$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa File: db155d25-f432-3f34-9f10-30f49558b253.roa (raw, json) Hash identifier: 7VQohWtNcC5ZmEGnwqDtrSknqSIa0weTQBrrNsLggLc= Subject key identifier: 4F:73:5C:26:6B:7A:DB:59:7F:42:2C:F6:29:12:08:03:69:E0:59:55 Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584AA42B7EA2A25C129DFB9AA580 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 192.111.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:7e:a2:a2:5c:12:9d:fb:9a:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=712a3a6e-c325-4ced-8f55-1d2bd3eb461b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:e0:79:01:f6:e3:f5:ec:7f:39:8a:6c:a4: d0:2d:3e:72:f7:54:2c:bc:ed:98:35:d0:04:be:2e: 71:84:89:7e:d4:41:d4:54:30:60:5f:fd:97:6c:ba: a8:24:42:da:34:e7:1e:4b:33:83:ff:af:87:ca:8e: 3a:f9:90:03:11:a6:3e:3b:f2:66:87:72:71:a0:cb: 8e:b6:39:7a:52:e8:4c:59:d1:e3:fb:ef:50:bb:de: cd:61:74:c1:52:91:88:3d:51:c8:03:e9:d6:3c:57: 5f:40:8d:8f:d8:63:5e:13:68:c3:3f:89:87:cd:5b: b9:d9:c1:e3:ad:61:d4:8d:00:45:5d:28:b5:e4:39: 15:e6:da:5a:c3:7c:65:a0:26:8b:93:72:66:93:51: 9b:4b:1b:6c:39:57:cb:b3:81:8c:f3:f9:6c:ca:56: 13:b5:a5:73:58:0d:1c:8b:4a:3c:39:20:e3:15:f7: f6:0e:61:85:e4:25:2d:58:fe:79:c8:34:4a:c8:2e: 42:0a:9e:7a:97:6f:bb:48:39:07:21:61:e5:54:fe: dc:93:9d:2e:74:43:7d:78:ee:e9:37:4e:ef:fe:76: 4c:a9:df:2c:b1:f7:a0:fb:8d:51:11:d7:d2:fa:00: 98:94:a7:f9:bb:b1:64:75:f1:01:0b:1b:80:5d:9b: 6f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:73:5C:26:6B:7A:DB:59:7F:42:2C:F6:29:12:08:03:69:E0:59:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2b:85:0b:39:4e:0a:d5:f7:04:61:4c:09:99:91:ff:c8:3a: 58:47:08:ce:87:1b:7d:cc:65:4f:5c:3a:f4:e0:4d:f0:ca:3f: 02:df:4e:c9:c0:73:a1:93:95:78:a9:ac:23:30:23:c4:71:c7: 68:58:19:67:e5:66:e5:47:89:21:f4:55:58:fb:20:10:25:ac: 8b:06:c0:7b:90:7b:92:70:65:0f:e8:cd:e8:9e:c2:3a:2c:24: 61:95:28:87:42:64:d4:ed:ed:ce:c0:7b:f3:3b:fe:e7:61:dc: be:e3:77:66:96:f5:ab:ad:6e:85:62:f9:17:9a:62:65:5f:2c: 86:80:1d:d3:19:df:15:44:03:bb:b2:1e:3a:16:b0:2c:89:69: 27:73:7f:b5:e9:f0:98:ee:03:ba:2b:a8:a4:87:4c:27:f6:12: a3:6d:f8:c8:06:7f:85:11:12:f3:c6:9c:d3:eb:9e:e4:b1:0d: 5a:04:9d:60:86:91:9b:9b:29:93:c1:0c:4a:14:67:09:75:de: 92:2d:8d:c7:f4:1f:87:0b:92:24:9b:c7:8b:97:36:69:b1:ad: 17:2a:f0:29:50:39:bb:ce:23:c3:e3:37:91:84:92:95:7a:31: 30:58:ce:0a:a8:55:d4:0f:19:42:6d:26:9b:03:5b:ad:81:c4: 85:3a:19:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK36iolwSnfuapYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NzEyYTNhNmUtYzMyNS00Y2VkLThmNTUtMWQyYmQzZWI0NjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7fgeQH24/XsfzmKbKTQLT5y91QsvO2YNdAE vi5xhIl+1EHUVDBgX/2XbLqoJELaNOceSzOD/6+Hyo46+ZADEaY+O/Jmh3JxoMuO tjl6UuhMWdHj++9Qu97NYXTBUpGIPVHIA+nWPFdfQI2P2GNeE2jDP4mHzVu52cHj rWHUjQBFXSi15DkV5tpaw3xloCaLk3Jmk1GbSxtsOVfLs4GM8/lsylYTtaVzWA0c i0o8OSDjFff2DmGF5CUtWP55yDRKyC5CCp56l2+7SDkHIWHlVP7ck50udEN9eO7p N07v/nZMqd8ssfeg+41REdfS+gCYlKf5u7FkdfEBCxuAXZtvAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9zXCZrettZf0Is9ikSCANp4FlVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvZGIxNTVkMjUtZjQzMi0z ZjM0LTlmMTAtMzBmNDk1NThiMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsrhQs5TgrV9wRhTAmZkf/IOlhHCM6HG33MZU9cOvTgTfDKPwLfTsnA c6GTlXiprCMwI8Rxx2hYGWflZuVHiSH0VVj7IBAlrIsGwHuQe5JwZQ/ozeiewjos JGGVKIdCZNTt7c7Ae/M7/udh3L7jd2aW9autboVi+ReaYmVfLIaAHdMZ3xVEA7uy HjoWsCyJaSdzf7Xp8JjuA7orqKSHTCf2EqNt+MgGf4UREvPGnNPrnuSxDVoEnWCG kZubKZPBDEoUZwl13pItjcf0H4cLkiSbx4uXNmmxrRcq8ClQObvOI8PjN5GEkpV6 MTBYzgqoVdQPGUJtJpsDW62BxIU6GVo= -----END CERTIFICATE-----Generated at Mon Aug 4 14:54:24 2025 by rpki-client