$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7601a3e0-7fc9-3c24-bfcf-186aec6c0b9a.roa File: 7601a3e0-7fc9-3c24-bfcf-186aec6c0b9a.roa (raw, json) Hash identifier: xkk0UckCiNsr7iySSsxzAjAI5jBahG2zre4xEIIZBfI= Subject key identifier: 05:C9:8C:9B:A2:0B:5A:81:BC:EA:F4:BE:35:34:48:C8:99:14:45:51 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584DDA55CE81322131575C66F700 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7601a3e0-7fc9-3c24-bfcf-186aec6c0b9a.roa Signing time: Sat 16 May 2026 13:00:31 +0000 ROA not before: Sat 16 May 2026 13:00:31 +0000 ROA not after: Fri 14 Aug 2026 13:00:31 +0000 asID: 46261 IP address blocks: 168.91.66.0/24 maxlen: 24 168.91.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:da:55:ce:81:32:21:31:57:5c:66:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: May 16 13:00:31 2026 GMT Not After : Aug 14 13:00:31 2026 GMT Subject: CN=f876e702-ae62-4544-ac9b-9b5ca3e1149f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:73:6b:0c:ee:9b:87:97:b5:c9:9b:30:3e: 51:69:0b:f9:08:c3:e8:99:c5:14:cd:db:8b:07:f5: 5e:72:82:a2:52:8f:7f:a0:c1:b7:25:b8:5f:5e:1c: 93:55:b7:4b:17:90:74:bb:18:32:bb:91:58:cc:4d: d2:4d:e3:46:27:03:b1:ec:55:fe:a8:51:4a:b7:da: 40:cf:4d:14:11:2f:0c:4a:07:8c:90:16:0a:59:3b: 20:fa:81:94:ed:2c:a5:b6:6f:d5:a9:61:2d:96:70: 08:ba:79:38:fb:69:10:75:9b:84:53:a4:dd:05:1e: f7:b4:32:4b:14:b9:25:91:66:34:5c:03:cd:35:28: 19:59:69:7a:34:30:52:08:00:fa:8e:2b:b1:34:d6: c1:ea:ff:9e:0d:4b:c1:58:b6:72:26:1a:93:4f:75: 2c:74:09:0f:35:af:84:9c:fa:95:67:b0:ff:3e:5a: cf:54:39:9e:7a:1c:3c:cf:48:19:c1:e1:e1:d2:8c: dd:94:e2:3a:49:cf:58:40:2a:7a:c7:a7:82:eb:0e: 17:ab:83:82:bf:fe:45:db:2f:34:ed:3f:0b:4a:c3: 04:31:61:a9:f0:de:01:57:92:fa:43:2b:af:4d:9d: 7b:5c:19:46:22:12:86:6c:b4:31:96:f9:39:f4:e8: 26:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C9:8C:9B:A2:0B:5A:81:BC:EA:F4:BE:35:34:48:C8:99:14:45:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7601a3e0-7fc9-3c24-bfcf-186aec6c0b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:58:61:65:55:f7:aa:8b:5d:0b:f1:d7:fa:7d:d2:6a:59:16: 09:aa:ed:45:22:cf:44:c4:4e:d0:45:21:c8:ed:15:84:0a:50: 07:b1:65:ff:51:74:47:f9:9c:9d:a8:4a:51:cc:8c:c7:f9:42: ec:78:b1:cc:de:4b:15:48:9a:79:7d:98:fc:65:47:0e:48:66: 6e:d8:0a:3b:eb:56:fb:c3:50:e0:9d:37:e3:d4:8a:ee:f9:5c: 95:03:1b:a1:88:c4:0a:01:dc:72:f1:5b:25:83:81:4b:2c:44: 12:3b:f7:62:a1:b5:47:33:83:d3:bc:e6:61:bc:e2:4b:dc:31: 7e:91:75:0d:6d:fb:b1:a0:fc:f6:a2:aa:ac:78:2e:f6:82:b5: 1c:55:3d:b5:85:1e:94:b2:e4:0d:f7:ac:98:35:72:a3:9a:b5: 1e:6c:c7:f6:8c:9f:e4:52:16:4d:9b:b3:0b:12:c3:79:f5:de: 16:58:03:a3:db:b8:97:e9:68:55:8c:79:eb:c1:e6:bb:b8:20: 37:ba:3e:ec:21:ed:b5:88:fe:c7:1e:4f:09:8d:70:5d:be:9d: c9:75:da:ae:88:6a:42:50:01:d3:0a:71:07:71:46:ba:b7:b4: e4:9f:b0:0d:de:b2:2f:a6:66:98:8a:c9:2b:01:f5:9b:7e:70: ad:53:5b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3aVc6BMiExV1xm9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI2MDUxNjEzMDAzMVoXDTI2MDgxNDEzMDAzMVowLzEtMCsGA1UEAxMk Zjg3NmU3MDItYWU2Mi00NTQ0LWFjOWItOWI1Y2EzZTExNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4pzawzum4eXtcmbMD5RaQv5CMPomcUUzduL B/VecoKiUo9/oMG3JbhfXhyTVbdLF5B0uxgyu5FYzE3STeNGJwOx7FX+qFFKt9pA z00UES8MSgeMkBYKWTsg+oGU7Syltm/VqWEtlnAIunk4+2kQdZuEU6TdBR73tDJL FLklkWY0XAPNNSgZWWl6NDBSCAD6jiuxNNbB6v+eDUvBWLZyJhqTT3UsdAkPNa+E nPqVZ7D/PlrPVDmeehw8z0gZweHh0ozdlOI6Sc9YQCp6x6eC6w4Xq4OCv/5F2y80 7T8LSsMEMWGp8N4BV5L6QyuvTZ17XBlGIhKGbLQxlvk59Ogm9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXJjJuiC1qBvOr0vjU0SMiZFEVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvNzYwMWEzZTAtN2ZjOS0z YzI0LWJmY2YtMTg2YWVjNmMwYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL1YYWVV96qLXQvx1/p90mpZFgmq7UUiz0TETtBFIcjtFYQKUAexZf9R dEf5nJ2oSlHMjMf5Qux4sczeSxVImnl9mPxlRw5IZm7YCjvrVvvDUOCdN+PUiu75 XJUDG6GIxAoB3HLxWyWDgUssRBI792KhtUczg9O85mG84kvcMX6RdQ1t+7Gg/Pai qqx4LvaCtRxVPbWFHpSy5A33rJg1cqOatR5sx/aMn+RSFk2bswsSw3n13hZYA6Pb uJfpaFWMeevB5ru4IDe6Puwh7bWI/sceTwmNcF2+ncl12q6IakJQAdMKcQdxRrq3 tOSfsA3esi+mZpiKySsB9Zt+cK1TW/k= -----END CERTIFICATE-----Generated at Wed Jun 3 08:33:02 2026 by rpki-client