$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0c45ef52-daa1-3e19-af05-19d477054b64.roa File: 0c45ef52-daa1-3e19-af05-19d477054b64.roa (raw, json) Hash identifier: wxZGFhpWSUtBaedW0UcSgPOmAo6MmVqKXv4IgalgID4= Subject key identifier: 2A:58:C9:E5:A1:7C:FB:27:80:D8:BE:25:7A:F3:61:8D:04:2B:54:A1 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584D2BDA0AABFA56D6B18902A580 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0c45ef52-daa1-3e19-af05-19d477054b64.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 9009 IP address blocks: 168.91.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:0a:ab:fa:56:d6:b1:89:02:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=b4d5d568-0116-4acc-9d05-7f7a4e8cdd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:33:58:8f:4d:b3:be:e2:5e:0a:f6:a4:9a: 49:88:c1:4b:53:ff:76:7f:73:6e:17:37:78:7f:e8: 59:2f:d5:cc:2b:8e:c8:c6:89:45:21:8f:27:f6:ae: 19:32:1c:5e:bb:8c:ee:e7:31:72:b3:4f:fc:ba:16: 67:4a:6c:9b:4f:73:05:b7:c5:3f:41:59:33:15:4b: 94:83:86:ed:c7:54:32:5f:7a:72:3e:dd:7e:71:5f: 99:a9:14:af:69:8a:ef:56:3e:5e:11:51:2b:f3:36: 3f:ab:d9:f7:c7:39:2f:6c:56:6c:80:98:d9:85:8c: 68:1a:3e:93:94:63:61:64:df:fa:58:4b:24:44:9b: e3:36:8e:eb:66:9a:a0:10:ec:a7:25:2b:e1:a4:4e: ce:42:3f:bd:81:ec:61:6b:35:cb:5c:e9:ea:85:6f: 10:92:1f:01:c5:b4:d4:15:b5:95:3f:35:26:61:fb: 10:e8:d9:6c:54:28:0b:88:29:1f:99:75:f2:f9:46: 6d:61:c2:21:2c:66:c1:78:5b:47:13:71:4c:fc:39: d4:66:d0:ae:6a:cc:01:e4:f9:c2:50:75:63:49:02: 99:90:23:23:a7:73:0f:20:a3:75:5b:ed:2c:45:47: 01:28:51:0e:5d:70:08:b2:a5:f0:c5:0c:15:e9:b4: a1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:58:C9:E5:A1:7C:FB:27:80:D8:BE:25:7A:F3:61:8D:04:2B:54:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0c45ef52-daa1-3e19-af05-19d477054b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:16:94:79:22:52:a1:f7:3c:b2:11:f5:cd:c5:54:29:2c:29: 3c:2e:88:e1:61:97:a5:23:1d:ff:18:ee:ac:a6:b3:1a:72:c6: 8f:fb:4e:a6:e0:11:f3:ad:f5:1c:1a:98:fb:f1:2c:78:ed:b9: 73:3b:4c:7b:38:ff:80:0d:7f:61:61:83:ba:5a:c9:65:1e:f2: 86:79:a4:e5:1a:56:44:40:7c:63:2f:c0:82:f0:9f:8e:8b:a3: ef:26:40:a6:dc:40:d7:51:29:e9:39:92:16:0e:01:b7:15:32: cc:ad:08:a8:07:ec:ac:14:13:29:54:b5:6a:55:c8:b8:ca:21: 9f:eb:e2:09:49:b4:b6:d9:18:16:22:21:52:f3:c0:40:71:2b: c4:9f:b3:11:2c:41:f8:8f:5c:45:d0:c6:e8:01:80:40:c7:be: ed:84:0c:9d:5f:30:8c:b5:9a:fb:63:81:f7:c5:2c:8a:b8:d6: 23:02:59:a3:96:d3:74:56:f6:27:45:2a:0a:8a:ad:24:6a:3e: 83:a3:df:2b:0e:7e:35:d7:62:75:69:cf:1b:9e:30:3e:9e:28: bf:20:6e:22:61:fd:9e:7d:ed:e7:11:3c:fc:5a:b8:d0:ab:1d: b1:8c:4c:f5:cf:a4:b2:21:22:b3:dd:53:ef:fe:60:b3:0e:bf: d2:8a:a3:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gqr+lbWsYkCpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YjRkNWQ1NjgtMDExNi00YWNjLTlkMDUtN2Y3YTRlOGNkZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSwzWI9Ns77iXgr2pJpJiMFLU/92f3NuFzd4 f+hZL9XMK47IxolFIY8n9q4ZMhxeu4zu5zFys0/8uhZnSmybT3MFt8U/QVkzFUuU g4btx1QyX3pyPt1+cV+ZqRSvaYrvVj5eEVEr8zY/q9n3xzkvbFZsgJjZhYxoGj6T lGNhZN/6WEskRJvjNo7rZpqgEOynJSvhpE7OQj+9gexhazXLXOnqhW8Qkh8BxbTU FbWVPzUmYfsQ6NlsVCgLiCkfmXXy+UZtYcIhLGbBeFtHE3FM/DnUZtCuaswB5PnC UHVjSQKZkCMjp3MPIKN1W+0sRUcBKFEOXXAIsqXwxQwV6bShLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpYyeWhfPsngNi+JXrzYY0EK1ShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvMGM0NWVmNTItZGFhMS0z ZTE5LWFmMDUtMTlkNDc3MDU0YjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFtLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYWlHkiUqH3PLIR9c3FVCksKTwuiOFhl6UjHf8Y7qymsxpyxo/7Tqbg EfOt9RwamPvxLHjtuXM7THs4/4ANf2Fhg7payWUe8oZ5pOUaVkRAfGMvwILwn46L o+8mQKbcQNdRKek5khYOAbcVMsytCKgH7KwUEylUtWpVyLjKIZ/r4glJtLbZGBYi IVLzwEBxK8SfsxEsQfiPXEXQxugBgEDHvu2EDJ1fMIy1mvtjgffFLIq41iMCWaOW 03RW9idFKgqKrSRqPoOj3ysOfjXXYnVpzxueMD6eKL8gbiJh/Z597ecRPPxauNCr HbGMTPXPpLIhIrPdU+/+YLMOv9KKox0= -----END CERTIFICATE-----Generated at Thu Mar 26 06:03:54 2026 by rpki-client