$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa File: 400e6027-1418-38f3-8d41-13b0faa52044.roa (raw, json) Hash identifier: 6Hb+m7XLLhyiGHsssXQCu9P+5jlNLYMONlayyGgq+LM= Subject key identifier: 22:FE:BB:C5:88:5D:82:7E:03:1B:62:A3:93:1C:04:37:E7:F7:F8:9D Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584EA78F424AFF228305A87C1E68 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 149428 IP address blocks: 168.91.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:42:4a:ff:22:83:05:a8:7c:1e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=95d7c2ca-6f91-4698-907a-3e3cfcc22bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8a:a9:40:b2:7f:c3:b8:34:0a:58:40:9e:b7: 4c:6c:f4:0a:7c:01:04:03:0e:c3:77:3f:48:50:ed: 33:f4:c5:d7:0d:b1:71:b7:63:55:87:33:d2:f8:33: 58:9f:0d:e2:ef:3f:1f:39:df:ea:7d:10:f4:85:51: a0:e2:df:55:a3:10:91:1d:5d:de:b1:0e:66:a7:f4: 2a:0b:b6:f1:e0:fa:64:ed:e4:e2:b4:2e:af:34:65: 3f:f3:38:03:05:3c:02:45:9d:e1:a8:5e:94:a3:11: 10:c5:f4:79:d9:f0:91:a4:b1:d9:d7:c8:5b:ac:e1: 42:b6:9d:93:ef:d3:7c:23:3a:36:9b:e2:e0:b8:01: de:d4:6c:dd:0c:ef:d2:5f:f7:1e:4e:f3:0f:ca:11: 74:43:32:7c:73:89:bf:0c:c4:e6:5f:29:13:16:66: f1:58:ae:65:01:00:07:e2:59:da:cd:26:ce:93:c3: 9f:7b:67:e0:a7:79:84:0d:04:87:e1:3a:60:d4:6f: 1f:59:f3:f3:3f:10:a3:c4:2c:8c:0e:0a:6a:70:c6: c5:f2:1b:a8:7a:12:2a:37:bd:0a:82:84:c1:2e:45: b5:a6:98:53:29:77:ed:82:27:37:ec:a7:dd:6d:53: 73:14:bb:05:91:f2:78:41:a3:44:32:df:6a:68:1e: 12:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FE:BB:C5:88:5D:82:7E:03:1B:62:A3:93:1C:04:37:E7:F7:F8:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:d8:57:3d:83:4a:d3:2f:6f:ee:1b:f3:5d:29:89:99:d4:fe: e1:3a:bd:f3:43:ec:1c:5c:6a:1c:44:e6:e8:79:a2:b2:bb:28: 97:9c:a5:73:c0:b7:17:3f:ca:b0:3d:7f:41:66:b8:90:95:b6: c1:e5:25:bb:b9:55:2a:0d:5e:de:22:1b:b7:f7:1d:a2:80:34: 8e:5d:ba:c2:f5:51:12:ec:72:03:78:3b:bc:d9:82:52:df:f9: 06:42:a1:90:03:56:e9:71:b9:c9:e6:1a:55:96:56:aa:cd:c1: 19:dc:31:8f:05:4c:e0:1b:59:25:b7:f3:7c:6e:4a:7c:55:91: 3c:c9:ae:91:fa:4c:a8:8c:b8:f0:bf:0e:07:6f:74:67:e3:1c: 7c:f7:e6:dd:82:d7:0c:0c:8c:a3:02:2b:f9:c2:64:cc:e8:2c: 53:8f:5d:76:e3:06:fb:d7:51:58:79:e9:32:04:d8:04:af:f2: f2:34:43:50:76:b4:62:1c:fe:41:14:cd:53:47:57:ca:9b:c1: e5:d8:dd:16:f5:0f:7b:bd:dc:9d:ff:47:a3:8d:f9:1b:60:cb: 76:f7:fc:fa:57:6e:5c:8f:cf:7b:56:15:21:91:8d:e5:49:fd: ee:f5:d4:8f:c3:6d:12:b5:6f:55:22:4e:0b:1b:cf:49:9c:73: 36:81:63:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj0JK/yKDBah8HmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTVkN2MyY2EtNmY5MS00Njk4LTkwN2EtM2UzY2ZjYzIyYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIqpQLJ/w7g0ClhAnrdMbPQKfAEEAw7Ddz9I UO0z9MXXDbFxt2NVhzPS+DNYnw3i7z8fOd/qfRD0hVGg4t9VoxCRHV3esQ5mp/Qq C7bx4Ppk7eTitC6vNGU/8zgDBTwCRZ3hqF6UoxEQxfR52fCRpLHZ18hbrOFCtp2T 79N8Izo2m+LguAHe1GzdDO/SX/ceTvMPyhF0QzJ8c4m/DMTmXykTFmbxWK5lAQAH 4lnazSbOk8Ofe2fgp3mEDQSH4Tpg1G8fWfPzPxCjxCyMDgpqcMbF8huoehIqN70K goTBLkW1pphTKXftgic37KfdbVNzFLsFkfJ4QaNEMt9qaB4SDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCL+u8WIXYJ+Axtio5McBDfn9/idMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvNDAwZTYwMjctMTQxOC0z OGYzLThkNDEtMTNiMGZhYTUyMDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFt1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANfYVz2DStMvb+4b810piZnU/uE6vfND7BxcahxE5uh5orK7KJecpXPA txc/yrA9f0FmuJCVtsHlJbu5VSoNXt4iG7f3HaKANI5dusL1URLscgN4O7zZglLf +QZCoZADVulxucnmGlWWVqrNwRncMY8FTOAbWSW383xuSnxVkTzJrpH6TKiMuPC/ DgdvdGfjHHz35t2C1wwMjKMCK/nCZMzoLFOPXXbjBvvXUVh56TIE2ASv8vI0Q1B2 tGIc/kEUzVNHV8qbweXY3Rb1D3u93J3/R6ON+Rtgy3b3/PpXblyPz3tWFSGRjeVJ /e711I/DbRK1b1UiTgsbz0mcczaBYwY= -----END CERTIFICATE-----Generated at Thu Sep 10 10:06:40 2026 by rpki-client