$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa File: 91f86db8-b3a9-3f88-8959-fe31be15f550.roa (raw, json) Hash identifier: t2knuNhZKJbL+xrfsA1zFub3y+51q6icgy5xH4IBaPo= Subject key identifier: D5:10:C3:3A:4A:32:20:37:E5:F0:C6:FA:CA:19:B1:1B:9D:30:67:0A Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584AA42B77F22B8BA43F35C15D80 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 14618 IP address blocks: 192.111.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:77:f2:2b:8b:a4:3f:35:c1:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=7eaa1113-f8f3-4e97-9b97-a72c5e1e0a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:b9:f2:46:69:92:31:6c:2a:a9:16:84:ed: a6:aa:6e:44:6d:68:d4:89:4a:28:dc:d4:51:c4:84: a1:2b:93:2b:b9:4c:a1:97:fe:1e:fd:f0:84:1e:d5: 39:49:c5:74:4c:5c:ba:72:ee:71:5a:fb:ba:9a:dd: 3f:d9:9c:09:39:e4:f9:86:a6:d7:05:eb:37:9d:23: 31:7c:38:d7:12:3e:28:5a:1b:80:31:75:78:29:51: 26:b8:5c:b7:ca:64:3d:3d:cd:23:9c:d7:fa:e6:c6: ad:30:80:05:97:d9:92:02:57:20:f6:32:95:c9:3a: 31:40:77:4f:f8:df:3a:06:8d:66:c1:28:fa:5f:2c: 8c:0a:5e:07:74:b4:10:e5:dd:b0:1c:a4:63:19:92: 1c:dc:01:ee:15:73:42:b6:b5:b4:3a:29:b7:62:fa: 87:db:8e:cc:5d:64:9b:eb:c6:b2:8f:35:e6:bc:5b: 88:8f:8d:30:e0:51:72:d2:f0:61:48:61:82:b0:e8: 2d:f0:4e:f0:1d:ae:76:57:14:d6:85:9f:03:b1:f5: af:f5:9e:e8:89:ae:ee:d4:ff:97:20:31:81:1e:08: 06:80:e5:99:91:ee:d8:e3:0d:1b:a8:bc:ba:3a:c7: 30:ae:64:1f:1f:f4:c3:96:20:20:a3:36:9c:66:98: 66:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:10:C3:3A:4A:32:20:37:E5:F0:C6:FA:CA:19:B1:1B:9D:30:67:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:6c:2a:98:a5:f7:85:dc:3f:9e:ed:26:11:a3:5a:51:47:df: 21:76:21:71:6c:f3:41:ab:a4:51:17:51:8f:fc:fd:9e:96:79: c0:60:97:b2:8d:28:ef:f0:95:14:7b:bb:b9:32:7a:b7:b9:18: 48:17:23:5e:52:43:0f:fb:75:27:60:27:a0:14:41:91:c6:05: 1a:49:00:be:a8:99:63:20:1c:17:7a:37:0f:98:11:07:4a:e4: ff:af:d9:8c:f2:95:25:87:b9:63:74:5d:87:87:d0:2c:70:e9: 86:68:74:b8:a2:84:85:90:83:dc:0f:bb:49:f8:0d:39:f5:06: ae:54:3c:2f:b7:e7:31:2d:2a:aa:04:cf:12:49:5a:62:e1:02: 40:da:59:55:ac:cb:3e:34:91:91:01:bd:1c:8d:90:87:c6:c7: 0b:dd:24:fa:97:1f:2f:2b:b6:f0:d5:ee:48:18:91:6b:7f:cb: 61:d6:cd:f5:e7:2d:d2:03:55:bc:0b:4e:90:0c:0f:7c:e3:0f: e6:1d:42:ac:42:d0:9e:bb:71:7f:64:5b:79:41:ec:5e:8f:26: d6:52:1f:2f:90:1f:d4:d7:15:49:43:5f:73:4c:80:97:4e:21: 7b:63:a6:c3:56:ba:70:1e:92:c4:01:61:a8:79:c7:d9:20:4e: fd:2c:ff:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3fyK4ukPzXBXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk N2VhYTExMTMtZjhmMy00ZTk3LTliOTctYTcyYzVlMWUwYTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1O58kZpkjFsKqkWhO2mqm5EbWjUiUoo3NRR xIShK5MruUyhl/4e/fCEHtU5ScV0TFy6cu5xWvu6mt0/2ZwJOeT5hqbXBes3nSMx fDjXEj4oWhuAMXV4KVEmuFy3ymQ9Pc0jnNf65satMIAFl9mSAlcg9jKVyToxQHdP +N86Bo1mwSj6XyyMCl4HdLQQ5d2wHKRjGZIc3AHuFXNCtrW0Oim3YvqH247MXWSb 68ayjzXmvFuIj40w4FFy0vBhSGGCsOgt8E7wHa52VxTWhZ8DsfWv9Z7oia7u1P+X IDGBHggGgOWZke7Y4w0bqLy6OscwrmQfH/TDliAgozacZphmWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUQwzpKMiA35fDG+soZsRudMGcKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvOTFmODZkYjgtYjNhOS0z Zjg4LTg5NTktZmUzMWJlMTVmNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhsKpil94XcP57tJhGjWlFH3yF2IXFs80GrpFEXUY/8/Z6WecBgl7KN KO/wlRR7u7kyere5GEgXI15SQw/7dSdgJ6AUQZHGBRpJAL6omWMgHBd6Nw+YEQdK 5P+v2YzylSWHuWN0XYeH0Cxw6YZodLiihIWQg9wPu0n4DTn1Bq5UPC+35zEtKqoE zxJJWmLhAkDaWVWsyz40kZEBvRyNkIfGxwvdJPqXHy8rtvDV7kgYkWt/y2HWzfXn LdIDVbwLTpAMD3zjD+YdQqxC0J67cX9kW3lB7F6PJtZSHy+QH9TXFUlDX3NMgJdO IXtjpsNWunAeksQBYah5x9kgTv0s//c= -----END CERTIFICATE-----Generated at Mon Aug 4 19:06:33 2025 by rpki-client