$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/efd98a5d-9b9d-3b51-9343-444044ca2470.roa File: efd98a5d-9b9d-3b51-9343-444044ca2470.roa (raw, json) Hash identifier: ZAMMALh3fxa9ToYQNsGz+tAtD+xjOn3+uKmfJsod7ns= Subject key identifier: E0:85:CC:99:E1:0E:57:05:DB:54:CC:BF:D8:BC:95:96:93:8A:89:BD Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584BA39D1FEFFE435EA366E70180 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/efd98a5d-9b9d-3b51-9343-444044ca2470.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 11426 IP address blocks: 168.91.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1f:ef:fe:43:5e:a3:66:e7:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=8c325118-8482-44be-8377-549bf4e313e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:dc:90:8c:70:6d:9a:d2:7a:41:88:df:6a:2b: c3:09:71:43:fb:9f:ca:d7:85:67:67:85:73:73:1b: 49:68:94:1c:c8:6b:43:dc:01:6b:08:d0:61:b5:2d: ec:05:31:00:7b:85:9e:29:0b:c8:71:a5:df:f6:79: 29:0b:8b:44:9b:f8:f0:57:76:59:14:29:8e:50:83: ee:30:e2:36:a1:7f:a2:ca:b7:35:c9:64:cd:00:b0: c8:ad:16:8e:ca:94:13:75:53:0b:f0:8e:c4:f5:88: f9:19:cf:1b:bc:89:ed:57:b2:fa:82:e9:3a:34:7c: 68:3c:f6:df:9e:62:25:ad:4b:38:20:58:04:64:72: 06:d3:20:13:fe:c1:fd:07:b1:54:b9:d8:1d:0f:11: ed:bc:b4:de:66:9d:2b:9f:46:d1:dd:a1:68:31:47: 92:52:70:8f:65:7c:e9:e7:a0:14:a3:a4:c2:4e:d4: da:ce:a9:1e:9c:ed:4a:4b:7e:d6:49:c3:9a:1b:7d: a1:8a:88:25:c2:43:d2:e7:bb:e8:2a:10:9e:67:44: 37:52:f8:1e:14:d1:44:fe:bf:6f:32:9f:02:6c:cc: f1:ee:80:8a:bf:d7:4b:ff:5c:fa:77:cf:f2:67:2c: 5b:8b:a7:1f:71:3a:87:ff:b9:48:d6:a9:c4:65:01: 2f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:85:CC:99:E1:0E:57:05:DB:54:CC:BF:D8:BC:95:96:93:8A:89:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/efd98a5d-9b9d-3b51-9343-444044ca2470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:72:a6:3d:9e:59:dd:b7:88:c6:14:58:01:fa:a6:54:64:77: 44:b1:dc:8e:eb:7e:46:9e:0a:c3:52:39:ce:9b:2d:4b:da:b5: 18:6b:74:e6:34:c6:c2:97:f3:2b:9c:f2:bc:c4:28:ed:fd:09: fa:5e:43:89:22:c1:c8:90:8b:49:76:f9:4a:32:9c:d2:16:95: 2c:91:ca:99:9d:15:30:11:0c:ba:6c:d3:a9:34:ec:2b:02:db: e5:bb:99:8e:85:a3:53:fe:93:67:83:48:d8:83:92:1b:f9:12: 40:b9:95:b8:56:0c:fa:b8:f6:c3:92:4c:e2:93:bf:2d:3e:3e: da:9d:43:76:0d:51:fe:d2:5f:ff:5a:0d:03:81:63:57:4b:51: 59:3b:12:34:ee:9d:49:74:00:a6:4b:22:26:65:1b:3c:61:a9: f2:11:60:bf:a0:d1:6b:42:71:36:68:d5:d6:6e:1c:ab:fe:22: 8d:03:0d:0c:d9:89:c1:34:72:4b:cd:78:b5:b1:0b:7b:72:1d: c1:ae:ac:3e:28:b9:a0:5b:e8:88:69:6a:87:4b:5e:48:20:2b: ed:44:0e:1a:c0:1b:0c:6e:8c:f3:95:a6:89:24:00:89:ff:28: 42:4d:22:4c:81:48:33:4c:4b:08:77:22:e0:b5:cf:23:a0:fb: ff:8e:c3:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnR/v/kNeo2bnAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OGMzMjUxMTgtODQ4Mi00NGJlLTgzNzctNTQ5YmY0ZTMxM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltyQjHBtmtJ6QYjfaivDCXFD+5/K14VnZ4Vz cxtJaJQcyGtD3AFrCNBhtS3sBTEAe4WeKQvIcaXf9nkpC4tEm/jwV3ZZFCmOUIPu MOI2oX+iyrc1yWTNALDIrRaOypQTdVML8I7E9Yj5Gc8bvIntV7L6guk6NHxoPPbf nmIlrUs4IFgEZHIG0yAT/sH9B7FUudgdDxHtvLTeZp0rn0bR3aFoMUeSUnCPZXzp 56AUo6TCTtTazqkenO1KS37WScOaG32hioglwkPS57voKhCeZ0Q3UvgeFNFE/r9v Mp8CbMzx7oCKv9dL/1z6d8/yZyxbi6cfcTqH/7lI1qnEZQEv3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCFzJnhDlcF21TMv9i8lZaTiom9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvZWZkOThhNWQtOWI5ZC0z YjUxLTkzNDMtNDQ0MDQ0Y2EyNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJypj2eWd23iMYUWAH6plRkd0Sx3I7rfkaeCsNSOc6bLUvatRhrdOY0 xsKX8yuc8rzEKO39CfpeQ4kiwciQi0l2+UoynNIWlSyRypmdFTARDLps06k07CsC 2+W7mY6Fo1P+k2eDSNiDkhv5EkC5lbhWDPq49sOSTOKTvy0+PtqdQ3YNUf7SX/9a DQOBY1dLUVk7EjTunUl0AKZLIiZlGzxhqfIRYL+g0WtCcTZo1dZuHKv+Io0DDQzZ icE0ckvNeLWxC3tyHcGurD4ouaBb6IhpaodLXkggK+1EDhrAGwxujPOVpokkAIn/ KEJNIkyBSDNMSwh3IuC1zyOg+/+Ow00= -----END CERTIFICATE-----Generated at Wed Nov 5 02:07:54 2025 by rpki-client