$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa File: 0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa (raw, json) Hash identifier: +MQOJWOGBmomZxLQVo8HcJp2FXfZyld5nomarU3JKno= Subject key identifier: 43:B1:39:44:B4:DE:EF:EB:AE:EA:62:DA:47:05:04:4B:4C:69:7B:B3 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584B92DCE45F7FB096256B70DD80 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 9009 IP address blocks: 168.91.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:e4:5f:7f:b0:96:25:6b:70:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=011ff978-f0bb-4129-90a7-17ec6bcada66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:5a:6e:09:0d:97:b3:99:b7:db:28:65:84: 5c:27:47:b9:bf:1b:40:f9:04:55:23:2e:02:80:24: 2f:bc:62:59:fd:15:ab:4b:a3:52:61:d4:95:77:67: 3f:46:6a:0a:11:2e:01:f0:90:12:e3:20:75:e7:75: b9:49:f9:05:a4:6c:c2:31:2f:ed:9d:ef:62:09:cc: 1d:2d:4c:d2:fe:5c:91:84:45:b9:f9:ce:af:fe:71: 3a:16:c2:1a:e1:83:84:c7:6c:83:ce:d6:66:a7:9b: 7e:74:f1:05:26:a5:be:69:4e:14:93:f8:3f:e4:1f: 6c:ae:af:95:1b:a5:9d:0c:49:5b:2b:5a:d7:5a:de: 93:b8:7f:07:ec:4f:15:17:c3:9a:14:a8:a8:0a:db: f2:e7:e1:c3:89:f8:57:51:d3:ae:f8:da:86:53:38: 7c:3a:3e:f2:60:ad:46:e8:e1:90:b5:47:48:2d:e4: 67:92:96:6f:c1:cc:a6:85:d8:25:71:5d:23:a7:8b: c5:52:66:ab:e1:ae:69:4c:97:48:17:a4:aa:a0:9f: b1:d0:e6:a6:3f:67:34:89:c8:e9:52:03:b0:12:f6: 0e:7b:e1:2b:d8:1d:ae:4a:6c:a0:72:af:5c:15:bf: 6f:f9:fe:db:83:e6:92:cb:40:3f:4d:a0:59:3a:93: 1a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B1:39:44:B4:DE:EF:EB:AE:EA:62:DA:47:05:04:4B:4C:69:7B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/0fa4b363-8bd3-320a-b5fa-2e1321b416d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:36:ed:e6:fb:cb:b7:ea:26:2d:6c:52:d6:38:38:3e:12:09: 8d:a2:ba:e3:38:15:e9:c9:a0:1f:bc:21:23:c3:f3:0a:d8:c4: 48:cb:f0:12:eb:58:7e:92:43:73:d6:09:cd:97:eb:2f:01:4f: d2:0c:ba:03:38:cb:a3:9c:63:7a:8d:ba:41:5b:60:b3:ef:e1: 99:aa:ba:31:5b:37:f3:c7:7c:c2:18:10:44:c8:de:04:f4:ab: 59:d6:df:e6:22:cc:87:0c:70:6d:67:07:76:cc:71:4f:8f:f4: e8:f4:95:23:70:39:66:e6:e8:7b:aa:21:f9:13:c2:fd:33:60: 15:f2:ee:08:36:4d:2d:14:6b:91:a0:4b:d2:38:5e:6e:d4:c3: 0e:12:ca:21:fb:14:44:b1:c2:ac:51:35:45:5b:72:98:93:c9: 96:67:36:9f:69:7a:5f:32:d6:2b:85:e4:0c:99:81:00:d0:2b: bc:ed:62:da:36:25:1a:e1:73:fc:65:cd:cc:d0:cc:e0:b7:45: 31:a3:bc:31:1d:01:f2:75:9c:e6:61:a3:08:1e:c1:06:e7:ef: 14:d8:b8:91:ba:a8:b3:04:bf:58:25:cd:27:06:70:38:00:ab: 61:b6:87:2e:b8:d9:cd:53:82:c2:36:f3:9a:ed:08:11:9c:37: a0:dc:75:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3ORff7CWJWtw3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MDExZmY5NzgtZjBiYi00MTI5LTkwYTctMTdlYzZiY2FkYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOhabgkNl7OZt9soZYRcJ0e5vxtA+QRVIy4C gCQvvGJZ/RWrS6NSYdSVd2c/RmoKES4B8JAS4yB153W5SfkFpGzCMS/tne9iCcwd LUzS/lyRhEW5+c6v/nE6FsIa4YOEx2yDztZmp5t+dPEFJqW+aU4Uk/g/5B9srq+V G6WdDElbK1rXWt6TuH8H7E8VF8OaFKioCtvy5+HDifhXUdOu+NqGUzh8Oj7yYK1G 6OGQtUdILeRnkpZvwcymhdglcV0jp4vFUmar4a5pTJdIF6SqoJ+x0OamP2c0icjp UgOwEvYOe+Er2B2uSmygcq9cFb9v+f7bg+aSy0A/TaBZOpMaUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOxOUS03u/rrupi2kcFBEtMaXuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvMGZhNGIzNjMtOGJkMy0z MjBhLWI1ZmEtMmUxMzIxYjQxNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANw27eb7y7fqJi1sUtY4OD4SCY2iuuM4FenJoB+8ISPD8wrYxEjL8BLr WH6SQ3PWCc2X6y8BT9IMugM4y6OcY3qNukFbYLPv4ZmqujFbN/PHfMIYEETI3gT0 q1nW3+YizIcMcG1nB3bMcU+P9Oj0lSNwOWbm6HuqIfkTwv0zYBXy7gg2TS0Ua5Gg S9I4Xm7Uww4SyiH7FESxwqxRNUVbcpiTyZZnNp9pel8y1iuF5AyZgQDQK7ztYto2 JRrhc/xlzczQzOC3RTGjvDEdAfJ1nOZhowgewQbn7xTYuJG6qLMEv1glzScGcDgA q2G2hy642c1TgsI285rtCBGcN6DcdR4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:36:17 2025 by rpki-client