$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0c45ef52-daa1-3e19-af05-19d477054b64.roa File: 0c45ef52-daa1-3e19-af05-19d477054b64.roa (raw, json) Hash identifier: 2Fjhp/pr+PI2Z3bzx7G3x5I8z/2+CQRiEWBvGQ7fWUg= Subject key identifier: 27:0B:CA:10:75:8E:0F:13:26:4C:77:3D:4B:5F:8A:C6:67:11:D8:F6 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584B6BC7484CBD7868D11915AE80 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0c45ef52-daa1-3e19-af05-19d477054b64.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 9009 IP address blocks: 168.91.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:48:4c:bd:78:68:d1:19:15:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=ecce5b60-652d-4462-95b3-2f08ff9df976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5f:f9:23:11:1d:58:9b:22:cc:4d:cb:87:8c: 38:fb:b0:ea:48:15:5d:5e:c6:d9:f3:46:9a:66:37: 73:da:f2:2e:27:e1:1c:75:66:a9:2a:8a:2d:66:c9: 53:b6:60:35:8f:ae:78:02:30:5b:13:1c:07:b1:d0: 02:89:91:7d:79:eb:e9:ef:15:44:c8:cc:93:07:95: 58:5a:0f:73:29:0d:9a:7b:35:3c:ed:2f:55:95:8c: c9:6f:9e:86:96:ff:d5:52:f3:a6:66:37:75:be:16: 5a:f3:de:f0:4b:d9:8f:8c:1b:1f:fe:b3:d2:08:25: ec:57:69:e8:4d:15:84:2d:29:85:c4:7c:8e:19:b5: c1:9c:f8:23:4e:73:82:03:56:b9:93:a8:63:b5:6e: 21:43:91:9c:db:96:24:c9:cc:6c:43:4d:c9:96:10: 08:d5:3c:95:41:92:4c:f7:cc:73:28:57:32:30:62: a6:43:11:c2:fe:95:47:dd:c3:25:e7:44:59:2f:62: 5a:a9:56:c3:a6:a0:79:ce:79:75:a4:59:4f:51:22: 33:0a:5c:bf:bc:9b:54:ff:2c:60:a7:7d:ec:8e:3b: 91:bd:b2:6a:bd:72:95:9c:e2:65:ee:80:0b:be:e9: 60:88:cf:f3:c0:0a:51:60:ff:66:08:c7:23:f8:4b: 18:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0B:CA:10:75:8E:0F:13:26:4C:77:3D:4B:5F:8A:C6:67:11:D8:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0c45ef52-daa1-3e19-af05-19d477054b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:03:06:f7:2f:56:fa:0d:74:d8:da:e6:c9:93:47:e0:b8:7e: f9:68:6c:0b:05:28:39:64:a3:79:b9:63:3e:13:74:0b:b6:32: a4:e3:c4:a8:23:55:c8:28:f1:61:7a:5a:2f:70:20:f0:74:11: 7c:6e:e9:71:3b:ee:2f:8f:be:a6:b2:4b:5e:c7:9f:8c:de:8b: 60:cc:0b:bd:66:cf:b2:b3:37:b1:e6:59:3d:98:c7:b9:97:56: c9:d7:b6:bb:be:93:bd:37:0f:2b:8d:5e:77:6a:a8:4e:c0:3b: 61:9f:b9:fe:7a:be:24:8e:b5:ac:61:89:18:79:c5:d0:3c:a9: 8e:81:21:a1:da:ea:70:d6:1e:1d:96:24:8b:48:49:86:d5:54: be:77:f3:11:16:b4:38:fb:ca:47:f8:c6:a0:15:e8:63:5c:69: d0:02:98:ee:69:d5:dd:b5:ea:ff:33:eb:f6:01:41:17:0d:11: 8a:7a:86:c3:4f:26:38:85:c7:ca:e5:c3:3c:aa:ad:53:32:c0: bd:b1:be:36:8b:a0:a4:48:4d:a7:f3:aa:52:7a:e2:c3:43:09: 88:68:bd:1f:4d:a9:f8:8a:65:de:56:51:31:8b:09:f8:d9:58: 98:31:8c:63:f5:02:f4:55:c6:15:c7:a7:da:16:8f:44:b0:3f: c0:83:d9:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0hMvXho0RkVroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZWNjZTViNjAtNjUyZC00NDYyLTk1YjMtMmYwOGZmOWRmOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1/5IxEdWJsizE3Lh4w4+7DqSBVdXsbZ80aa Zjdz2vIuJ+EcdWapKootZslTtmA1j654AjBbExwHsdACiZF9eevp7xVEyMyTB5VY Wg9zKQ2aezU87S9VlYzJb56Glv/VUvOmZjd1vhZa897wS9mPjBsf/rPSCCXsV2no TRWELSmFxHyOGbXBnPgjTnOCA1a5k6hjtW4hQ5Gc25YkycxsQ03JlhAI1TyVQZJM 98xzKFcyMGKmQxHC/pVH3cMl50RZL2JaqVbDpqB5znl1pFlPUSIzCly/vJtU/yxg p33sjjuRvbJqvXKVnOJl7oALvulgiM/zwApRYP9mCMcj+EsYYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcLyhB1jg8TJkx3PUtfisZnEdj2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvMGM0NWVmNTItZGFhMS0z ZTE5LWFmMDUtMTlkNDc3MDU0YjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFtLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQDBvcvVvoNdNja5smTR+C4fvlobAsFKDlko3m5Yz4TdAu2MqTjxKgj Vcgo8WF6Wi9wIPB0EXxu6XE77i+PvqayS17Hn4zei2DMC71mz7KzN7HmWT2Yx7mX VsnXtru+k703DyuNXndqqE7AO2Gfuf56viSOtaxhiRh5xdA8qY6BIaHa6nDWHh2W JItISYbVVL538xEWtDj7ykf4xqAV6GNcadACmO5p1d216v8z6/YBQRcNEYp6hsNP JjiFx8rlwzyqrVMywL2xvjaLoKRITafzqlJ64sNDCYhovR9NqfiKZd5WUTGLCfjZ WJgxjGP1AvRVxhXHp9oWj0SwP8CD2QM= -----END CERTIFICATE-----Generated at Tue Oct 14 13:55:33 2025 by rpki-client