$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0e0558f2-ed1f-3fe5-b243-d6375c9442a9.roa File: 0e0558f2-ed1f-3fe5-b243-d6375c9442a9.roa (raw, json) Hash identifier: ivt5kzjjWePib1tPiVwvE8k8ijSBFvlF1ldFB/g4NmE= Subject key identifier: 10:3C:9B:A3:14:41:CF:91:08:B1:24:A6:A8:34:0C:33:1F:19:1C:F0 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584F160BCE996F31AA1904441B60 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0e0558f2-ed1f-3fe5-b243-d6375c9442a9.roa Signing time: Sun 06 Sep 2026 15:07:01 +0000 ROA not before: Sun 06 Sep 2026 15:07:01 +0000 ROA not after: Sat 05 Dec 2026 16:07:01 +0000 asID: 199741 IP address blocks: 168.91.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:16:0b:ce:99:6f:31:aa:19:04:44:1b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Sep 6 15:07:01 2026 GMT Not After : Dec 5 16:07:01 2026 GMT Subject: CN=23971259-56e2-4be5-b7a7-87dd43bbe9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:ab:0f:c8:b8:da:24:24:e0:08:ab:fa:30: 91:16:41:33:17:83:d2:94:9f:82:24:db:4e:c1:d6: 6e:21:db:60:33:9c:06:4a:da:74:b8:b1:20:9c:2d: 17:ec:25:37:8d:8b:ae:d0:f5:74:ee:8f:9a:e0:af: fa:66:50:b2:52:13:dd:88:2b:4e:66:3d:20:83:53: 7c:07:6b:7b:a2:68:7b:5f:e0:b2:7a:ab:fc:cf:63: ed:87:2c:6d:4b:b1:d6:e7:81:ff:84:aa:a4:b1:38: a3:1d:6e:6a:3d:d2:91:eb:03:9f:b0:93:2c:9b:67: e1:03:b9:24:57:5b:63:b7:02:66:1b:eb:bf:d0:56: 16:fe:33:86:35:8c:5c:60:07:24:2d:68:c2:21:19: 0a:e5:5d:05:14:3a:c1:f2:59:dd:7e:47:5e:9f:1f: 1a:b6:39:3a:eb:a9:2e:61:7c:06:64:0a:ff:78:b5: c6:86:3d:0e:e4:39:56:04:dc:2c:bf:1a:84:6e:51: 49:d4:25:5e:2f:cf:aa:2f:ea:56:cf:bf:c8:d4:ec: 39:75:b8:72:12:52:31:b4:72:fb:1b:da:58:af:c5: 16:59:b9:76:75:d7:3e:c0:c8:25:a8:f5:4b:98:99: b0:26:34:83:3b:98:82:e8:29:70:61:0a:9f:1c:b5: 8a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3C:9B:A3:14:41:CF:91:08:B1:24:A6:A8:34:0C:33:1F:19:1C:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0e0558f2-ed1f-3fe5-b243-d6375c9442a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ed:ed:f9:a6:4f:f3:f8:14:56:aa:16:43:18:71:bb:28:be:ef: 9a:9f:43:62:ed:69:1b:67:1d:5f:f7:70:97:8e:5f:c3:27:8b: 45:f1:1a:bd:4c:34:cb:5d:8c:24:6c:51:8c:5b:cb:01:2d:c2: b4:c7:a8:21:61:b8:5e:44:97:df:e0:42:07:6b:7f:fb:49:f3: ff:98:df:5c:4a:5b:df:d8:b3:67:b2:a0:21:29:6d:2d:d5:af: dd:2b:6d:fc:f8:1e:b3:f8:82:b8:f4:f1:11:02:80:36:44:7c: 67:c4:77:37:75:90:c0:1c:89:fb:32:53:9e:3e:e9:94:50:52: dc:c1:6c:73:eb:9e:72:35:50:aa:1c:9b:e1:21:8b:8d:c7:a1: 23:ec:39:1f:c8:79:89:75:b2:3a:cb:e4:47:76:9c:47:23:69: ed:aa:b4:bb:84:28:df:26:61:40:6b:b2:03:bb:70:5a:c4:6a: 0d:14:4d:54:27:6b:12:aa:21:d4:d3:7c:62:47:6c:c7:5e:ef: d7:3f:04:9a:f4:2b:75:1b:b1:c7:b0:6d:c9:44:69:85:78:1d: c6:77:e7:d7:e9:57:3e:ab:d6:be:ff:e7:7e:ad:2c:2a:70:37: 81:71:10:42:b7:0a:b9:9e:8a:d7:c7:12:65:b8:f1:a8:9e:c2: c3:b1:5c:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8WC86ZbzGqGQREG2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI2MDkwNjE1MDcwMVoXDTI2MTIwNTE2MDcwMVowLzEtMCsGA1UEAxMk MjM5NzEyNTktNTZlMi00YmU1LWI3YTctODdkZDQzYmJlOWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwqrD8i42iQk4Air+jCRFkEzF4PSlJ+CJNtO wdZuIdtgM5wGStp0uLEgnC0X7CU3jYuu0PV07o+a4K/6ZlCyUhPdiCtOZj0gg1N8 B2t7omh7X+Cyeqv8z2PthyxtS7HW54H/hKqksTijHW5qPdKR6wOfsJMsm2fhA7kk V1tjtwJmG+u/0FYW/jOGNYxcYAckLWjCIRkK5V0FFDrB8lndfkdenx8atjk666ku YXwGZAr/eLXGhj0O5DlWBNwsvxqEblFJ1CVeL8+qL+pWz7/I1Ow5dbhyElIxtHL7 G9pYr8UWWbl2ddc+wMglqPVLmJmwJjSDO5iC6ClwYQqfHLWK3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA8m6MUQc+RCLEkpqg0DDMfGRzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvMGUwNTU4ZjItZWQxZi0z ZmU1LWIyNDMtZDYzNzVjOTQ0MmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAO3t+aZP8/gUVqoWQxhxuyi+75qfQ2LtaRtnHV/3cJeOX8Mni0XxGr1M NMtdjCRsUYxbywEtwrTHqCFhuF5El9/gQgdrf/tJ8/+Y31xKW9/Ys2eyoCEpbS3V r90rbfz4HrP4grj08RECgDZEfGfEdzd1kMAcifsyU54+6ZRQUtzBbHPrnnI1UKoc m+Ehi43HoSPsOR/IeYl1sjrL5Ed2nEcjae2qtLuEKN8mYUBrsgO7cFrEag0UTVQn axKqIdTTfGJHbMde79c/BJr0K3UbscewbclEaYV4HcZ359fpVz6r1r7/536tLCpw N4FxEEK3CrmeitfHEmW48aiewsOxXNE= -----END CERTIFICATE-----Generated at Mon Sep 21 18:55:43 2026 by rpki-client