$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa File: 0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa (raw, json) Hash identifier: t+ydfjh8Xcj1mwPHOzTn4VPsbdev1DpUr0PFNTuikzk= Subject key identifier: 06:DA:EA:58:79:82:FD:4A:92:B7:6E:C6:FA:F3:E5:BD:FE:D0:FB:FA Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584AB220C6ADD39FB0D0C96736C0 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 9009 IP address blocks: 168.91.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:c6:ad:d3:9f:b0:d0:c9:67:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=9a7a710a-1750-42fc-aab4-d3f95b016909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e6:e5:c1:63:99:7a:86:fc:a9:90:21:2a:fa: fb:dc:13:7d:dd:6c:49:b9:55:8d:29:0f:c2:1c:58: e5:76:5a:27:23:32:cf:bb:f4:71:37:00:33:a9:83: 02:a6:3e:67:ba:bf:48:02:56:2c:25:a5:9b:a1:a6: 0f:1d:53:38:eb:52:df:eb:eb:f4:b4:28:c7:c2:49: 7b:a8:94:dc:ac:f2:dd:80:4c:09:4b:f6:7b:2f:96: f4:1b:80:67:5c:28:56:65:73:88:2c:06:48:c5:f8: 03:a0:43:d1:68:ae:de:f8:de:fa:e2:29:2b:9c:cd: cd:f5:70:6d:2c:d7:de:7a:82:52:09:ff:1a:a2:02: 85:41:36:e5:1c:b5:88:4d:c6:4d:d2:38:67:02:06: b7:7d:55:d8:8c:68:83:ad:ef:fc:69:c9:ce:12:9b: bf:6d:d5:dd:ea:78:2d:50:b4:85:0e:ee:43:51:e0: d4:54:6c:3d:06:cb:61:17:35:a7:24:ca:c6:aa:fe: e6:f0:07:a1:1b:f1:8c:37:c4:21:91:e4:48:5f:ce: 85:0c:94:d7:d0:c8:47:de:69:f9:38:7c:e7:0d:d3: 53:47:50:e8:e1:9c:8d:be:f4:30:8b:17:60:76:03: d9:e8:a8:7c:c0:58:48:3e:7a:50:2b:35:d6:fc:c4: 7b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DA:EA:58:79:82:FD:4A:92:B7:6E:C6:FA:F3:E5:BD:FE:D0:FB:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:e6:06:2a:01:b8:19:5e:81:12:41:7e:16:3a:83:c5:b5:69: 47:ef:6b:87:36:ec:62:1b:30:b3:d3:6f:3f:c7:5e:b2:0b:a6: 2b:17:cc:d3:cc:42:8f:be:ad:00:9d:50:0d:58:d1:f5:ab:e8: 70:ba:74:fa:a3:97:bd:4f:19:23:04:7c:23:aa:40:e4:27:21: 22:fa:b8:ea:4c:2f:08:c8:47:b8:0c:2a:12:10:c5:83:9e:3d: 8e:c9:08:19:6e:a1:6e:12:8e:bc:0e:eb:c9:da:52:95:6c:45: b4:1f:d4:a6:c0:a5:c5:92:95:7a:71:df:eb:98:d7:ae:ed:cd: cb:fd:3c:5f:ce:7f:c2:56:b0:f1:7b:33:e6:b8:ae:97:dc:da: 1a:a4:1b:86:f7:53:cb:cb:f0:94:99:59:d3:ca:7a:f2:91:fe: a6:4c:5f:24:6d:78:41:9c:a3:82:a2:45:3b:49:83:6a:2a:7d: d7:4e:ad:49:c7:3d:46:da:69:ef:bb:6f:90:c9:5c:1a:07:52: a8:5c:9a:4f:d3:56:ab:91:39:e7:08:d8:67:c0:1f:12:31:7a: 83:da:c9:e0:ee:64:89:b5:90:14:fe:21:05:57:aa:ad:27:a6: d8:e6:0b:d2:16:70:b0:b4:fb:36:63:92:b0:62:51:d9:b9:57: 41:2b:8e:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIMat05+w0MlnNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk OWE3YTcxMGEtMTc1MC00MmZjLWFhYjQtZDNmOTViMDE2OTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOblwWOZeob8qZAhKvr73BN93WxJuVWNKQ/C HFjldlonIzLPu/RxNwAzqYMCpj5nur9IAlYsJaWboaYPHVM461Lf6+v0tCjHwkl7 qJTcrPLdgEwJS/Z7L5b0G4BnXChWZXOILAZIxfgDoEPRaK7e+N764ikrnM3N9XBt LNfeeoJSCf8aogKFQTblHLWITcZN0jhnAga3fVXYjGiDre/8acnOEpu/bdXd6ngt ULSFDu5DUeDUVGw9BsthFzWnJMrGqv7m8AehG/GMN8QhkeRIX86FDJTX0MhH3mn5 OHznDdNTR1Do4ZyNvvQwixdgdgPZ6Kh8wFhIPnpQKzXW/MR7zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAba6lh5gv1Kkrduxvrz5b3+0Pv6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvMGZhNGIzNjMtOGJkMy0z MjBhLWI1ZmEtMmUxMzIxYjQxNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANXmBioBuBlegRJBfhY6g8W1aUfva4c27GIbMLPTbz/HXrILpisXzNPM Qo++rQCdUA1Y0fWr6HC6dPqjl71PGSMEfCOqQOQnISL6uOpMLwjIR7gMKhIQxYOe PY7JCBluoW4SjrwO68naUpVsRbQf1KbApcWSlXpx3+uY167tzcv9PF/Of8JWsPF7 M+a4rpfc2hqkG4b3U8vL8JSZWdPKevKR/qZMXyRteEGco4KiRTtJg2oqfddOrUnH PUbaae+7b5DJXBoHUqhcmk/TVquROecI2GfAHxIxeoPayeDuZIm1kBT+IQVXqq0n ptjmC9IWcLC0+zZjkrBiUdm5V0Erjoc= -----END CERTIFICATE-----Generated at Mon Aug 4 15:36:18 2025 by rpki-client