$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7601a3e0-7fc9-3c24-bfcf-186aec6c0b9a.roa File: 7601a3e0-7fc9-3c24-bfcf-186aec6c0b9a.roa (raw, json) Hash identifier: 0N5TKC/FlRQzTJmB+c70B93VVp7v6+c6Xnm+tHvXMa0= Subject key identifier: 68:0B:9F:73:58:E6:13:70:0C:EF:E7:19:DF:79:E4:12:02:61:7B:63 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584B3987099C90E1AEBDFDCB2170 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7601a3e0-7fc9-3c24-bfcf-186aec6c0b9a.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 46261 IP address blocks: 168.91.66.0/24 maxlen: 24 168.91.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:09:9c:90:e1:ae:bd:fd:cb:21:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=bb2210c6-850e-4e82-bdbe-493c1412a643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f7:eb:40:8e:36:13:c9:1b:23:9b:b3:69:e8: 62:ba:3e:49:6c:33:73:49:7f:47:9f:e1:29:45:28: 13:ac:7b:d1:6d:66:6f:db:46:39:a8:13:87:eb:f5: a4:26:e5:6f:d6:32:14:40:61:37:cd:39:cf:fd:d5: 1f:0e:98:eb:2d:59:e4:98:84:97:67:11:01:f3:43: f7:dd:74:0b:40:f0:6e:c0:59:99:4b:b2:bb:19:f6: ce:23:40:67:b6:a0:ca:4f:f2:ea:1e:49:de:7c:09: 72:50:f5:8d:3c:5d:2a:f6:d3:f7:31:0d:8e:0d:35: c7:8e:39:5a:26:bc:40:cb:c7:8a:1d:4d:6e:7c:dc: af:c9:65:4e:7a:1e:21:0c:68:5a:b7:3a:b2:ba:83: 9c:37:cc:0e:7b:fc:d6:1a:3a:8a:dc:aa:88:d9:59: cd:95:88:d4:37:84:72:65:2d:98:b3:2a:36:70:24: 28:1f:9a:90:ed:1a:5f:6a:e9:4b:fd:0a:77:aa:a8: 71:ee:8b:c5:e2:74:d4:91:cc:56:03:35:e1:35:c9: bf:f1:d7:0f:0c:4f:a1:1b:43:0b:d3:8c:c1:8b:16: ff:f6:1c:fa:d3:7f:2d:88:15:b2:78:d0:0b:98:55: 91:b8:e0:0f:aa:88:23:67:9d:f8:84:a3:bc:c5:d2: d5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0B:9F:73:58:E6:13:70:0C:EF:E7:19:DF:79:E4:12:02:61:7B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7601a3e0-7fc9-3c24-bfcf-186aec6c0b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:2c:aa:5b:d9:6f:50:e7:b4:08:fb:05:c0:f0:45:a7:d6:ab: 18:d3:42:19:86:64:33:27:8c:cf:00:d8:37:e4:5c:30:6d:04: 60:4e:f2:e2:87:3a:64:1e:a9:2c:24:05:8c:53:62:0a:78:60: 67:29:f7:5d:6c:8f:fe:8b:65:ab:44:01:5e:95:bc:21:aa:b2: 51:a2:fa:f1:fc:4d:bb:20:37:d6:6a:61:6b:ed:2f:6b:c6:27: 29:78:d0:92:71:c4:a6:4f:65:8a:25:3b:51:ba:48:1d:79:f6: f3:59:ab:51:7c:d9:1f:eb:64:c8:12:b6:0a:3b:68:b7:7f:62: cd:33:8b:93:42:12:24:93:0a:03:78:65:be:d6:26:03:61:76: 5a:b9:b9:f3:a8:82:30:f4:d3:a0:5c:34:cf:39:42:6c:ed:6b: 97:48:1c:7d:dd:a8:73:c4:bf:1a:92:c7:3c:a4:4a:95:53:8d: 38:e1:27:89:9c:5d:0d:5b:59:b6:2f:96:bb:eb:a3:cc:3a:65: e6:bd:eb:99:0b:9b:7c:2b:a7:e8:b8:7a:8f:e7:95:d0:d0:6d: 9c:ee:78:b3:77:f5:5c:d0:64:ac:d3:f3:45:43:05:44:11:a5: e0:c9:20:d4:c5:a4:43:1c:4c:0a:a6:c9:23:34:5d:6f:44:65: 43:ec:5b:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwmckOGuvf3LIXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk YmIyMjEwYzYtODUwZS00ZTgyLWJkYmUtNDkzYzE0MTJhNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPfrQI42E8kbI5uzaehiuj5JbDNzSX9Hn+Ep RSgTrHvRbWZv20Y5qBOH6/WkJuVv1jIUQGE3zTnP/dUfDpjrLVnkmISXZxEB80P3 3XQLQPBuwFmZS7K7GfbOI0BntqDKT/LqHknefAlyUPWNPF0q9tP3MQ2ODTXHjjla JrxAy8eKHU1ufNyvyWVOeh4hDGhatzqyuoOcN8wOe/zWGjqK3KqI2VnNlYjUN4Ry ZS2Ysyo2cCQoH5qQ7RpfaulL/Qp3qqhx7ovF4nTUkcxWAzXhNcm/8dcPDE+hG0ML 04zBixb/9hz6038tiBWyeNALmFWRuOAPqogjZ534hKO8xdLVNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgLn3NY5hNwDO/nGd955BICYXtjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvNzYwMWEzZTAtN2ZjOS0z YzI0LWJmY2YtMTg2YWVjNmMwYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACosqlvZb1DntAj7BcDwRafWqxjTQhmGZDMnjM8A2DfkXDBtBGBO8uKH OmQeqSwkBYxTYgp4YGcp911sj/6LZatEAV6VvCGqslGi+vH8TbsgN9ZqYWvtL2vG Jyl40JJxxKZPZYolO1G6SB159vNZq1F82R/rZMgStgo7aLd/Ys0zi5NCEiSTCgN4 Zb7WJgNhdlq5ufOogjD006BcNM85Qmzta5dIHH3dqHPEvxqSxzykSpVTjTjhJ4mc XQ1bWbYvlrvro8w6Zea965kLm3wrp+i4eo/nldDQbZzueLN39VzQZKzT80VDBUQR peDJINTFpEMcTAqmySM0XW9EZUPsWxc= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:56 2025 by rpki-client