$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7601a3e0-7fc9-3c24-bfcf-186aec6c0b9a.roa File: 7601a3e0-7fc9-3c24-bfcf-186aec6c0b9a.roa (raw, json) Hash identifier: tPO+v4+CKSmgXxiojC2OwgODCxxLC4YXw0ANgd0T+3o= Subject key identifier: DD:CA:9F:44:A6:24:C0:88:AF:7B:38:B1:E8:31:4A:DD:43:BE:66:96 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584A58CB0956E08104DC9ADFE340 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7601a3e0-7fc9-3c24-bfcf-186aec6c0b9a.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 46261 IP address blocks: 168.91.66.0/24 maxlen: 24 168.91.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:09:56:e0:81:04:dc:9a:df:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=018d6be7-8546-4abd-ac8e-2f6cf0cfb9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a2:18:61:4e:5d:d2:71:c7:1d:a0:59:43:7e: 8c:03:9b:76:4c:56:56:8f:a1:63:67:65:34:a4:97: f0:9a:c1:0a:e0:81:ab:a5:5e:3e:4b:08:9e:47:00: 00:2d:d9:f4:cb:e5:4a:64:85:05:7d:25:ec:9e:d0: e2:bf:e5:fd:e4:88:c0:5d:2a:2c:16:06:f8:7c:18: 91:32:ab:cb:3f:21:3f:99:66:13:12:9e:6e:bd:ce: 27:fd:46:55:d8:83:fd:87:cf:2a:4c:9a:2d:e2:39: d2:7b:71:2d:9d:8a:a1:ea:77:72:50:59:35:49:c9: 71:ec:da:8c:c4:26:8f:ba:a3:1d:50:a8:fb:c3:c9: 91:af:9b:69:0f:43:3f:e6:56:dd:3c:a9:a2:92:3a: f9:a8:60:11:69:02:50:1a:19:13:6c:50:20:a4:b7: fb:ae:23:bf:a1:bc:d4:5b:e0:8a:ed:86:0b:a7:ce: 6f:54:96:10:14:22:7c:d1:a2:26:30:8c:77:2c:f4: 60:5e:94:51:ee:bb:ab:18:02:38:aa:6a:09:fd:bb: 40:cb:bd:ca:11:cd:d0:ba:71:07:d2:77:0d:f0:fd: 13:77:bb:85:59:3f:5f:21:cc:c2:e2:29:20:16:8a: 76:e7:08:af:2c:70:3a:b4:bd:b2:89:de:1c:b9:45: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CA:9F:44:A6:24:C0:88:AF:7B:38:B1:E8:31:4A:DD:43:BE:66:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7601a3e0-7fc9-3c24-bfcf-186aec6c0b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:71:ff:ae:19:9d:68:e9:dc:3a:01:94:6f:d9:fc:bf:92:e9: 6d:e2:8f:d8:37:7a:ad:77:27:fb:c7:33:99:11:79:bf:36:dd: b7:cf:82:53:93:bc:d3:37:93:93:69:7a:60:6c:04:34:10:bf: 2d:2b:33:5b:29:25:aa:e1:85:39:e9:d1:01:e6:94:d9:6f:10: db:64:ae:93:91:74:2b:3b:1a:42:34:3f:7a:47:56:b9:b7:ba: 06:0b:3e:60:75:75:95:a4:d5:68:2d:06:ed:27:5e:44:09:05: 28:1c:80:48:a0:5f:e6:af:21:06:91:4b:16:c8:49:5e:e4:fb: 05:37:02:c1:8f:d6:c8:30:06:13:77:f1:f6:7e:3b:b0:28:07: 6c:3d:3c:26:da:39:82:91:e3:4b:d8:76:d4:14:26:39:f4:36: 91:bc:81:38:30:20:b2:96:ce:c3:10:69:fe:3a:65:b0:8d:2d: 45:50:35:3e:87:9e:4b:16:bd:e6:1f:86:8d:cc:bc:b7:21:c6: be:d6:d2:82:1e:17:42:7f:5b:cc:ef:d3:68:52:5c:ca:b2:64: 10:d2:e5:96:65:bc:4f:2d:ea:85:78:8c:13:bb:dd:f0:88:8c: ee:25:31:f6:bb:fe:3b:29:6a:9f:35:06:4a:21:42:0f:94:13: 90:e8:1e:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywlW4IEE3Jrf40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk MDE4ZDZiZTctODU0Ni00YWJkLWFjOGUtMmY2Y2YwY2ZiOWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaIYYU5d0nHHHaBZQ36MA5t2TFZWj6FjZ2U0 pJfwmsEK4IGrpV4+SwieRwAALdn0y+VKZIUFfSXsntDiv+X95IjAXSosFgb4fBiR MqvLPyE/mWYTEp5uvc4n/UZV2IP9h88qTJot4jnSe3EtnYqh6ndyUFk1Sclx7NqM xCaPuqMdUKj7w8mRr5tpD0M/5lbdPKmikjr5qGARaQJQGhkTbFAgpLf7riO/obzU W+CK7YYLp85vVJYQFCJ80aImMIx3LPRgXpRR7rurGAI4qmoJ/btAy73KEc3QunEH 0ncN8P0Td7uFWT9fIczC4ikgFop25wivLHA6tL2yid4cuUVSIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3Kn0SmJMCIr3s4segxSt1DvmaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvNzYwMWEzZTAtN2ZjOS0z YzI0LWJmY2YtMTg2YWVjNmMwYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNx/64ZnWjp3DoBlG/Z/L+S6W3ij9g3eq13J/vHM5kReb823bfPglOT vNM3k5NpemBsBDQQvy0rM1spJarhhTnp0QHmlNlvENtkrpORdCs7GkI0P3pHVrm3 ugYLPmB1dZWk1WgtBu0nXkQJBSgcgEigX+avIQaRSxbISV7k+wU3AsGP1sgwBhN3 8fZ+O7AoB2w9PCbaOYKR40vYdtQUJjn0NpG8gTgwILKWzsMQaf46ZbCNLUVQNT6H nksWveYfho3MvLchxr7W0oIeF0J/W8zv02hSXMqyZBDS5ZZlvE8t6oV4jBO73fCI jO4lMfa7/jspap81BkohQg+UE5DoHnc= -----END CERTIFICATE-----Generated at Sun Jun 29 13:37:23 2025 by rpki-client