$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7125b790-7228-3b2f-91fe-5b1dd486ea42.roa File: 7125b790-7228-3b2f-91fe-5b1dd486ea42.roa (raw, json) Hash identifier: 43jkJsg6No+8LvG9meU16evn6YhYLZUaKgiWQ+if7+c= Subject key identifier: 33:57:9D:3F:F8:B8:29:62:70:DB:FC:62:CD:4D:A0:23:9C:1D:22:84 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584E9A7FCFDB94B2997FBB1399B8 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7125b790-7228-3b2f-91fe-5b1dd486ea42.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 212238 IP address blocks: 168.91.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:cf:db:94:b2:99:7f:bb:13:99:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=5c87f58a-23e5-419e-bee0-bc8fa90e50cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:da:83:d8:83:4a:e7:ea:7d:b6:37:67:03:4a: 68:fd:58:dc:b7:4c:9c:9e:8a:33:c8:24:20:27:53: fd:ed:ef:7b:49:d7:cf:e9:72:f9:2a:22:c7:1c:51: 49:3b:10:db:fc:3b:e1:91:e9:f5:9c:79:6a:f8:d6: 6c:58:ef:81:e9:56:0e:54:11:49:0a:85:1b:12:89: a9:f4:7a:df:7e:38:fe:e0:2b:33:d4:ee:c8:a1:61: 54:70:55:ea:a8:f0:0c:4e:1c:5b:14:10:82:f7:f7: ed:c3:28:fc:90:b4:fc:82:f3:72:09:f6:0c:cc:4c: 60:7e:17:13:a6:97:f5:07:09:7c:8d:a4:f0:c3:9e: c7:1b:e9:9c:fb:f5:ee:1f:3a:3d:7f:a1:65:92:5f: 89:a7:50:e4:99:86:d5:5e:e7:de:c9:b3:db:64:fa: f2:3f:b4:d8:85:aa:4c:a8:84:d9:d3:b8:73:cc:2e: 6f:c7:b9:0a:de:d8:a7:2c:fb:ee:78:d0:ef:7b:26: 13:2d:48:6e:21:45:e7:73:a0:c6:86:f5:43:9a:80: 25:44:71:8d:3c:77:c2:79:13:14:89:7f:a6:a2:0b: 10:5e:25:59:78:ac:54:5e:6e:d1:e6:5a:a2:46:cd: 84:a8:93:84:00:18:13:32:26:f5:b6:95:90:4a:96: d4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:57:9D:3F:F8:B8:29:62:70:DB:FC:62:CD:4D:A0:23:9C:1D:22:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7125b790-7228-3b2f-91fe-5b1dd486ea42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:7f:90:bc:8f:43:3d:3a:ba:0a:30:7b:3a:fd:ef:51:81:d9: 90:c0:da:78:2a:4b:0a:66:7d:2c:70:d2:24:8c:e7:af:0f:eb: 5f:95:94:64:97:96:a5:a7:bd:c4:9d:9f:21:c0:67:c7:2d:f1: 9f:d6:f2:53:70:99:9a:02:f5:6a:ab:2e:12:52:14:58:22:8b: 97:4e:95:91:84:d6:dc:92:e9:9b:c0:06:17:c8:64:dd:d2:43: 88:95:ca:1e:07:03:a5:cc:4c:77:8b:d8:90:41:6c:7e:73:a6: c3:b5:9f:fe:c6:5d:eb:4a:c3:a0:62:12:6a:31:01:ca:56:aa: ef:37:f9:dd:e5:62:dc:d1:17:95:9f:09:8d:57:88:ff:76:0e: e6:75:35:1d:93:84:a8:4b:89:c3:bb:32:d7:9d:6d:62:40:5d: 6a:fd:7a:b9:b0:7d:fc:e7:8b:9f:6c:58:4f:53:fb:7b:36:4a: 19:f5:31:0b:32:3a:df:3f:b2:d2:ff:4b:11:c4:89:02:e5:17: b9:02:63:ec:2c:1e:1a:71:34:7b:08:24:b8:57:b4:d4:e8:56: 8c:0f:14:8c:53:de:3d:f7:23:1a:69:17:41:33:53:ad:96:ef: 34:3a:e2:62:60:c4:de:dd:32:74:8d:86:bb:f0:7a:b4:3d:87: 37:5a:25:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af8/blLKZf7sTmbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk NWM4N2Y1OGEtMjNlNS00MTllLWJlZTAtYmM4ZmE5MGU1MGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dqD2INK5+p9tjdnA0po/Vjct0ycnoozyCQg J1P97e97SdfP6XL5KiLHHFFJOxDb/Dvhken1nHlq+NZsWO+B6VYOVBFJCoUbEomp 9Hrffjj+4Csz1O7IoWFUcFXqqPAMThxbFBCC9/ftwyj8kLT8gvNyCfYMzExgfhcT ppf1Bwl8jaTww57HG+mc+/XuHzo9f6Flkl+Jp1DkmYbVXufeybPbZPryP7TYhapM qITZ07hzzC5vx7kK3tinLPvueNDveyYTLUhuIUXnc6DGhvVDmoAlRHGNPHfCeRMU iX+mogsQXiVZeKxUXm7R5lqiRs2EqJOEABgTMib1tpWQSpbUyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNXnT/4uClicNv8Ys1NoCOcHSKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvNzEyNWI3OTAtNzIyOC0z YjJmLTkxZmUtNWIxZGQ0ODZlYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR/kLyPQz06ugowezr971GB2ZDA2ngqSwpmfSxw0iSM568P61+VlGSX lqWnvcSdnyHAZ8ct8Z/W8lNwmZoC9WqrLhJSFFgii5dOlZGE1tyS6ZvABhfIZN3S Q4iVyh4HA6XMTHeL2JBBbH5zpsO1n/7GXetKw6BiEmoxAcpWqu83+d3lYtzRF5Wf CY1XiP92DuZ1NR2ThKhLicO7MtedbWJAXWr9ermwffzni59sWE9T+3s2Shn1MQsy Ot8/stL/SxHEiQLlF7kCY+wsHhpxNHsIJLhXtNToVowPFIxT3j33IxppF0EzU62W 7zQ64mJgxN7dMnSNhrvwerQ9hzdaJQc= -----END CERTIFICATE-----Generated at Tue Jul 28 18:19:13 2026 by rpki-client