$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/3b03cd37-296c-39f7-acfb-845eb13cb952.roa File: 3b03cd37-296c-39f7-acfb-845eb13cb952.roa (raw, json) Hash identifier: WaxcfQoaMAsFmzbdSKwKPHeVqYJAICfpEPagCUlC1BY= Subject key identifier: 85:58:09:13:4E:35:E1:E8:F3:A1:98:9E:9A:5B:A3:95:7D:18:FB:C4 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584F0748B1C79981E2F5B38E5B00 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/3b03cd37-296c-39f7-acfb-845eb13cb952.roa Signing time: Tue 01 Sep 2026 08:12:35 +0000 ROA not before: Tue 01 Sep 2026 08:12:35 +0000 ROA not after: Mon 30 Nov 2026 09:12:35 +0000 asID: 9009 IP address blocks: 168.91.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:48:b1:c7:99:81:e2:f5:b3:8e:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Sep 1 08:12:35 2026 GMT Not After : Nov 30 09:12:35 2026 GMT Subject: CN=b2f4e328-27f2-4286-9ac4-6f093648f75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:66:60:02:e1:7a:b3:bd:95:53:4c:5b:82:f8: 7b:df:d7:6d:bd:02:de:ac:ae:ff:c5:09:ff:3f:bd: c6:77:29:a4:3f:6c:f7:8b:46:97:45:3b:de:3b:8e: 7f:6a:b9:b1:e2:0b:a1:6b:b3:22:28:10:ae:56:6b: 00:e2:dd:07:5e:c6:54:59:ee:16:82:6a:89:ec:79: 2d:17:8c:74:89:e3:dd:21:10:56:00:98:d8:51:2c: 1f:ab:ea:46:c6:eb:a4:fd:71:6a:12:62:1a:59:cd: 2e:c8:18:5c:a5:d8:74:2e:ec:de:48:cd:af:05:75: f7:37:2c:11:89:84:55:ad:4f:77:c5:13:a9:b0:ee: 64:6c:63:13:49:21:2d:ae:e1:e6:b8:25:e1:80:75: 0a:59:33:5f:8d:19:cf:df:c5:84:de:ca:cd:ac:0b: 31:c8:3d:14:73:49:1a:e0:ed:44:e8:fc:4e:96:1a: 53:b9:90:75:fe:0d:5a:09:ba:56:24:d8:8d:20:d3: f9:83:61:eb:8d:46:5c:f2:85:a6:3c:f5:9f:c5:af: 3c:b3:fb:18:f9:73:6a:72:5f:38:46:e6:19:55:4d: 74:93:08:ca:c1:8e:37:f4:32:48:23:58:2c:77:0d: c6:be:a3:d1:57:93:cd:0d:58:4c:74:39:08:fd:b6: bf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:58:09:13:4E:35:E1:E8:F3:A1:98:9E:9A:5B:A3:95:7D:18:FB:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/3b03cd37-296c-39f7-acfb-845eb13cb952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e4:51:55:18:b3:3b:c1:36:15:03:b1:48:de:4c:95:d5:6f:71: 20:48:1d:0f:e9:46:85:57:d6:e0:31:32:65:3e:fa:44:c1:d1: a0:38:23:7d:c9:6a:d1:d0:19:f5:82:be:6c:75:4c:b2:0a:6b: 2b:e3:05:74:85:70:01:4f:94:54:5b:75:dc:71:d8:67:52:38: ff:41:ed:a2:68:36:e9:da:bf:83:9d:00:81:66:4a:32:9c:dc: 45:0e:88:a3:5d:9c:dd:41:1c:06:c9:9c:b2:e6:78:8e:d2:ed: 72:54:f9:b6:51:cc:f6:29:06:cd:c7:96:a5:79:4e:b4:25:d8: 08:b2:0b:85:7b:4e:42:fe:8a:dd:06:3c:b8:7a:94:81:29:64: ea:ce:02:54:45:55:cf:fb:ea:36:a6:78:2f:12:7a:21:9a:02: 73:8f:25:8c:43:df:8d:a2:74:a8:ea:85:0f:b2:08:fe:df:af: e2:fb:88:24:45:90:f2:66:a2:ad:25:46:ed:66:13:2a:ab:3b: f6:e5:a9:42:b2:ed:3c:59:b3:64:08:7d:ac:2b:88:6d:1e:8d: 70:03:77:da:46:d0:55:9b:06:61:07:eb:b3:b7:fd:b5:99:0a: cf:b2:61:f8:a0:3b:e9:8c:3f:c0:18:1c:1d:24:d6:48:62:98: b0:84:26:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8HSLHHmYHi9bOOWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI2MDkwMTA4MTIzNVoXDTI2MTEzMDA5MTIzNVowLzEtMCsGA1UEAxMk YjJmNGUzMjgtMjdmMi00Mjg2LTlhYzQtNmYwOTM2NDhmNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2ZgAuF6s72VU0xbgvh739dtvQLerK7/xQn/ P73GdymkP2z3i0aXRTveO45/armx4guha7MiKBCuVmsA4t0HXsZUWe4WgmqJ7Hkt F4x0iePdIRBWAJjYUSwfq+pGxuuk/XFqEmIaWc0uyBhcpdh0LuzeSM2vBXX3NywR iYRVrU93xROpsO5kbGMTSSEtruHmuCXhgHUKWTNfjRnP38WE3srNrAsxyD0Uc0ka 4O1E6PxOlhpTuZB1/g1aCbpWJNiNINP5g2HrjUZc8oWmPPWfxa88s/sY+XNqcl84 RuYZVU10kwjKwY439DJII1gsdw3GvqPRV5PNDVhMdDkI/ba/PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVYCRNONeHo86GYnppbo5V9GPvEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvM2IwM2NkMzctMjk2Yy0z OWY3LWFjZmItODQ1ZWIxM2NiOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAORRVRizO8E2FQOxSN5MldVvcSBIHQ/pRoVX1uAxMmU++kTB0aA4I33J atHQGfWCvmx1TLIKayvjBXSFcAFPlFRbddxx2GdSOP9B7aJoNunav4OdAIFmSjKc 3EUOiKNdnN1BHAbJnLLmeI7S7XJU+bZRzPYpBs3HlqV5TrQl2AiyC4V7TkL+it0G PLh6lIEpZOrOAlRFVc/76jameC8SeiGaAnOPJYxD342idKjqhQ+yCP7fr+L7iCRF kPJmoq0lRu1mEyqrO/blqUKy7TxZs2QIfawriG0ejXADd9pG0FWbBmEH67O3/bWZ Cs+yYfigO+mMP8AYHB0k1khimLCEJu8= -----END CERTIFICATE-----Generated at Thu Sep 3 23:30:44 2026 by rpki-client