$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/5761e698-8303-343c-9d59-f2fd2c87dd63.roa File: 5761e698-8303-343c-9d59-f2fd2c87dd63.roa (raw, json) Hash identifier: iVcxzbH0IM3JD+3tKddufHsxltStQgVIQxtjDWW+iRg= Subject key identifier: 3E:64:79:20:94:04:47:AF:A8:64:2C:F6:51:F2:EF:45:92:47:83:1F Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584B0B76A8C942C9E2E486E0A2E0 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/5761e698-8303-343c-9d59-f2fd2c87dd63.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 9009 IP address blocks: 168.91.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a8:c9:42:c9:e2:e4:86:e0:a2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=3ea4b740-6cc0-43dd-86d4-2f85d8f649bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:92:19:d2:67:c4:81:fb:d1:c7:4e:03:f8:a0: cc:de:ef:d7:de:cd:5e:24:df:7d:aa:fd:2f:70:f1: 60:0f:ad:cd:c2:74:fd:c9:1e:8d:76:f3:9e:87:e7: 2f:1d:ea:a1:99:20:44:b4:b8:70:18:f5:87:2d:1f: f6:bb:18:ae:9e:69:a0:d6:fc:be:65:53:2f:16:98: 6f:fc:4b:41:07:90:91:aa:92:fb:00:0c:6c:52:3c: 2b:7d:e3:c5:ef:17:c7:68:c8:f3:e5:d1:1a:24:17: b0:14:f9:82:87:2f:10:4e:1f:10:81:03:3f:01:a0: 2f:58:69:7a:36:b9:3b:6d:6e:28:da:dc:77:57:a4: 8f:f6:4f:24:a5:42:1d:64:a9:85:70:31:1f:87:ad: b8:09:f3:48:bd:a9:c1:d1:cf:de:69:2a:65:57:51: a2:c1:24:07:49:be:10:c8:4a:1d:d4:f7:ca:fa:68: 3b:48:b8:1c:c3:6f:1f:8f:40:c8:f7:f0:a3:13:99: 4b:72:be:24:4c:7d:27:75:97:a0:04:65:3e:a0:69: 33:52:89:b2:60:ce:1e:1b:35:22:01:96:0a:be:d1: ea:80:68:8d:d4:19:c2:d0:97:de:9a:5f:16:bd:06: bc:f9:33:64:f5:00:a7:78:26:b5:b3:6d:f9:bb:b2: 98:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:64:79:20:94:04:47:AF:A8:64:2C:F6:51:F2:EF:45:92:47:83:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/5761e698-8303-343c-9d59-f2fd2c87dd63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:1b:bd:08:49:37:64:e3:90:f2:14:1d:36:81:29:97:b5:19: 24:42:d5:3b:59:72:14:22:82:b1:ff:e0:5b:6a:a8:80:14:d9: 43:82:04:40:68:73:a5:02:b3:2f:c2:5b:3a:a7:35:9b:4c:22: 5a:1c:9d:7e:a8:84:07:c4:4f:0b:e5:a9:1b:ac:51:0d:80:95: ec:1b:56:f5:3b:d6:98:46:65:14:80:2b:ba:33:8a:72:9f:db: a6:68:4a:5c:83:2f:1f:80:b1:02:e8:19:e9:ef:a0:8e:23:2e: fe:49:78:93:86:8b:22:d5:e7:fc:73:95:03:04:f5:1b:07:59: 52:d9:f0:f0:56:65:ce:4f:9f:1d:41:50:b9:91:c3:d8:08:05: e3:e3:d2:a4:e3:b8:61:35:4e:e0:04:43:4a:23:a8:e4:11:39: b4:9e:7b:18:49:fc:39:a8:1c:6e:23:cf:63:b1:7b:a0:03:ca: 09:fa:3e:05:81:6a:b1:79:b6:cf:73:14:ed:85:27:73:fc:65: 5c:75:a7:44:09:34:4d:83:42:27:59:c7:4c:61:d5:7c:8e:c6: 83:9e:4a:8d:09:ee:01:a5:b7:24:79:e2:10:e6:9a:df:86:43: 9e:96:cc:ab:f7:79:17:28:f2:ea:38:d6:7b:84:4f:48:3e:60: 64:f9:aa:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqjJQsni5IbgouAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk M2VhNGI3NDAtNmNjMC00M2RkLTg2ZDQtMmY4NWQ4ZjY0OWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZIZ0mfEgfvRx04D+KDM3u/X3s1eJN99qv0v cPFgD63NwnT9yR6NdvOeh+cvHeqhmSBEtLhwGPWHLR/2uxiunmmg1vy+ZVMvFphv /EtBB5CRqpL7AAxsUjwrfePF7xfHaMjz5dEaJBewFPmChy8QTh8QgQM/AaAvWGl6 Nrk7bW4o2tx3V6SP9k8kpUIdZKmFcDEfh624CfNIvanB0c/eaSplV1GiwSQHSb4Q yEod1PfK+mg7SLgcw28fj0DI9/CjE5lLcr4kTH0ndZegBGU+oGkzUomyYM4eGzUi AZYKvtHqgGiN1BnC0Jfeml8WvQa8+TNk9QCneCa1s235u7KYdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5keSCUBEevqGQs9lHy70WSR4MfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvNTc2MWU2OTgtODMwMy0z NDNjLTlkNTktZjJmZDJjODdkZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8bvQhJN2TjkPIUHTaBKZe1GSRC1TtZchQigrH/4FtqqIAU2UOCBEBo c6UCsy/CWzqnNZtMIlocnX6ohAfETwvlqRusUQ2AlewbVvU71phGZRSAK7ozinKf 26ZoSlyDLx+AsQLoGenvoI4jLv5JeJOGiyLV5/xzlQME9RsHWVLZ8PBWZc5Pnx1B ULmRw9gIBePj0qTjuGE1TuAEQ0ojqOQRObSeexhJ/DmoHG4jz2Oxe6ADygn6PgWB arF5ts9zFO2FJ3P8ZVx1p0QJNE2DQidZx0xh1XyOxoOeSo0J7gGltyR54hDmmt+G Q56WzKv3eRco8uo41nuET0g+YGT5qhA= -----END CERTIFICATE-----Generated at Tue Oct 14 14:00:01 2025 by rpki-client