$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa File: 3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa (raw, json) Hash identifier: bNOn5ypr1OuaioHCcHaqSJ4v2SDcAk5UrQS9Ly4yYRQ= Subject key identifier: 23:F7:FF:0F:24:77:A6:39:0D:96:4D:25:B8:44:0D:B0:57:EE:15:AD Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584F698D784A64AAE9D4522DCE00 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 7224 IP address blocks: 192.111.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:78:4a:64:aa:e9:d4:52:2d:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=d62074d8-2f38-42ee-8c7c-e225a68e004a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9e:0e:c3:49:dc:dc:f2:81:92:dd:f2:d9:f9: 1b:e7:78:03:e0:b5:c7:20:00:18:8f:35:5e:3d:0d: 27:43:bb:ed:41:e8:7b:2a:a2:49:e0:cb:5a:a3:39: 18:bd:30:0c:05:88:09:02:83:25:ab:c6:ed:af:b4: f3:56:90:fc:99:bf:6d:73:0c:80:e1:09:a0:a3:64: 91:11:92:e0:61:79:29:dc:4b:a1:0b:50:01:d2:4d: 39:0c:b0:2b:82:5f:fe:5c:f1:af:59:06:09:fa:db: e2:af:ea:e8:7f:90:36:c0:25:5d:46:06:33:16:f1: a7:44:b0:41:c9:24:42:4c:1f:26:f6:a1:fa:78:f5: 81:ac:25:27:83:66:f6:f4:7c:95:d7:06:83:33:7f: 74:a5:1d:37:f3:8c:84:ad:24:04:8b:52:59:a6:bf: 73:6f:2a:6b:ae:c6:df:f2:fe:79:ea:41:89:0a:7f: 24:7d:de:49:b0:cb:20:72:6c:da:1d:06:1e:fa:d3: ce:96:bb:ff:aa:bb:ab:78:2e:da:9a:83:72:96:95: 33:1a:05:01:46:b9:0f:20:0b:65:cb:35:6d:ac:d9: 8b:59:27:03:3e:06:48:8a:14:9a:2c:5b:f9:ec:a5: c7:e0:ca:49:04:b6:bb:66:d2:31:b1:60:3f:e3:66: 77:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F7:FF:0F:24:77:A6:39:0D:96:4D:25:B8:44:0D:B0:57:EE:15:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b2:58:25:95:9a:82:03:d1:f6:48:48:86:e6:52:42:c5:f9: be:e6:db:74:7d:b7:7d:26:fc:32:fb:e9:4d:e4:fa:bb:f4:a2: df:5f:6c:7e:4d:c9:45:d1:1f:3e:06:8c:60:1c:ba:f9:37:4a: 19:36:ce:0f:ad:fd:36:95:e4:14:ba:d9:21:4c:59:63:61:4b: b6:fe:8a:e8:5a:33:94:6d:8b:f9:8f:1d:34:b4:45:54:e3:e8: 7f:fa:88:e9:93:b2:9b:b0:69:75:0a:61:15:71:45:d4:7b:fd: 2a:cf:02:9f:c5:3f:7b:4c:c0:6b:bf:33:b3:33:e3:1d:f1:b2: 90:c4:aa:33:68:0e:69:db:5d:aa:02:f6:cd:21:17:74:d5:10: 2a:f5:0f:eb:bc:e6:51:41:e6:9c:5c:4c:6d:f8:cd:2f:33:52: c1:ba:b7:36:bf:7f:9b:cc:f3:78:86:7f:76:7a:cc:2c:4b:7f: 93:05:ae:63:eb:2d:16:5f:52:4f:c3:d9:60:c7:25:5f:25:48: 90:4f:28:33:b8:26:85:a0:12:95:5d:2c:33:53:00:db:76:c3: 58:95:28:42:b5:87:22:98:48:70:4c:ff:a5:01:58:35:fd:64: 9c:da:12:24:c4:18:8b:bb:63:ec:03:02:67:e8:19:6e:96:6c: d2:89:22:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXhKZKrp1FItzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZDYyMDc0ZDgtMmYzOC00MmVlLThjN2MtZTIyNWE2OGUwMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ4Ow0nc3PKBkt3y2fkb53gD4LXHIAAYjzVe PQ0nQ7vtQeh7KqJJ4MtaozkYvTAMBYgJAoMlq8btr7TzVpD8mb9tcwyA4Qmgo2SR EZLgYXkp3EuhC1AB0k05DLArgl/+XPGvWQYJ+tvir+rof5A2wCVdRgYzFvGnRLBB ySRCTB8m9qH6ePWBrCUng2b29HyV1waDM390pR0384yErSQEi1JZpr9zbyprrsbf 8v556kGJCn8kfd5JsMsgcmzaHQYe+tPOlrv/qrureC7amoNylpUzGgUBRrkPIAtl yzVtrNmLWScDPgZIihSaLFv57KXH4MpJBLa7ZtIxsWA/42Z3FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCP3/w8kd6Y5DZZNJbhEDbBX7hWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvM2ZiMDhkYzctYmVlYS0z NDU4LTkwOGQtOWIxYThiZjZhMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSyWCWVmoID0fZISIbmUkLF+b7m23R9t30m/DL76U3k+rv0ot9fbH5N yUXRHz4GjGAcuvk3Shk2zg+t/TaV5BS62SFMWWNhS7b+iuhaM5Rti/mPHTS0RVTj 6H/6iOmTspuwaXUKYRVxRdR7/SrPAp/FP3tMwGu/M7Mz4x3xspDEqjNoDmnbXaoC 9s0hF3TVECr1D+u85lFB5pxcTG34zS8zUsG6tza/f5vM83iGf3Z6zCxLf5MFrmPr LRZfUk/D2WDHJV8lSJBPKDO4JoWgEpVdLDNTANt2w1iVKEK1hyKYSHBM/6UBWDX9 ZJzaEiTEGIu7Y+wDAmfoGW6WbNKJIlw= -----END CERTIFICATE-----Generated at Thu Oct 8 15:28:42 2026 by rpki-client