$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/61e7148f-914f-36f7-8756-c3e640c553f2.roa File: 61e7148f-914f-36f7-8756-c3e640c553f2.roa (raw, json) Hash identifier: +lKMh9MEEDT/fEJB8Am6KkV23y8GFnf05mIT4h5XEB8= Subject key identifier: 2F:62:F3:E7:1E:10:74:A7:6C:9B:42:A1:80:65:2F:31:BF:3B:C4:A3 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584F073C0BA61F5AFFD08C69CC80 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/61e7148f-914f-36f7-8756-c3e640c553f2.roa Signing time: Tue 01 Sep 2026 07:47:06 +0000 ROA not before: Tue 01 Sep 2026 07:47:06 +0000 ROA not after: Mon 30 Nov 2026 08:47:06 +0000 asID: 9009 IP address blocks: 168.91.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:3c:0b:a6:1f:5a:ff:d0:8c:69:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Sep 1 07:47:06 2026 GMT Not After : Nov 30 08:47:06 2026 GMT Subject: CN=ab3acc26-db74-4e84-8a77-563c1927c3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:35:b2:15:8d:4a:7a:8a:d4:2a:65:08:28: db:b1:6b:23:f3:7e:e2:b1:cd:6c:c5:49:eb:e9:96: 6c:5a:76:37:de:e3:81:f7:a3:86:67:d3:30:dd:c0: c0:d7:22:e0:92:96:a5:ba:c8:19:9c:cb:dd:79:4d: 17:23:0e:29:b4:8f:85:53:01:a4:97:04:c2:89:d8: dc:b6:22:53:83:db:b6:03:ac:06:95:5b:6f:45:96: f1:be:8d:b2:66:76:07:f1:2c:e4:f9:91:5f:bf:e2: 38:b6:0b:b8:07:48:17:83:32:7e:fc:af:90:c9:bf: ae:b2:8d:bf:42:2c:a6:8d:31:13:5d:1b:7b:c9:dd: 15:7f:f7:7f:6d:4c:c4:73:5e:0d:bb:f0:7b:3f:0e: ed:2f:3d:e3:38:48:ac:91:9a:d4:6c:0f:13:13:02: 64:09:55:52:ad:3a:86:07:ca:91:2f:f5:9e:71:3c: 0e:9c:5d:6c:9b:4a:19:db:27:0e:b9:1f:1d:9f:1a: 3e:e6:9d:67:06:01:aa:e2:df:a0:4e:d4:ab:52:df: 49:e6:88:fc:e3:44:91:62:0d:06:b6:91:c2:51:83: 87:09:c1:c3:b4:6a:2f:9b:9f:26:7b:ab:df:b8:cc: 87:84:51:46:5d:fb:fa:7f:ae:33:17:bc:56:3b:5c: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:62:F3:E7:1E:10:74:A7:6C:9B:42:A1:80:65:2F:31:BF:3B:C4:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/61e7148f-914f-36f7-8756-c3e640c553f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:5b:d7:cd:41:80:66:9c:51:80:7f:1c:c9:f0:c6:2d:c3:0f: fa:d8:35:6b:66:7c:b0:ff:71:92:56:1b:68:d8:44:db:ed:b7: 50:5f:ef:35:0b:1e:49:9f:d9:32:90:3f:93:a1:a7:dc:6d:92: a9:ae:ed:c9:02:e5:12:3b:5d:70:2b:20:a7:61:a7:c5:69:75: 3d:1a:e3:52:c1:b8:d0:5c:96:f4:a2:38:53:b0:eb:0a:f0:c0: eb:8f:5d:92:2d:25:2d:30:08:65:62:bf:bb:b9:58:c5:da:8a: fb:c7:a1:da:d3:d1:b0:d4:62:b9:66:f8:fa:c1:fd:f0:da:1b: 44:7d:16:0c:83:81:99:04:e7:8b:5c:a5:1e:86:ae:8c:6e:80: a8:7d:e0:41:23:6a:80:0d:ed:84:e7:1c:0e:0c:86:ca:21:89: 55:6e:73:5c:82:77:e8:8a:5c:b9:fd:21:26:5f:c7:89:b5:6a: b1:9c:6f:8c:a5:eb:e0:c1:a0:dc:5d:fa:75:39:02:96:5a:4e: 88:93:49:da:8f:64:bd:ec:19:e1:65:f7:09:8d:c3:01:79:c9: 8a:93:d1:cd:95:9b:34:c8:42:c7:f9:1a:cc:28:2a:66:c3:3c: e7:0d:65:cb:b9:7e:e5:ac:fe:3d:d1:a9:54:ff:dc:0f:a5:e4: 6a:45:8a:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8HPAumH1r/0IxpzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI2MDkwMTA3NDcwNloXDTI2MTEzMDA4NDcwNlowLzEtMCsGA1UEAxMk YWIzYWNjMjYtZGI3NC00ZTg0LThhNzctNTYzYzE5MjdjM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf01shWNSnqK1CplCCjbsWsj837isc1sxUnr 6ZZsWnY33uOB96OGZ9Mw3cDA1yLgkpalusgZnMvdeU0XIw4ptI+FUwGklwTCidjc tiJTg9u2A6wGlVtvRZbxvo2yZnYH8Szk+ZFfv+I4tgu4B0gXgzJ+/K+Qyb+uso2/ QiymjTETXRt7yd0Vf/d/bUzEc14Nu/B7Pw7tLz3jOEiskZrUbA8TEwJkCVVSrTqG B8qRL/WecTwOnF1sm0oZ2ycOuR8dnxo+5p1nBgGq4t+gTtSrUt9J5oj840SRYg0G tpHCUYOHCcHDtGovm58me6vfuMyHhFFGXfv6f64zF7xWO1xacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9i8+ceEHSnbJtCoYBlLzG/O8SjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvNjFlNzE0OGYtOTE0Zi0z NmY3LTg3NTYtYzNlNjQwYzU1M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFtrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhb181BgGacUYB/HMnwxi3DD/rYNWtmfLD/cZJWG2jYRNvtt1Bf7zUL Hkmf2TKQP5Ohp9xtkqmu7ckC5RI7XXArIKdhp8VpdT0a41LBuNBclvSiOFOw6wrw wOuPXZItJS0wCGViv7u5WMXaivvHodrT0bDUYrlm+PrB/fDaG0R9FgyDgZkE54tc pR6GroxugKh94EEjaoAN7YTnHA4MhsohiVVuc1yCd+iKXLn9ISZfx4m1arGcb4yl 6+DBoNxd+nU5ApZaToiTSdqPZL3sGeFl9wmNwwF5yYqT0c2VmzTIQsf5GswoKmbD POcNZcu5fuWs/j3RqVT/3A+l5GpFikA= -----END CERTIFICATE-----Generated at Thu Sep 3 23:30:46 2026 by rpki-client