$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/c6a11dec-959f-3057-b4bf-cf534b7f25bc.roa File: c6a11dec-959f-3057-b4bf-cf534b7f25bc.roa (raw, json) Hash identifier: kVK1ovC5SY+USjVxGS99kYzRUCGQdr/WmX80C+A4dls= Subject key identifier: 0C:C3:3C:C7:DD:14:E8:FC:38:BA:D4:38:B9:EB:54:16:27:6B:03:8F Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584B92DD8CF7F175A706E6849780 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/c6a11dec-959f-3057-b4bf-cf534b7f25bc.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 9009 IP address blocks: 168.91.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:8c:f7:f1:75:a7:06:e6:84:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=327054ae-8ffe-4350-a82b-caec1bf642d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c5:d0:d4:26:99:f9:d5:c1:eb:bd:aa:ce:f4: 72:cf:dc:6b:64:7b:ef:e5:16:15:ab:2a:ef:5b:23: 31:7b:d0:03:b4:e2:e5:df:cc:7a:1a:9a:13:f2:b8: 46:26:9e:98:e0:fa:0b:13:64:38:bb:fc:e7:08:99: bf:b3:a6:e7:a9:5f:0a:97:17:02:03:2e:7c:b8:c7: ec:97:74:bb:25:d3:64:b7:bb:42:0b:c2:4d:fe:2d: c4:b6:a6:19:d9:d1:04:1c:5f:63:5d:59:e4:88:0d: 67:38:a4:a2:d3:06:c0:ed:69:99:33:17:91:7b:03: 75:1f:e6:a1:15:99:5a:bf:fa:31:82:60:40:3e:32: 15:be:58:68:74:e7:6b:63:c6:b6:e9:1c:88:e1:2e: 94:dc:10:91:51:14:73:38:02:89:2d:67:19:23:d4: c0:6f:0d:c9:24:29:ad:88:01:ab:ef:76:28:cf:43: 3e:6f:a0:5e:25:5d:84:a4:e6:19:65:7d:f0:c2:29: fc:0d:36:71:21:91:37:f2:84:fd:9f:77:fa:c5:75: 13:ac:3d:38:35:2d:54:4b:6e:12:43:08:8b:58:9e: 1c:17:9b:c3:a7:d8:8b:8e:0b:b0:97:ce:56:58:bb: e3:5d:4e:e6:41:04:20:e7:38:56:ce:4e:4b:76:ea: 0c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C3:3C:C7:DD:14:E8:FC:38:BA:D4:38:B9:EB:54:16:27:6B:03:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/c6a11dec-959f-3057-b4bf-cf534b7f25bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:82:7f:bd:af:6d:38:a7:00:dd:48:6d:f8:a6:28:e0:d3:7f: 01:de:50:7c:fe:2f:4d:70:f1:7d:6d:2b:f5:8f:4d:87:1c:2a: 38:32:b8:a9:c3:d1:99:bd:25:ee:15:98:4c:af:04:ea:88:d7: 83:4c:97:1d:d8:69:07:07:1f:c8:cd:71:42:ea:4d:f4:4d:1f: f6:5f:86:60:73:f5:bd:92:c0:a5:ec:03:07:df:6b:37:3c:6b: c8:2a:54:f8:86:e3:a2:8a:bd:15:33:19:9d:0b:f0:45:bc:9e: c6:0e:13:2b:ac:f6:b1:1a:5d:bd:fe:03:3c:4d:9f:21:91:bd: 2b:58:69:30:f7:99:f4:75:70:a4:29:11:13:64:c4:c5:2b:ad: f8:8e:a4:0c:e7:75:e5:fc:6d:38:6e:d6:7d:dd:b0:47:8c:af: c7:7c:5c:f3:08:17:e1:83:fc:e5:46:8c:a5:79:90:42:57:a3: ad:a2:00:e2:89:e3:c3:af:a5:e2:2a:a6:b1:a3:eb:ec:aa:36: 2b:cf:02:1b:04:3a:8c:dc:05:45:dc:51:a4:fd:8c:76:aa:58: e7:91:99:5b:64:b7:6d:4c:1c:a8:38:6b:3e:f9:9b:ea:9d:9f: 71:ec:90:7a:9c:a2:82:c0:d0:ab:d2:d1:9b:89:f4:ba:dd:63: d0:0f:43:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Yz38XWnBuaEl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MzI3MDU0YWUtOGZmZS00MzUwLWE4MmItY2FlYzFiZjY0MmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8XQ1CaZ+dXB672qzvRyz9xrZHvv5RYVqyrv WyMxe9ADtOLl38x6GpoT8rhGJp6Y4PoLE2Q4u/znCJm/s6bnqV8KlxcCAy58uMfs l3S7JdNkt7tCC8JN/i3EtqYZ2dEEHF9jXVnkiA1nOKSi0wbA7WmZMxeRewN1H+ah FZlav/oxgmBAPjIVvlhodOdrY8a26RyI4S6U3BCRURRzOAKJLWcZI9TAbw3JJCmt iAGr73Yoz0M+b6BeJV2EpOYZZX3wwin8DTZxIZE38oT9n3f6xXUTrD04NS1US24S QwiLWJ4cF5vDp9iLjguwl85WWLvjXU7mQQQg5zhWzk5LduoMNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzDPMfdFOj8OLrUOLnrVBYnawOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvYzZhMTFkZWMtOTU5Zi0z MDU3LWI0YmYtY2Y1MzRiN2YyNWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFthMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMiCf72vbTinAN1IbfimKODTfwHeUHz+L01w8X1tK/WPTYccKjgyuKnD 0Zm9Je4VmEyvBOqI14NMlx3YaQcHH8jNcULqTfRNH/ZfhmBz9b2SwKXsAwffazc8 a8gqVPiG46KKvRUzGZ0L8EW8nsYOEyus9rEaXb3+AzxNnyGRvStYaTD3mfR1cKQp ERNkxMUrrfiOpAzndeX8bThu1n3dsEeMr8d8XPMIF+GD/OVGjKV5kEJXo62iAOKJ 48OvpeIqprGj6+yqNivPAhsEOozcBUXcUaT9jHaqWOeRmVtkt21MHKg4az75m+qd n3HskHqcooLA0KvS0ZuJ9LrdY9APQ+I= -----END CERTIFICATE-----Generated at Mon Oct 20 14:57:04 2025 by rpki-client