$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa File: 38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa (raw, json) Hash identifier: RhokfkKaHmYjJDdlHVXaSnMLjg4niL1Y0g6ZNowhUOQ= Subject key identifier: B3:8F:A4:8C:B8:5F:E3:52:EC:D3:7C:DB:08:DC:F9:01:F1:4A:BA:61 Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584F698D78672812929C2ECC0100 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 7224 IP address blocks: 192.111.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:78:67:28:12:92:9c:2e:cc:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=0256bd0d-d28d-4d0b-9610-61a3fdaa20f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:d8:61:ba:82:1e:1b:89:43:b0:2e:ca:6d: 36:7c:13:fe:25:a8:b0:ad:46:32:20:ce:ea:77:f1: 6d:e3:5c:02:a2:68:07:aa:f3:9d:8e:3a:cc:33:d0: 55:74:85:a5:61:83:c8:e6:a5:8e:8d:ab:ac:d0:c1: 92:95:86:ff:5f:b8:4d:92:e6:45:8b:28:d7:7c:7f: 50:57:87:58:3d:f1:0a:c5:28:90:f9:e9:9d:08:54: 91:0d:16:88:c4:96:61:8e:68:05:6b:c2:73:c1:e1: b9:db:f8:cd:2a:89:fd:de:ef:56:40:6a:b9:a9:a8: 59:cf:cd:f5:ee:16:35:5f:a5:43:1d:a1:68:47:b3: 63:b2:74:54:82:f1:ff:ee:de:03:ec:40:23:1b:d8: 13:11:06:87:71:2b:60:75:93:9e:4a:59:be:8c:19: 0a:5c:d0:8d:b5:68:b1:da:92:d2:90:4e:c1:eb:b8: 7e:d6:5c:13:60:42:b0:32:ea:f6:1f:12:38:1c:2a: e3:87:2c:46:be:90:f2:78:04:ad:89:22:5d:fa:9d: 72:da:7d:78:e6:f7:ed:b5:95:5f:b6:0e:3d:c5:65: b0:0b:76:61:93:58:1e:8b:d8:40:ba:c5:bb:90:b0: 77:aa:97:a1:2e:12:a3:66:6d:b3:ab:b2:53:03:3a: 39:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8F:A4:8C:B8:5F:E3:52:EC:D3:7C:DB:08:DC:F9:01:F1:4A:BA:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:28:26:88:80:2d:6d:9e:3e:5e:e6:f0:34:13:3e:0f:28:cb: d6:93:85:8d:28:09:56:b0:51:f6:6b:54:7c:8f:23:0f:15:ff: 56:a6:34:9d:0c:09:d8:66:ac:39:12:78:5f:0d:21:f4:74:d1: 13:3a:41:b5:8c:dc:b7:bb:cb:bb:c7:01:1b:a3:8e:51:9c:6b: 07:a6:32:5a:11:a9:ee:95:56:fc:a1:d2:d5:23:7f:72:fa:55: fa:fc:c4:90:7d:68:1a:21:f4:88:e7:22:06:0a:93:46:12:67: e2:52:8e:6d:e0:d8:c2:54:8a:1b:ed:ef:f9:77:2e:22:7d:55: f0:a2:94:e5:c8:cf:71:f8:4f:4c:ab:04:ad:8a:24:5a:74:ca: ed:aa:d2:44:19:ec:75:64:61:1a:b2:62:5c:7c:a9:d8:9a:b2: a5:0a:65:61:23:4e:2f:15:1e:96:83:7f:33:76:54:1f:b1:23: a8:a9:81:f9:fe:7c:fb:3d:b7:63:2e:72:3f:d0:93:a9:4c:f5: 3c:d0:b6:59:50:36:2f:14:0f:d5:3b:84:5a:5d:fa:52:a1:d6: 1c:a4:41:b2:c9:f0:cf:63:b1:89:02:1c:a4:a2:45:e0:b6:8e: af:5a:13:83:7b:66:47:0b:d6:cf:f1:fc:4e:a7:b0:f7:7a:c8: 84:dc:a6:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXhnKBKSnC7MAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk MDI1NmJkMGQtZDI4ZC00ZDBiLTk2MTAtNjFhM2ZkYWEyMGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgjYYbqCHhuJQ7Auym02fBP+JaiwrUYyIM7q d/Ft41wComgHqvOdjjrMM9BVdIWlYYPI5qWOjaus0MGSlYb/X7hNkuZFiyjXfH9Q V4dYPfEKxSiQ+emdCFSRDRaIxJZhjmgFa8JzweG52/jNKon93u9WQGq5qahZz831 7hY1X6VDHaFoR7NjsnRUgvH/7t4D7EAjG9gTEQaHcStgdZOeSlm+jBkKXNCNtWix 2pLSkE7B67h+1lwTYEKwMur2HxI4HCrjhyxGvpDyeAStiSJd+p1y2n145vfttZVf tg49xWWwC3Zhk1gei9hAusW7kLB3qpehLhKjZm2zq7JTAzo5IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOPpIy4X+NS7NN82wjc+QHxSrphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvMzhjYmFmZTUtYWMxZi0z MDRlLTk5YzQtN2IwMGFiNDJlOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcoJoiALW2ePl7m8DQTPg8oy9aThY0oCVawUfZrVHyPIw8V/1amNJ0M CdhmrDkSeF8NIfR00RM6QbWM3Le7y7vHARujjlGcawemMloRqe6VVvyh0tUjf3L6 Vfr8xJB9aBoh9IjnIgYKk0YSZ+JSjm3g2MJUihvt7/l3LiJ9VfCilOXIz3H4T0yr BK2KJFp0yu2q0kQZ7HVkYRqyYlx8qdiasqUKZWEjTi8VHpaDfzN2VB+xI6ipgfn+ fPs9t2Mucj/Qk6lM9TzQtllQNi8UD9U7hFpd+lKh1hykQbLJ8M9jsYkCHKSiReC2 jq9aE4N7ZkcL1s/x/E6nsPd6yITcpgw= -----END CERTIFICATE-----Generated at Sat Oct 10 17:06:28 2026 by rpki-client