$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7d8aac9f-845a-35c1-b36f-2bea4e0a8f02.roa File: 7d8aac9f-845a-35c1-b36f-2bea4e0a8f02.roa (raw, json) Hash identifier: 0KmZmsAmZ4UJFGxE/0LUV3fGoLMqReoK/RxQ6ExBKsI= Subject key identifier: F0:B9:4B:C9:C0:5C:F0:B5:4C:A5:C7:A9:78:4B:6A:1A:99:6D:B7:84 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584F89A8772483E16933A148EB00 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7d8aac9f-845a-35c1-b36f-2bea4e0a8f02.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 11426 IP address blocks: 168.91.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:77:24:83:e1:69:33:a1:48:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=1fc930b3-9f63-459b-9f21-04310f61e915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:3e:34:53:8d:a1:63:ec:7f:b5:6e:58:46: d3:56:3f:56:a4:bf:c1:8b:d4:bc:9a:53:58:5d:95: 78:05:ce:06:1b:03:9f:2e:b5:48:15:3e:6e:bc:16: fc:39:ec:e1:98:dc:6e:b1:db:b7:28:90:ba:4e:1d: 66:2f:39:2a:f5:76:41:cb:0a:eb:d4:08:8e:6c:52: ea:b4:9a:1c:7f:33:55:a0:ef:9d:d1:0c:1a:ff:dd: ef:39:3a:36:85:49:cf:c8:63:bc:bb:1a:b1:6e:90: 0e:9c:35:0d:f4:8d:92:38:22:b6:c8:6e:c0:c2:f4: 3e:56:04:de:40:ab:08:fb:4a:80:d2:e7:8c:42:bd: bb:c9:36:e0:72:56:37:fe:26:0b:f2:46:95:b9:bf: c9:53:ab:97:c7:f8:5c:0a:b2:89:eb:9e:47:d1:75: 8d:48:5d:f1:50:f2:7d:d8:04:5b:0b:61:2f:6a:7e: 8e:e8:f8:4a:06:ee:57:15:c1:31:17:9c:72:64:19: 11:39:b4:28:bf:1a:21:ce:82:e2:d8:f5:34:9a:8f: 38:fa:a0:98:d4:01:41:5a:f8:1b:65:64:54:d6:e9: 5a:fe:c9:51:63:8c:37:8c:80:00:68:f6:76:06:03: 8a:36:24:e8:03:45:11:ee:a1:b3:72:6f:df:12:52: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B9:4B:C9:C0:5C:F0:B5:4C:A5:C7:A9:78:4B:6A:1A:99:6D:B7:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7d8aac9f-845a-35c1-b36f-2bea4e0a8f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f9:09:99:e5:d3:45:d7:b1:46:92:be:d1:74:e8:43:41:39: a0:51:f5:ba:03:31:c0:51:e8:5e:54:0c:be:06:8d:ae:38:c9: a1:96:45:95:7a:01:bb:37:81:fa:0a:d1:6c:2f:a1:89:6d:19: 73:ce:7e:c9:19:77:28:64:5d:3c:98:6e:26:22:dc:ae:99:3c: 12:d8:e8:2a:c8:46:61:40:2e:04:41:f6:cc:ea:26:d3:8c:de: 0a:9d:6c:6e:dc:b6:ed:23:93:c2:d6:81:44:0b:4e:29:88:59: 5d:2e:45:91:ef:29:a7:78:bb:d2:05:d4:a9:45:6a:6d:7d:5d: b6:85:61:4f:4a:ca:ff:c2:12:4e:fd:ae:b9:a2:d9:cf:98:ad: f9:6b:42:bc:ad:50:f2:50:2d:63:82:b2:23:a5:7e:70:3f:b6: c9:85:87:7e:c4:53:44:62:2f:03:e7:be:bf:df:eb:43:3f:28: 80:d6:b2:da:b4:fc:34:c5:a3:49:b2:c0:3e:28:15:79:47:e0: ef:c6:8a:53:35:b5:72:2a:d1:c4:4a:58:26:1b:25:64:31:80: 21:94:4b:13:71:d8:db:f7:55:9c:61:7e:3c:b2:db:aa:a7:d4: c2:4e:55:03:0f:13:ed:f3:bd:4b:08:5b:c6:23:e3:fc:dd:c6: 3c:15:2b:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqHckg+FpM6FI6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MWZjOTMwYjMtOWY2My00NTliLTlmMjEtMDQzMTBmNjFlOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+c+NFONoWPsf7VuWEbTVj9WpL/Bi9S8mlNY XZV4Bc4GGwOfLrVIFT5uvBb8OezhmNxusdu3KJC6Th1mLzkq9XZBywrr1AiObFLq tJocfzNVoO+d0Qwa/93vOTo2hUnPyGO8uxqxbpAOnDUN9I2SOCK2yG7AwvQ+VgTe QKsI+0qA0ueMQr27yTbgclY3/iYL8kaVub/JU6uXx/hcCrKJ655H0XWNSF3xUPJ9 2ARbC2Evan6O6PhKBu5XFcExF5xyZBkRObQovxohzoLi2PU0mo84+qCY1AFBWvgb ZWRU1ula/slRY4w3jIAAaPZ2BgOKNiToA0UR7qGzcm/fElLSIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPC5S8nAXPC1TKXHqXhLahqZbbeEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvN2Q4YWFjOWYtODQ1YS0z NWMxLWIzNmYtMmJlYTRlMGE4ZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH5CZnl00XXsUaSvtF06ENBOaBR9boDMcBR6F5UDL4Gja44yaGWRZV6 Abs3gfoK0WwvoYltGXPOfskZdyhkXTyYbiYi3K6ZPBLY6CrIRmFALgRB9szqJtOM 3gqdbG7ctu0jk8LWgUQLTimIWV0uRZHvKad4u9IF1KlFam19XbaFYU9Kyv/CEk79 rrmi2c+YrflrQrytUPJQLWOCsiOlfnA/tsmFh37EU0RiLwPnvr/f60M/KIDWstq0 /DTFo0mywD4oFXlH4O/GilM1tXIq0cRKWCYbJWQxgCGUSxNx2Nv3VZxhfjyy26qn 1MJOVQMPE+3zvUsIW8Yj4/zdxjwVK3c= -----END CERTIFICATE-----Generated at Thu Oct 22 17:42:27 2026 by rpki-client