$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa File: 3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa (raw, json) Hash identifier: 68eVfrcc1l1DHmObrQeiCj1HUFBIvlSpHoP5jaTT3a8= Subject key identifier: 0F:8E:FE:5D:9B:11:72:E6:41:04:54:C3:7F:76:2B:59:B1:85:71:D4 Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584E253EFB2741459ACB785B3980 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 7224 IP address blocks: 192.111.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3e:fb:27:41:45:9a:cb:78:5b:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=98465942-11b2-4c5e-8e8e-40c815746004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5a:86:2a:99:ab:ab:f1:0b:9c:bd:95:0e:fe: 9c:a3:ed:3d:19:3b:3b:5e:30:15:32:f2:ca:6f:41: c7:ca:70:6d:72:5e:93:32:69:ef:43:f0:30:03:b8: 53:b8:72:6d:f4:1b:10:5f:b0:6e:bb:e3:0b:9d:16: ab:fb:29:d2:0c:21:df:56:f9:46:92:cc:e7:52:5a: c4:a4:46:89:ba:b9:06:2f:64:01:01:a2:29:48:81: e6:ae:d0:a3:01:35:b0:92:93:2b:ca:a0:1e:25:7d: 0c:19:af:87:25:64:d4:9a:4b:5b:12:32:17:29:d4: 37:97:4e:29:65:b9:eb:42:a3:ba:a1:e2:f7:66:70: 78:92:60:2b:4d:98:82:c0:37:3f:be:dd:8f:00:9e: 0b:0b:39:aa:04:7b:9f:d0:74:a9:ef:c0:f1:57:23: d1:b2:de:9d:15:fa:82:7f:a6:9c:8b:7c:a0:44:27: cd:74:1c:92:ad:a6:67:3b:3c:40:25:c0:ed:c0:62: 2d:b4:a6:c1:22:93:2e:63:52:40:33:e1:aa:91:b2: 3a:9c:1d:42:ca:49:70:24:47:6c:dc:95:90:d1:1c: f8:cb:26:b8:cf:5c:a9:7a:c1:ae:ad:0f:24:8b:59: 4c:8c:11:af:24:23:63:7d:2f:f6:c5:d7:4f:3c:f4: fe:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8E:FE:5D:9B:11:72:E6:41:04:54:C3:7F:76:2B:59:B1:85:71:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:62:3c:33:08:3c:45:ca:53:14:22:20:12:28:b3:55:86:3b: 1c:02:80:cd:88:4a:4d:5f:c2:e9:66:ee:d5:2a:af:b8:7f:46: cd:95:38:5a:65:9e:f1:e2:07:b6:fc:02:91:b1:d8:ac:8d:2a: 8c:e1:34:29:23:32:d1:60:72:30:ae:40:6b:02:40:5b:9f:ce: 4d:c6:cd:b7:9f:12:f2:38:2c:84:fe:9b:eb:05:9c:7e:13:77: 92:64:ae:86:4d:f8:cb:b6:cb:6c:e0:28:4d:87:9b:0f:da:43: d0:f6:b8:29:4d:89:27:ce:af:34:5a:1b:b7:52:63:39:94:5a: 14:5e:52:3d:cc:05:e6:ab:14:44:b3:e2:f7:c0:9f:65:d5:3e: fe:cb:b0:a1:1b:00:06:6e:d9:cd:35:94:f4:3b:f5:23:76:2c: 1a:0b:92:b5:99:9c:6b:71:f4:d6:27:1e:8f:c3:c1:11:9b:ec: 61:b4:c0:c8:7c:e2:a6:1f:b9:27:e2:c9:a4:d1:4a:96:14:b5: e8:59:c5:7f:b9:e4:28:86:b5:6b:91:09:35:aa:01:a5:b7:e4: 4c:e0:51:50:fc:52:04:16:c5:5a:94:0c:47:3f:98:ce:c6:cc: f8:a3:b4:9d:85:5d:14:39:15:61:49:73:8f:4e:6b:6e:ce:7d: 27:fd:24:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPvsnQUWay3hbOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk OTg0NjU5NDItMTFiMi00YzVlLThlOGUtNDBjODE1NzQ2MDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFqGKpmrq/ELnL2VDv6co+09GTs7XjAVMvLK b0HHynBtcl6TMmnvQ/AwA7hTuHJt9BsQX7Buu+MLnRar+ynSDCHfVvlGksznUlrE pEaJurkGL2QBAaIpSIHmrtCjATWwkpMryqAeJX0MGa+HJWTUmktbEjIXKdQ3l04p ZbnrQqO6oeL3ZnB4kmArTZiCwDc/vt2PAJ4LCzmqBHuf0HSp78DxVyPRst6dFfqC f6aci3ygRCfNdBySraZnOzxAJcDtwGIttKbBIpMuY1JAM+GqkbI6nB1CyklwJEds 3JWQ0Rz4yya4z1ypesGurQ8ki1lMjBGvJCNjfS/2xddPPPT+BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+O/l2bEXLmQQRUw392K1mxhXHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvM2ZiMDhkYzctYmVlYS0z NDU4LTkwOGQtOWIxYThiZjZhMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZiPDMIPEXKUxQiIBIos1WGOxwCgM2ISk1fwulm7tUqr7h/Rs2VOFpl nvHiB7b8ApGx2KyNKozhNCkjMtFgcjCuQGsCQFufzk3GzbefEvI4LIT+m+sFnH4T d5JkroZN+Mu2y2zgKE2Hmw/aQ9D2uClNiSfOrzRaG7dSYzmUWhReUj3MBearFESz 4vfAn2XVPv7LsKEbAAZu2c01lPQ79SN2LBoLkrWZnGtx9NYnHo/DwRGb7GG0wMh8 4qYfuSfiyaTRSpYUtehZxX+55CiGtWuRCTWqAaW35EzgUVD8UgQWxVqUDEc/mM7G zPijtJ2FXRQ5FWFJc49Oa27OfSf9JCg= -----END CERTIFICATE-----Generated at Sat Jun 13 10:00:00 2026 by rpki-client