$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7d8aac9f-845a-35c1-b36f-2bea4e0a8f02.roa File: 7d8aac9f-845a-35c1-b36f-2bea4e0a8f02.roa (raw, json) Hash identifier: D0SjFSKfrGSgRPt1jJK2TfRxP2W5NAVWxkIkErKElAY= Subject key identifier: FD:0C:99:BB:21:87:ED:B4:97:50:87:97:37:99:5E:55:83:89:99:56 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584D6515292D508925F72920C500 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7d8aac9f-845a-35c1-b36f-2bea4e0a8f02.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 11426 IP address blocks: 168.91.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:29:2d:50:89:25:f7:29:20:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=f1807430-ae2a-47f6-9e37-26edb64cde3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:04:95:44:62:41:7d:e1:bc:c9:70:1d:83:1c: 11:b4:d0:79:1e:41:7b:0f:26:1f:f0:20:35:72:7a: 3d:06:7a:26:e1:2b:fd:59:d3:d8:e9:ab:93:b9:a1: 58:de:14:02:6d:f0:61:f1:0d:ed:84:42:fb:db:05: 4d:a9:12:ba:3f:30:89:68:d9:a7:d4:48:a5:e2:4b: 8e:b6:f8:59:a8:4e:c8:12:b1:39:b4:77:cf:35:7a: 06:55:96:40:17:eb:bf:54:95:ce:6a:0b:bf:06:49: 1d:24:e3:a7:63:0c:02:2b:a7:52:ee:64:f0:43:bf: 5c:a6:f3:72:f9:f9:6b:d7:c8:fc:79:92:1e:df:31: 52:7d:da:67:42:9d:f1:27:9f:1c:77:e0:d1:a9:b1: de:e4:0c:6f:35:a9:b9:69:11:28:26:a0:bf:c2:57: 26:7c:8f:69:08:ec:47:81:a0:82:fd:87:3f:4e:79: 1d:44:ab:4d:f5:b2:3d:c1:b6:29:0a:76:54:01:3c: 6c:a0:18:18:b9:13:ab:33:d1:91:8c:6f:c7:19:6d: c7:8a:9e:69:90:b0:49:ce:e3:55:7c:e9:3f:6b:4a: fc:70:81:73:95:86:10:07:4a:15:98:83:c5:00:7a: 45:be:4e:53:1f:64:89:41:46:65:69:31:42:d2:fe: 20:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0C:99:BB:21:87:ED:B4:97:50:87:97:37:99:5E:55:83:89:99:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7d8aac9f-845a-35c1-b36f-2bea4e0a8f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b9:6a:36:c2:dc:e1:d0:f7:32:c6:ed:aa:d8:19:5d:61:39: b0:ac:c7:85:79:e4:b1:56:40:8b:d3:f4:fb:8b:d0:4a:59:91: ec:49:8a:f5:d2:a8:f0:91:85:b3:bb:7a:de:09:52:70:89:53: 4d:2e:17:ab:0e:4e:65:c0:71:ec:28:18:a3:e6:cc:f4:c4:cb: 70:67:d8:57:d9:c9:9a:41:9a:24:ed:b9:0e:37:6a:35:c1:c4: 81:ba:c7:a3:61:5e:26:0e:43:f4:5e:5b:f2:12:0c:51:ba:b0: e3:30:65:d2:c8:61:86:d3:ac:54:dc:26:96:40:b9:63:9e:3a: 3e:da:f4:1a:dd:14:a6:f5:a2:30:5f:02:13:16:5e:ea:0b:38: ca:fa:01:0e:b0:cc:9e:0e:4f:33:fc:51:00:56:bc:28:a5:95: 53:d0:b6:7d:b9:97:ee:b4:8e:99:19:ee:2e:ad:5d:cc:52:09: f4:32:b2:21:77:7d:b6:65:be:52:40:1f:ef:7e:51:05:aa:0d: 5b:7f:40:1c:e9:de:bd:3b:70:a1:44:31:d0:ec:2c:8e:ff:b1: d7:cc:2e:44:0c:82:a4:dc:51:bc:e5:fd:6f:c2:92:d9:97:78: 77:bd:b4:cd:fe:90:16:02:91:56:02:2f:37:01:e0:df:00:6d: de:0c:e0:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSktUIkl9ykgxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ZjE4MDc0MzAtYWUyYS00N2Y2LTllMzctMjZlZGI2NGNkZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhASVRGJBfeG8yXAdgxwRtNB5HkF7DyYf8CA1 cno9Bnom4Sv9WdPY6auTuaFY3hQCbfBh8Q3thEL72wVNqRK6PzCJaNmn1Eil4kuO tvhZqE7IErE5tHfPNXoGVZZAF+u/VJXOagu/BkkdJOOnYwwCK6dS7mTwQ79cpvNy +flr18j8eZIe3zFSfdpnQp3xJ58cd+DRqbHe5AxvNam5aREoJqC/wlcmfI9pCOxH gaCC/Yc/TnkdRKtN9bI9wbYpCnZUATxsoBgYuROrM9GRjG/HGW3Hip5pkLBJzuNV fOk/a0r8cIFzlYYQB0oVmIPFAHpFvk5TH2SJQUZlaTFC0v4gSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0Mmbshh+20l1CHlzeZXlWDiZlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvN2Q4YWFjOWYtODQ1YS0z NWMxLWIzNmYtMmJlYTRlMGE4ZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJG5ajbC3OHQ9zLG7arYGV1hObCsx4V55LFWQIvT9PuL0EpZkexJivXS qPCRhbO7et4JUnCJU00uF6sOTmXAcewoGKPmzPTEy3Bn2FfZyZpBmiTtuQ43ajXB xIG6x6NhXiYOQ/ReW/ISDFG6sOMwZdLIYYbTrFTcJpZAuWOeOj7a9BrdFKb1ojBf AhMWXuoLOMr6AQ6wzJ4OTzP8UQBWvCillVPQtn25l+60jpkZ7i6tXcxSCfQysiF3 fbZlvlJAH+9+UQWqDVt/QBzp3r07cKFEMdDsLI7/sdfMLkQMgqTcUbzl/W/CktmX eHe9tM3+kBYCkVYCLzcB4N8Abd4M4LA= -----END CERTIFICATE-----Generated at Fri Apr 17 07:08:47 2026 by rpki-client