$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7d8aac9f-845a-35c1-b36f-2bea4e0a8f02.roa File: 7d8aac9f-845a-35c1-b36f-2bea4e0a8f02.roa (raw, json) Hash identifier: p/nZAtKLiZdkMRwRUOO8XHuvuy2/Eh4Q8CbFtN39fc0= Subject key identifier: 03:9A:E5:47:EA:58:71:72:43:E5:AB:F1:A0:FB:8A:5F:F4:AE:2F:E7 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584BA39D1FFEA108B90747870C00 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7d8aac9f-845a-35c1-b36f-2bea4e0a8f02.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 11426 IP address blocks: 168.91.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1f:fe:a1:08:b9:07:47:87:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=8f0effdb-626e-4370-af0c-6986b1fe173e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9d:d3:42:c8:a2:62:05:61:da:88:24:e0:1f: 58:7b:3d:24:90:70:f8:09:86:75:85:55:63:a3:c0: 10:88:fb:3e:ad:a7:be:33:9b:10:68:81:d9:c5:9e: 51:4a:ed:1c:b3:3c:c0:93:5e:7e:37:cb:82:ed:1c: 79:3d:e1:91:7a:6b:55:6f:33:8c:df:d6:49:d8:1b: 23:c1:87:de:9a:67:8d:42:5e:83:b9:80:cc:08:38: d0:e5:3c:21:e4:ab:20:ec:bc:1c:60:8e:77:85:12: a6:f1:c6:96:d7:5a:da:43:a0:1d:6e:d0:b0:0f:7f: 3e:68:86:d2:a1:01:e3:3d:74:dc:5d:b6:4c:cc:6a: c3:d6:5b:3f:3b:27:7d:8a:fc:3f:0f:b5:19:3f:b7: 65:ab:2d:85:35:94:ca:9b:f8:7c:70:96:1e:29:eb: d9:d5:c2:00:79:48:93:f5:3b:e3:37:1b:f2:cb:cf: ff:47:22:06:65:bd:57:b7:b3:82:00:54:95:c7:e3: c4:dc:b2:09:08:fc:38:5f:24:76:68:cf:ec:30:50: 25:f2:b5:4b:ab:4f:b4:63:fe:1f:d1:95:93:68:89: 60:72:94:df:61:f8:91:fd:c6:0e:a8:b7:da:3e:96: b4:b8:c9:79:d1:fa:4c:ac:35:7b:3f:ff:d1:ee:61: 70:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9A:E5:47:EA:58:71:72:43:E5:AB:F1:A0:FB:8A:5F:F4:AE:2F:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7d8aac9f-845a-35c1-b36f-2bea4e0a8f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6e:24:27:49:6e:33:af:dc:27:52:b4:f8:c6:26:39:c7:fb: c1:f3:5f:63:ce:98:1d:55:b7:2e:ce:0b:ae:25:4b:f2:ee:63: 89:24:51:3b:58:bc:6f:72:7a:1e:2a:13:67:15:76:d3:b2:19: a9:c4:01:35:2d:1e:8a:75:cf:c5:1e:d8:69:24:ac:21:99:fb: 00:2b:3f:8e:db:d4:8a:cd:d8:5a:65:05:3a:39:c2:77:cd:a3: 14:71:70:5e:43:f2:f5:af:3e:35:7f:5d:ad:c3:b9:9a:ac:a0: 96:68:9a:15:7a:52:0b:70:8e:d2:27:57:56:8c:5b:e9:20:0e: 4b:c4:a7:84:18:66:38:66:40:67:d9:62:22:12:00:56:e2:74: 86:e4:aa:45:b0:6c:53:6b:fc:f0:41:ff:70:6d:75:6c:7d:b3: 0c:77:5c:83:07:fc:68:62:d1:3e:2b:e4:8e:34:c6:94:d6:2b: 5c:8b:c6:cc:8b:5e:29:b6:7b:99:45:3a:30:8b:81:c1:74:80: 3e:12:0b:ef:30:a9:d9:21:14:6c:21:1a:c2:db:9a:e7:f6:63: df:b5:e1:06:ed:1c:97:00:bd:c1:80:43:1c:d9:be:6b:eb:f2: 81:f2:ce:68:d7:be:d7:9e:9e:ad:7c:f3:a1:40:31:9c:ee:e0: 45:fb:ed:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnR/+oQi5B0eHDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OGYwZWZmZGItNjI2ZS00MzcwLWFmMGMtNjk4NmIxZmUxNzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp3TQsiiYgVh2ogk4B9Yez0kkHD4CYZ1hVVj o8AQiPs+rae+M5sQaIHZxZ5RSu0cszzAk15+N8uC7Rx5PeGRemtVbzOM39ZJ2Bsj wYfemmeNQl6DuYDMCDjQ5Twh5Ksg7LwcYI53hRKm8caW11raQ6AdbtCwD38+aIbS oQHjPXTcXbZMzGrD1ls/Oyd9ivw/D7UZP7dlqy2FNZTKm/h8cJYeKevZ1cIAeUiT 9TvjNxvyy8//RyIGZb1Xt7OCAFSVx+PE3LIJCPw4XyR2aM/sMFAl8rVLq0+0Y/4f 0ZWTaIlgcpTfYfiR/cYOqLfaPpa0uMl50fpMrDV7P//R7mFwpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOa5UfqWHFyQ+Wr8aD7il/0ri/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvN2Q4YWFjOWYtODQ1YS0z NWMxLWIzNmYtMmJlYTRlMGE4ZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRuJCdJbjOv3CdStPjGJjnH+8HzX2POmB1Vty7OC64lS/LuY4kkUTtY vG9yeh4qE2cVdtOyGanEATUtHop1z8Ue2GkkrCGZ+wArP47b1IrN2FplBTo5wnfN oxRxcF5D8vWvPjV/Xa3DuZqsoJZomhV6UgtwjtInV1aMW+kgDkvEp4QYZjhmQGfZ YiISAFbidIbkqkWwbFNr/PBB/3BtdWx9swx3XIMH/Ghi0T4r5I40xpTWK1yLxsyL Xim2e5lFOjCLgcF0gD4SC+8wqdkhFGwhGsLbmuf2Y9+14QbtHJcAvcGAQxzZvmvr 8oHyzmjXvteenq1886FAMZzu4EX77XI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:25:06 2025 by rpki-client