiNq EQAfqQZXWU5RmkyxnfVrR9WeBtdldy2LwRtgZ1tODUXNixEyRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA67KuGqDgiNCITEcVaZMMTUxaPUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvZGIxNTVkMjUtZjQzMi0z ZjM0LTlmMTAtMzBmNDk1NThiMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNKwKHbR2RCt/xWl8jZ8bZwHV1C7YWODkeiT9pjtMo3gLwF/+nafAla 2/WY8zgI/ALOiT4wQaRbYnKK/HRJVh2GHL38yXaoRsfSZ5TOTX0PTk0okmewQftp K7D5YQySr+V+QKwbtV6H3P85QQWm87hvM7aYwsEW4xqMsY9jL3b/DnMM++1EnpqX J/ZrZXkaVf+I0hgxvPjRkkkGrP3A+DyKcWZwtl6W/s2IsPopNHwCumYdzqIJuZ3T BNGTHFyHwCK0gcFKaM/E+dZi+tAZzyuihIFYs3NbPM2P/ID1aA2Q23GqIzeGHGSJ JpnWMaCxsPUGa4lR2yitJChE8Z8Jv70= -----END CERTIFICATE-----Generated at Mon Oct 20 15:39:48 2025 by rpki-client