$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa File: db155d25-f432-3f34-9f10-30f49558b253.roa (raw, json) Hash identifier: ICNme0l7tmEE9XS3rz3qyEdisojmCWVh7Z3oBZh93cA= Subject key identifier: BA:61:B2:87:4F:F4:33:35:79:AC:42:9E:06:FB:F5:F2:5E:B4:D4:DD Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584D44FA379BCC52F281702E7080 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 192.111.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:37:9b:cc:52:f2:81:70:2e:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=32584c3d-e097-4dca-911c-41f92e218629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f5:eb:30:a8:2b:aa:4a:f1:99:f1:f7:c7:ee: f0:b3:1f:7c:3c:a7:1a:42:15:2f:7d:18:5a:57:56: 70:fd:94:e5:9d:c0:27:b2:99:7b:64:17:fc:1f:a5: 5e:6b:76:38:ca:66:65:4a:ae:ed:b6:79:0b:69:a2: 06:16:5e:5e:16:76:40:27:1d:36:95:44:7f:3b:77: d7:1a:bd:c3:f7:de:7b:f9:24:63:bb:29:3a:89:59: 07:f3:34:d1:56:ef:b2:a7:5f:bb:ee:de:fb:cf:a0: 20:2f:68:3a:6f:d9:4c:e0:54:73:7c:9d:b0:67:af: 63:cc:d4:64:0b:d0:5c:1a:ee:a4:a8:76:1f:73:cd: 3d:a6:06:27:dc:ae:cd:36:4e:41:bc:e5:13:da:11: 42:73:68:b8:36:21:8e:e7:c6:98:80:cb:b5:9b:ea: 1e:53:c1:bb:d6:a9:7b:e7:1e:f8:a8:e1:29:d0:70: d5:a7:ba:f9:89:2e:28:3a:ce:b2:de:2e:94:9f:e2: 3c:8d:24:d7:51:7f:39:c8:2b:04:c5:80:5c:65:cd: 10:18:45:18:cf:0c:dc:1d:04:b2:76:1c:9b:8d:72: 13:e3:61:83:5d:0a:6d:df:c5:0f:09:6e:5b:54:c9: fb:4e:16:2d:88:f7:91:83:26:97:c1:c7:35:64:1f: 1c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:61:B2:87:4F:F4:33:35:79:AC:42:9E:06:FB:F5:F2:5E:B4:D4:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ae:33:1c:7e:90:52:cd:b6:7e:7f:ae:f8:01:2f:39:49:88: 6c:b9:b8:2d:9a:67:d9:73:b3:22:e7:82:b0:cc:de:29:c0:5b: 0c:9b:7a:1b:2a:5f:67:5a:29:30:8f:2e:e4:36:76:33:38:85: 83:9e:08:f4:61:c2:59:83:46:3e:c2:f3:84:6d:ed:f0:aa:3c: ba:84:bc:0e:58:9e:0c:c1:16:45:f9:04:1b:de:e8:10:fb:a7: 2f:23:19:71:7d:ed:ae:e0:ec:cb:80:49:d8:d5:cb:37:55:38: 12:3b:33:1c:57:65:ca:e2:f7:7b:17:ad:87:7d:48:4f:7e:2a: 88:85:20:90:dc:0d:a1:ab:98:be:71:4f:cc:28:6a:3f:97:1f: 5b:21:56:a6:81:a8:e0:09:c2:b2:bc:90:b4:57:f1:bf:7d:10: bd:f1:16:f9:4e:59:4c:ce:45:80:c4:f9:cc:f4:e1:87:89:68: d3:ca:81:01:1f:1a:55:57:46:7b:14:9f:39:ad:3e:90:df:05: bc:2e:dc:50:5b:f3:68:69:2e:ef:58:df:dc:8e:01:55:ac:a4: a5:f5:6f:a8:0a:0f:c3:8d:ea:db:73:0a:a6:d8:01:e9:d7:8c: 56:9e:59:f2:1e:ac:03:69:5c:71:60:15:80:47:94:d5:79:34: 6f:50:67:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jebzFLygXAucIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MzI1ODRjM2QtZTA5Ny00ZGNhLTkxMWMtNDFmOTJlMjE4NjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfXrMKgrqkrxmfH3x+7wsx98PKcaQhUvfRha V1Zw/ZTlncAnspl7ZBf8H6Vea3Y4ymZlSq7ttnkLaaIGFl5eFnZAJx02lUR/O3fX Gr3D9957+SRjuyk6iVkH8zTRVu+yp1+77t77z6AgL2g6b9lM4FRzfJ2wZ69jzNRk C9BcGu6kqHYfc809pgYn3K7NNk5BvOUT2hFCc2i4NiGO58aYgMu1m+oeU8G71ql7 5x74qOEp0HDVp7r5iS4oOs6y3i6Un+I8jSTXUX85yCsExYBcZc0QGEUYzwzcHQSy dhybjXIT42GDXQpt38UPCW5bVMn7ThYtiPeRgyaXwcc1ZB8cewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLphsodP9DM1eaxCngb79fJetNTdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvZGIxNTVkMjUtZjQzMi0z ZjM0LTlmMTAtMzBmNDk1NThiMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyuMxx+kFLNtn5/rvgBLzlJiGy5uC2aZ9lzsyLngrDM3inAWwybehsq X2daKTCPLuQ2djM4hYOeCPRhwlmDRj7C84Rt7fCqPLqEvA5YngzBFkX5BBve6BD7 py8jGXF97a7g7MuASdjVyzdVOBI7MxxXZcri93sXrYd9SE9+KoiFIJDcDaGrmL5x T8woaj+XH1shVqaBqOAJwrK8kLRX8b99EL3xFvlOWUzORYDE+cz04YeJaNPKgQEf GlVXRnsUnzmtPpDfBbwu3FBb82hpLu9Y39yOAVWspKX1b6gKD8ON6ttzCqbYAenX jFaeWfIerANpXHFgFYBHlNV5NG9QZ/s= -----END CERTIFICATE-----Generated at Thu Mar 26 17:54:12 2026 by rpki-client