$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d496bf54-ff2f-3588-af59-de7d639e9932.roa File: d496bf54-ff2f-3588-af59-de7d639e9932.roa (raw, json) Hash identifier: DLfcKrz0Z6Q8Rm9rcsQm2atBhppBcO6lxLdHPfW3Rek= Subject key identifier: 80:64:9F:C0:C8:5A:4F:69:D9:BE:B8:02:64:98:68:8D:CA:2D:29:56 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584B6A61E01E51E84A0C17FE9500 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d496bf54-ff2f-3588-af59-de7d639e9932.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 397373 IP address blocks: 168.91.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:e0:1e:51:e8:4a:0c:17:fe:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=b89684db-05cf-46c0-8dd8-f1d24d49e9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:61:ab:87:db:5e:88:cb:bf:02:47:9f:02: ad:35:13:83:d8:21:37:f6:f2:00:6c:f3:58:7d:b8: 2f:81:61:8b:bc:c8:39:78:64:f0:33:de:6b:bf:b2: c4:4e:af:77:3a:61:a4:06:b2:8a:70:72:96:67:d2: ac:67:52:73:98:32:d7:e7:d1:38:72:f6:a3:ac:29: 6e:07:ed:9e:36:76:90:35:96:ff:4b:c7:a0:df:00: 34:66:4a:49:85:f3:b2:71:d3:a9:de:a6:75:40:ab: 9c:e2:44:48:96:c8:e5:0c:31:33:7f:2b:cb:87:b6: df:dc:af:e0:4f:04:81:97:ef:fa:10:85:e1:2a:47: a3:e4:aa:3e:97:c1:8d:0e:c6:fc:d1:d8:bd:04:ae: c9:45:00:ac:f0:af:7f:c1:79:47:10:d5:d3:9b:ff: aa:22:ed:ed:8d:18:99:d0:9e:37:e9:de:b8:98:c6: 14:90:a0:37:78:d2:b2:1a:95:9a:f7:fd:42:fe:76: ab:1e:9e:8b:20:b9:f8:96:6d:19:57:65:ab:b9:0f: 83:09:a8:7f:8b:0c:57:19:19:0a:16:06:91:09:19: c3:21:76:7d:6a:e4:53:95:86:2f:e0:45:ab:e0:e9: 6b:bb:7b:c6:29:35:f1:e4:be:72:47:76:7d:fb:36: 80:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:64:9F:C0:C8:5A:4F:69:D9:BE:B8:02:64:98:68:8D:CA:2D:29:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d496bf54-ff2f-3588-af59-de7d639e9932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5d:d0:0e:70:43:c4:12:54:a3:1c:58:1f:f1:02:13:fa:8f: c2:a5:11:a7:55:67:76:25:f7:3d:f0:72:6f:e5:5f:83:9b:9e: 61:d9:8d:62:fe:84:b2:1d:c5:86:ee:40:89:7d:e9:89:50:80: 27:1d:cb:be:22:1f:da:5e:e3:9a:58:c4:0e:0e:71:ac:5a:a1: 8b:c7:a2:ce:39:04:58:ec:0f:eb:9a:36:d9:ae:76:7a:00:91: 13:a5:fc:c6:9d:11:64:7b:33:01:24:1b:dc:be:c5:6b:7a:90: e7:61:84:2a:23:49:e1:a3:67:2b:f7:7c:11:ab:b5:fd:7f:a5: a7:91:73:e4:02:16:fc:41:71:c8:e9:60:f2:27:bc:81:c7:a3: c9:75:03:e1:89:57:15:94:3e:b1:2d:38:f2:19:ce:84:24:e9: dc:0b:b7:fb:22:64:0b:f7:ef:13:be:b7:70:ce:e9:b4:49:df: a8:a7:bd:97:ae:32:eb:f0:30:0f:89:3d:61:65:c0:0a:9d:0f: b5:d4:48:d7:c4:11:09:0d:35:6f:9e:a3:ae:bc:24:6d:23:48: 95:45:a9:f8:0c:75:19:d7:d4:3e:9b:f5:2c:fd:e7:79:ee:16: 5e:b1:22:be:58:9b:85:b7:00:d9:6b:cb:79:bf:eb:d8:91:0b: 53:86:08:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYeAeUehKDBf+lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk Yjg5Njg0ZGItMDVjZi00NmMwLThkZDgtZjFkMjRkNDllOWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF1hq4fbXojLvwJHnwKtNROD2CE39vIAbPNY fbgvgWGLvMg5eGTwM95rv7LETq93OmGkBrKKcHKWZ9KsZ1JzmDLX59E4cvajrClu B+2eNnaQNZb/S8eg3wA0ZkpJhfOycdOp3qZ1QKuc4kRIlsjlDDEzfyvLh7bf3K/g TwSBl+/6EIXhKkej5Ko+l8GNDsb80di9BK7JRQCs8K9/wXlHENXTm/+qIu3tjRiZ 0J436d64mMYUkKA3eNKyGpWa9/1C/narHp6LILn4lm0ZV2WruQ+DCah/iwxXGRkK FgaRCRnDIXZ9auRTlYYv4EWr4Olru3vGKTXx5L5yR3Z9+zaA5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBkn8DIWk9p2b64AmSYaI3KLSlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvZDQ5NmJmNTQtZmYyZi0z NTg4LWFmNTktZGU3ZDYzOWU5OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFtKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBd0A5wQ8QSVKMcWB/xAhP6j8KlEadVZ3Yl9z3wcm/lX4ObnmHZjWL+ hLIdxYbuQIl96YlQgCcdy74iH9pe45pYxA4OcaxaoYvHos45BFjsD+uaNtmudnoA kROl/MadEWR7MwEkG9y+xWt6kOdhhCojSeGjZyv3fBGrtf1/paeRc+QCFvxBccjp YPInvIHHo8l1A+GJVxWUPrEtOPIZzoQk6dwLt/siZAv37xO+t3DO6bRJ36invZeu MuvwMA+JPWFlwAqdD7XUSNfEEQkNNW+eo668JG0jSJVFqfgMdRnX1D6b9Sz953nu Fl6xIr5Ym4W3ANlry3m/69iRC1OGCEA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:34:43 2025 by rpki-client