$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa File: 0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa (raw, json) Hash identifier: VsGJuXbAJNrjrXn2By5itoekdmHRKgc4zIs2o17A96g= Subject key identifier: 40:45:D3:2F:E6:C1:15:5C:3E:80:3B:38:21:38:9C:6A:C7:38:E8:B3 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584ED431E5413B31F294C4999CC0 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 9009 IP address blocks: 168.91.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:e5:41:3b:31:f2:94:c4:99:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=86a59563-e932-4fbd-a2df-f90f8c79fc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:40:16:2d:f3:db:32:8a:4f:ea:e0:5c:23:90: e9:7a:fc:7c:0c:cd:37:35:3f:69:8e:5d:73:87:6e: b5:e3:62:f6:58:0e:a2:8f:40:e4:11:15:ca:eb:e9: 33:ed:61:c2:ad:4d:36:2f:cf:8e:ac:69:24:bb:96: 5b:33:3a:ce:96:3e:61:61:2b:e0:d9:43:d7:19:51: 2a:b0:8c:dc:b0:f2:99:c5:0a:2f:84:d0:63:41:c3: f4:6f:bf:07:00:06:b6:d5:3d:20:0c:57:e8:72:67: 74:19:de:fb:b8:49:fb:7c:5f:e3:a1:38:2b:55:d6: 20:93:34:cb:c7:97:6b:4d:54:0f:a2:5d:c8:a1:52: 94:54:dd:65:6d:ee:b5:b2:ed:51:eb:28:8a:15:cf: 96:66:7b:d0:37:44:40:bb:58:b8:36:d5:7d:cc:ae: d7:50:12:f0:96:16:d7:1d:81:16:21:d6:dc:90:9d: d6:ab:b1:66:c9:06:03:86:b9:e1:0e:5e:fc:55:b0: 1b:52:53:fe:6f:e4:48:96:e7:b4:fe:b0:a4:a4:81: 55:8f:6c:8a:26:a5:6a:d7:9d:25:62:33:73:1f:a7: 46:89:89:8d:25:60:36:20:b6:45:01:10:63:59:43: dc:98:17:0c:34:06:65:b8:d9:ca:d1:b5:f7:cf:8a: 84:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:45:D3:2F:E6:C1:15:5C:3E:80:3B:38:21:38:9C:6A:C7:38:E8:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:26:d8:5a:a8:0f:e6:4b:f4:95:d9:ad:1e:40:7a:c3:a1:e6: 7f:55:f0:50:08:96:c6:ee:52:88:10:8b:55:d4:54:fc:47:60: 9c:eb:df:76:98:a4:53:51:0e:ba:20:9a:0a:86:06:ed:14:40: 93:70:96:08:52:de:0a:36:d0:22:92:4b:6f:ac:fc:c1:3d:67: 0a:70:05:87:69:63:17:65:b3:ac:b3:a5:3a:0e:a9:23:d1:1f: ea:f7:e2:1e:77:2b:91:cb:b1:92:da:48:57:92:15:be:d7:33: 72:5f:d1:ca:13:7b:9d:8a:16:eb:94:de:c9:a8:2c:14:e7:36: ce:ba:a9:56:86:92:7b:19:63:c2:57:17:47:ed:69:c8:7c:a5: 8a:1f:5a:f8:b0:fb:59:30:42:98:68:ae:c9:b7:0f:1c:1c:45: 5d:c6:b9:44:32:8e:04:94:0d:72:0a:26:b8:1e:29:6c:8c:65: 6b:f1:91:1f:3c:e4:6b:c0:52:fa:40:f5:45:f4:67:01:b6:d0: ec:29:8e:36:83:d6:e8:b0:ae:41:45:38:2a:e9:de:33:24:59: d6:99:44:4c:a0:a3:6b:0d:fc:1b:02:b3:c2:bd:07:b0:1b:25: d4:49:9a:eb:41:ad:08:79:2f:65:e2:13:82:1a:c7:11:40:19: bd:36:a4:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMeVBOzHylMSZnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk ODZhNTk1NjMtZTkzMi00ZmJkLWEyZGYtZjkwZjhjNzlmYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUAWLfPbMopP6uBcI5Dpevx8DM03NT9pjl1z h26142L2WA6ij0DkERXK6+kz7WHCrU02L8+OrGkku5ZbMzrOlj5hYSvg2UPXGVEq sIzcsPKZxQovhNBjQcP0b78HAAa21T0gDFfocmd0Gd77uEn7fF/joTgrVdYgkzTL x5drTVQPol3IoVKUVN1lbe61su1R6yiKFc+WZnvQN0RAu1i4NtV9zK7XUBLwlhbX HYEWIdbckJ3Wq7FmyQYDhrnhDl78VbAbUlP+b+RIlue0/rCkpIFVj2yKJqVq150l YjNzH6dGiYmNJWA2ILZFARBjWUPcmBcMNAZluNnK0bX3z4qEwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBF0y/mwRVcPoA7OCE4nGrHOOizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvMGZhNGIzNjMtOGJkMy0z MjBhLWI1ZmEtMmUxMzIxYjQxNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcm2FqoD+ZL9JXZrR5AesOh5n9V8FAIlsbuUogQi1XUVPxHYJzr33aY pFNRDrogmgqGBu0UQJNwlghS3go20CKSS2+s/ME9ZwpwBYdpYxdls6yzpToOqSPR H+r34h53K5HLsZLaSFeSFb7XM3Jf0coTe52KFuuU3smoLBTnNs66qVaGknsZY8JX F0ftach8pYofWviw+1kwQphorsm3DxwcRV3GuUQyjgSUDXIKJrgeKWyMZWvxkR88 5GvAUvpA9UX0ZwG20OwpjjaD1uiwrkFFOCrp3jMkWdaZREygo2sN/BsCs8K9B7Ab JdRJmutBrQh5L2XiE4IaxxFAGb02pDM= -----END CERTIFICATE-----Generated at Mon Sep 21 12:32:36 2026 by rpki-client