$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa File: 0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa (raw, json) Hash identifier: ezYO5r/6xRW2NTmfkJ1gd6XmKvRhhPrYhF0700mhGTw= Subject key identifier: EC:71:2D:FB:D4:30:DF:01:DB:EC:58:FF:54:01:D3:BC:F8:B7:2B:1B Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F43285849D164E8C2149745E7E0786140 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 9009 IP address blocks: 168.91.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:e8:c2:14:97:45:e7:e0:78:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=9d136538-0652-44d5-aa8d-6544afeb50e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:25:16:6a:85:c4:88:74:85:17:64:92:b4:97: 84:32:a2:6b:48:8a:c9:40:95:fc:b1:54:b3:98:be: ad:96:91:c5:36:6e:18:a0:c1:6f:89:85:95:24:4f: 55:a8:b6:59:fd:14:ba:fa:87:0b:94:d9:6b:fc:85: 90:4b:81:9e:cd:6c:e3:4c:47:02:88:0b:91:ad:4e: be:7c:a9:54:64:2f:b8:10:44:4b:8f:10:5a:d6:a1: bd:71:6d:93:70:30:a8:98:66:43:e1:61:fc:6d:f1: fa:00:1f:90:9d:8a:48:54:c6:3b:53:31:44:e7:8d: 2b:0c:db:49:85:54:7a:00:db:60:54:df:ac:ca:a0: ef:f9:fa:54:fb:72:5a:3f:df:9b:15:0b:4a:9e:34: 17:8b:3f:82:ca:0a:2e:04:a1:12:55:80:e8:89:bb: 27:a9:a8:a2:69:05:bf:a1:90:45:5d:fb:1b:9e:22: 4c:4b:2d:c7:92:7e:97:0f:20:75:24:5c:f4:37:74: 66:a9:67:0b:cd:0e:23:d9:3f:cd:29:fd:95:5c:82: 55:6d:6f:a1:1d:4b:fd:c7:b1:7d:c4:48:4a:ea:95: 2b:bd:fd:7d:34:4d:90:6b:8c:c0:78:16:02:b3:e2: 8e:8c:30:d0:f9:7f:4d:ef:94:2f:d8:49:34:35:4f: 87:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:71:2D:FB:D4:30:DF:01:DB:EC:58:FF:54:01:D3:BC:F8:B7:2B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:53:6c:a3:ab:67:6e:95:10:ba:89:3b:3f:85:87:3c:68:2b: c3:55:38:78:de:06:f6:11:34:04:ee:c9:86:1a:02:0e:5a:83: 94:c9:55:8d:86:89:5f:6d:14:fe:ed:2a:29:33:97:89:2a:8d: d3:3f:f5:9b:ad:ae:13:4c:c0:45:52:cf:40:2d:b5:f7:d3:06: 06:20:3a:ac:35:25:c1:67:da:a1:94:26:de:85:0c:2f:66:8e: 64:12:8f:0b:6d:36:f2:04:47:dc:24:25:c8:fb:d4:fa:3c:35: 3b:79:2c:b3:0b:c3:b0:3f:91:49:8e:57:fa:01:b4:36:47:69: 76:5e:50:77:e7:4b:c3:ff:fe:33:e5:48:57:10:1c:4e:64:f5: f0:64:23:8c:76:36:e6:5b:69:a5:f4:01:6a:11:1b:57:8b:57: eb:12:f1:fa:a9:1a:3f:76:4a:90:27:b4:e0:0c:e1:77:3b:d8: f7:a1:98:9c:ae:a9:04:55:f5:f2:69:d8:52:9b:53:c2:55:55: 70:35:bf:91:de:7c:58:65:17:11:e3:b7:0f:1c:ff:d4:4c:b5: 12:bb:e7:1b:64:62:44:76:33:15:85:2d:ac:97:95:14:0f:63: f1:c0:74:71:65:97:39:69:70:2f:7a:19:1b:f3:9c:f0:d6:7d: 37:15:5a:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZOjCFJdF5+B4YUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk OWQxMzY1MzgtMDY1Mi00NGQ1LWFhOGQtNjU0NGFmZWI1MGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyUWaoXEiHSFF2SStJeEMqJrSIrJQJX8sVSz mL6tlpHFNm4YoMFviYWVJE9VqLZZ/RS6+ocLlNlr/IWQS4GezWzjTEcCiAuRrU6+ fKlUZC+4EERLjxBa1qG9cW2TcDComGZD4WH8bfH6AB+QnYpIVMY7UzFE540rDNtJ hVR6ANtgVN+syqDv+fpU+3JaP9+bFQtKnjQXiz+CygouBKESVYDoibsnqaiiaQW/ oZBFXfsbniJMSy3Hkn6XDyB1JFz0N3RmqWcLzQ4j2T/NKf2VXIJVbW+hHUv9x7F9 xEhK6pUrvf19NE2Qa4zAeBYCs+KOjDDQ+X9N75Qv2Ek0NU+HPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxxLfvUMN8B2+xY/1QB07z4tysbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvMGZhNGIzNjMtOGJkMy0z MjBhLWI1ZmEtMmUxMzIxYjQxNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdTbKOrZ26VELqJOz+FhzxoK8NVOHjeBvYRNATuyYYaAg5ag5TJVY2G iV9tFP7tKikzl4kqjdM/9ZutrhNMwEVSz0AttffTBgYgOqw1JcFn2qGUJt6FDC9m jmQSjwttNvIER9wkJcj71Po8NTt5LLMLw7A/kUmOV/oBtDZHaXZeUHfnS8P//jPl SFcQHE5k9fBkI4x2NuZbaaX0AWoRG1eLV+sS8fqpGj92SpAntOAM4Xc72PehmJyu qQRV9fJp2FKbU8JVVXA1v5HefFhlFxHjtw8c/9RMtRK75xtkYkR2MxWFLayXlRQP Y/HAdHFllzlpcC96GRvznPDWfTcVWkA= -----END CERTIFICATE-----Generated at Sun Jun 15 23:13:42 2025 by rpki-client