$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa File: 7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa (raw, json) Hash identifier: Gr2lZLQi1hG+uV7d2R75sFjGoFlsDrHfgMnoeo1PSgI= Subject key identifier: A2:FF:A7:EA:3F:26:12:72:B4:66:AA:88:C0:06:8F:DC:5F:79:57:79 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584B41E71709A8A8E228564B4840 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 5650 IP address blocks: 168.91.64.0/24 maxlen: 24 168.91.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:17:09:a8:a8:e2:28:56:4b:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=e1a9763f-e7ba-487e-8d1e-1d7c3b82a627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:b9:7d:c7:85:0e:05:b7:5d:41:b2:38:28: 55:2b:f9:1a:cf:a4:db:bd:61:ad:33:78:62:bf:e4: fb:0b:97:9e:4c:6a:ec:d3:e9:fe:3b:65:68:0c:4f: 0d:66:d9:fd:2b:a1:0e:90:e5:48:c2:e8:8b:41:67: 8b:8e:96:14:f4:29:fc:49:28:2a:1e:33:8d:6c:db: 75:48:92:43:3b:03:90:2d:c1:b2:29:23:eb:32:5e: be:fd:8c:07:82:0e:95:13:72:d8:19:22:07:6f:a7: 0d:ab:5b:7f:21:e8:b5:4c:4e:ee:03:aa:2a:f9:bb: 45:77:04:25:45:97:9a:dc:e2:88:08:d9:d3:56:b6: d2:24:8f:3a:36:8a:a7:83:98:a7:56:40:3b:a1:67: 1a:92:78:9f:7e:b2:7b:e9:1b:0b:ad:c8:21:6c:b8: c1:cc:da:60:22:36:38:5d:04:59:f0:23:d3:3f:6a: 72:a5:8c:d8:59:65:4c:98:33:53:76:26:cf:12:a0: 8a:3b:21:00:14:7b:75:21:46:19:d8:be:62:7f:b2: 59:75:aa:99:9c:dc:12:27:64:24:67:62:8a:48:3e: 8d:91:83:66:15:a1:2c:dc:d6:c2:5b:5f:af:a4:f3: d6:39:ea:a3:ea:1f:3e:9a:a9:00:92:2a:f7:5c:8b: 85:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FF:A7:EA:3F:26:12:72:B4:66:AA:88:C0:06:8F:DC:5F:79:57:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e2:4c:32:01:a8:0b:52:e9:ca:1f:f9:87:f3:68:3c:67:59:d4: 2f:79:ea:fe:f7:a0:d3:97:bd:18:49:49:02:2e:22:c0:3b:7b: 01:2f:d7:6b:d6:33:95:10:01:62:28:b2:bd:11:e6:e1:f6:0f: a9:30:b0:60:3c:34:e9:94:c0:f1:c2:07:46:57:38:7f:32:48: 45:a3:62:b1:3a:57:8d:a3:7c:b8:b1:8d:3c:25:b2:e6:b3:61: 36:2a:94:17:26:eb:6a:f0:09:a1:a5:7a:24:d4:09:c9:4b:0f: 00:75:0c:92:38:e9:d9:ce:2d:49:f8:dc:9c:76:73:67:94:46: f7:91:cd:c5:3b:b8:98:f3:58:70:82:a2:c1:5f:b8:3e:3c:ef: 4c:37:a5:02:d7:06:1e:25:13:93:ff:04:be:9c:3a:6e:d6:f7: 74:33:6c:17:f7:55:d1:76:dd:17:82:86:53:63:0b:3b:6e:6b: 8c:a7:fe:f3:66:8e:c3:82:28:c2:c0:f0:7a:a6:f9:cc:f2:3e: 5a:65:8e:c9:f6:21:0d:bf:e8:81:25:16:ae:9d:9d:1b:43:77: 45:7b:9e:c4:73:53:1e:f9:22:26:20:79:11:3b:2d:62:8c:51: 00:c1:8b:cb:4c:5f:73:a5:43:1e:4e:8e:0a:b5:12:2c:d9:6f: 56:f4:c4:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xcJqKjiKFZLSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTFhOTc2M2YtZTdiYS00ODdlLThkMWUtMWQ3YzNiODJhNjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT+5fceFDgW3XUGyOChVK/kaz6TbvWGtM3hi v+T7C5eeTGrs0+n+O2VoDE8NZtn9K6EOkOVIwuiLQWeLjpYU9Cn8SSgqHjONbNt1 SJJDOwOQLcGyKSPrMl6+/YwHgg6VE3LYGSIHb6cNq1t/Iei1TE7uA6oq+btFdwQl RZea3OKICNnTVrbSJI86Noqng5inVkA7oWcakniffrJ76RsLrcghbLjBzNpgIjY4 XQRZ8CPTP2pypYzYWWVMmDNTdibPEqCKOyEAFHt1IUYZ2L5if7JZdaqZnNwSJ2Qk Z2KKSD6NkYNmFaEs3NbCW1+vpPPWOeqj6h8+mqkAkir3XIuFxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKL/p+o/JhJytGaqiMAGj9xfeVd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvN2E2YjFhN2ItOWJkNy0z YzVhLTgyMTctNTVhODQwYzM2MGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOJMMgGoC1Lpyh/5h/NoPGdZ1C956v73oNOXvRhJSQIuIsA7ewEv12vW M5UQAWIosr0R5uH2D6kwsGA8NOmUwPHCB0ZXOH8ySEWjYrE6V42jfLixjTwlsuaz YTYqlBcm62rwCaGleiTUCclLDwB1DJI46dnOLUn43Jx2c2eURveRzcU7uJjzWHCC osFfuD4870w3pQLXBh4lE5P/BL6cOm7W93QzbBf3VdF23ReChlNjCztua4yn/vNm jsOCKMLA8Hqm+czyPlpljsn2IQ2/6IElFq6dnRtDd0V7nsRzUx75IiYgeRE7LWKM UQDBi8tMX3OlQx5Ojgq1EizZb1b0xKc= -----END CERTIFICATE-----Generated at Wed Nov 5 00:44:22 2025 by rpki-client