$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/c555a565-f312-3ebf-a248-53e33a9f2e84.roa File: c555a565-f312-3ebf-a248-53e33a9f2e84.roa (raw, json) Hash identifier: g2Qv+QJzQ/I///CJTj8vqk2Oo3qzFLP0/JN9PgNvvW0= Subject key identifier: DB:54:A3:57:71:C5:40:14:29:4F:F5:76:09:30:1D:AE:B7:BC:C0:F7 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584EE601507DA998320A2B5DA770 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/c555a565-f312-3ebf-a248-53e33a9f2e84.roa Signing time: Thu 20 Aug 2026 10:07:05 +0000 ROA not before: Thu 20 Aug 2026 10:07:05 +0000 ROA not after: Wed 18 Nov 2026 11:07:05 +0000 asID: 9009 IP address blocks: 168.91.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:01:50:7d:a9:98:32:0a:2b:5d:a7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Aug 20 10:07:05 2026 GMT Not After : Nov 18 11:07:05 2026 GMT Subject: CN=ff188718-791e-4810-8c86-14a9ee4db9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:74:46:58:1f:4a:a9:cb:8c:0a:c8:b6:61:01: 4a:a8:6f:48:47:09:8d:93:f3:09:07:2b:6d:95:7f: 47:d5:cb:d8:c8:cf:3f:62:8d:d0:32:a7:a7:4a:f5: 0a:3d:c4:95:89:02:79:ee:35:5d:2a:0b:83:53:fd: b2:2f:be:ed:e1:08:e3:08:90:84:7f:99:f9:49:c8: 67:00:0e:2c:8b:88:6a:10:dc:82:6d:b9:9a:3d:69: 83:9e:28:e3:32:c3:90:2a:a9:8b:8b:d3:d8:49:1f: 77:f6:4f:60:74:38:54:05:55:ab:61:ca:6e:2b:33: fb:58:1b:62:30:d0:d1:0c:3d:81:e6:57:fa:d5:4a: 22:d0:04:11:3a:ea:1c:55:9d:41:af:a0:ca:be:46: 2c:60:4e:a6:52:b1:48:1d:9d:e0:04:02:6c:d9:5a: ec:9f:f9:80:fe:cd:31:60:74:b3:06:00:34:96:af: 84:f4:d9:26:9b:b6:5a:0c:54:a4:a7:bc:18:f6:9b: e2:22:77:71:07:d5:62:a0:7b:00:bc:ca:4b:46:e1: ff:aa:7a:c2:0f:be:f9:26:d1:20:c1:89:4a:37:85: 07:48:f6:66:69:ec:cd:26:a6:b8:c6:cf:06:87:0d: 18:70:2c:8c:6b:fa:71:d4:77:ca:7f:2d:3b:83:ce: a5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:54:A3:57:71:C5:40:14:29:4F:F5:76:09:30:1D:AE:B7:BC:C0:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/c555a565-f312-3ebf-a248-53e33a9f2e84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:8d:e4:59:ef:07:ae:7f:ad:a2:2f:66:8e:da:22:90:37:c8: 51:d1:14:f4:92:eb:3d:19:6f:3b:6c:67:bd:e7:62:90:6f:b5: b4:c7:b1:7e:53:a7:d1:e1:65:22:f6:5b:ef:e2:1f:af:7c:dd: aa:3e:3b:4e:db:00:87:ef:53:12:08:28:03:58:b2:f8:aa:70: 95:f0:ac:ba:89:47:55:3d:a5:15:60:69:fb:27:37:e0:0a:af: d5:1b:32:67:58:f9:ea:09:80:74:02:03:5f:1c:a0:9e:6c:d7: 96:68:ed:2a:ce:ad:b9:7e:4b:c5:2f:50:6f:10:3f:b6:6e:f7: 62:c7:5d:9d:70:7a:a7:0b:d2:08:65:e9:62:0b:36:59:fe:32: 3b:25:52:a0:4a:d8:f3:37:42:bb:4a:c0:0d:bc:a1:89:a7:7c: 14:29:9e:18:88:49:bb:22:a0:33:5d:8f:90:d0:ab:9f:16:c1: 2e:fa:34:5d:34:b4:8a:8f:1f:fd:d4:42:d1:37:a6:3d:2d:c1: fa:10:57:67:d1:0d:ec:47:81:40:ef:ff:85:25:11:2c:83:71: 71:bf:d4:90:7b:f8:f7:a5:6c:b5:d5:c6:16:94:44:5c:9b:a7: 4d:80:a7:93:cf:be:91:a3:aa:d1:d6:5b:bc:7c:97:19:6f:e0: b0:44:48:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7mAVB9qZgyCitdp3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI2MDgyMDEwMDcwNVoXDTI2MTExODExMDcwNVowLzEtMCsGA1UEAxMk ZmYxODg3MTgtNzkxZS00ODEwLThjODYtMTRhOWVlNGRiOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XRGWB9KqcuMCsi2YQFKqG9IRwmNk/MJBytt lX9H1cvYyM8/Yo3QMqenSvUKPcSViQJ57jVdKguDU/2yL77t4QjjCJCEf5n5Schn AA4si4hqENyCbbmaPWmDnijjMsOQKqmLi9PYSR939k9gdDhUBVWrYcpuKzP7WBti MNDRDD2B5lf61Uoi0AQROuocVZ1Br6DKvkYsYE6mUrFIHZ3gBAJs2Vrsn/mA/s0x YHSzBgA0lq+E9Nkmm7ZaDFSkp7wY9pviIndxB9VioHsAvMpLRuH/qnrCD775JtEg wYlKN4UHSPZmaezNJqa4xs8Ghw0YcCyMa/px1HfKfy07g86loQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtUo1dxxUAUKU/1dgkwHa63vMD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvYzU1NWE1NjUtZjMxMi0z ZWJmLWEyNDgtNTNlMzNhOWYyZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFt5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOGN5FnvB65/raIvZo7aIpA3yFHRFPSS6z0ZbztsZ73nYpBvtbTHsX5T p9HhZSL2W+/iH6983ao+O07bAIfvUxIIKANYsviqcJXwrLqJR1U9pRVgafsnN+AK r9UbMmdY+eoJgHQCA18coJ5s15Zo7SrOrbl+S8UvUG8QP7Zu92LHXZ1weqcL0ghl 6WILNln+MjslUqBK2PM3QrtKwA28oYmnfBQpnhiISbsioDNdj5DQq58WwS76NF00 tIqPH/3UQtE3pj0twfoQV2fRDexHgUDv/4UlESyDcXG/1JB7+PelbLXVxhaURFyb p02Ap5PPvpGjqtHWW7x8lxlv4LBESMc= -----END CERTIFICATE-----Generated at Tue Sep 1 02:08:58 2026 by rpki-client