$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d56fc241-2bc1-3ffd-a1ab-a68dc856153e.roa File: d56fc241-2bc1-3ffd-a1ab-a68dc856153e.roa (raw, json) Hash identifier: yEplYiVGy26vPt2B4mVHRNw1O7pQgDQx3/p+ZzOGuN8= Subject key identifier: D8:81:4F:83:06:5F:11:79:4F:38:E6:7B:E2:BF:14:C9:B3:75:4C:8D Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584A119AB5D8313BB1296180B080 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d56fc241-2bc1-3ffd-a1ab-a68dc856153e.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 9009 IP address blocks: 168.91.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:b5:d8:31:3b:b1:29:61:80:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=b7247d22-223c-4eef-9390-03bcfb67a33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:8b:b4:cf:7d:9b:cf:46:40:71:38:c6:ca: 91:cb:eb:57:18:e7:0d:c5:cd:fc:5c:43:35:97:3f: 97:ba:8a:12:ab:40:90:78:97:1a:69:36:b8:54:b6: c4:aa:7f:f8:b5:5a:a2:f7:86:b4:86:fc:b5:4b:4a: ba:35:07:0a:f7:9d:2f:d9:fe:d1:d9:5d:68:1d:c6: 62:17:8f:eb:98:29:03:1a:62:ed:78:f7:59:84:2a: c8:65:7e:8e:be:ac:79:ea:d0:21:fc:05:d4:13:c1: 85:3b:9a:a5:71:cc:2d:d0:3c:69:57:2a:dc:2a:93: 16:fd:6a:f9:ee:52:af:1c:ec:92:4e:3a:35:9f:69: 65:c1:1a:c4:32:d4:23:7f:2e:a7:b5:05:ea:ff:90: 8b:db:63:8e:0d:a0:4b:4d:fa:dc:a7:fc:5e:ed:ff: 8c:ea:75:56:18:1d:ba:b0:65:52:ff:27:e3:41:bf: 7e:48:a5:1f:6a:f1:4a:48:cd:b4:03:99:a5:05:bf: 65:3f:4c:4c:3a:55:e5:e4:3e:97:0d:f8:17:f0:7f: 60:d1:58:a6:07:da:da:c3:6a:5b:7c:fe:96:33:6c: f8:e3:66:10:c6:08:47:d7:37:7a:98:52:db:a1:f7: d2:2c:8f:0e:f7:80:d9:8b:7c:3c:04:7e:39:af:c8: ce:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:81:4F:83:06:5F:11:79:4F:38:E6:7B:E2:BF:14:C9:B3:75:4C:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d56fc241-2bc1-3ffd-a1ab-a68dc856153e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:37:1e:3f:6b:4d:b0:f5:13:68:55:5e:41:dc:5d:2b:ed:c0: ee:46:7c:5b:6f:dd:1a:f1:17:45:d3:ee:3f:9a:b3:a2:32:98: 49:10:a2:43:ec:02:af:98:fe:96:f6:1c:c2:fb:d4:5e:d6:dc: 6f:9d:40:94:65:80:8a:13:f2:a6:54:bd:d4:4b:f2:90:42:ad: 5d:49:75:58:b3:a7:5a:b9:c3:f5:98:27:45:c7:3d:6d:e6:a7: 4c:b7:09:b7:09:3a:ea:68:78:b2:e9:4c:9a:46:d0:2b:bd:49: 39:eb:b4:c1:98:36:87:6c:62:e1:2f:5d:b5:0f:14:52:66:cc: ae:f3:9d:f8:34:f3:f1:02:7b:e1:6a:23:c1:da:af:1d:09:6b: 08:7e:ce:8a:eb:58:8d:38:97:b8:0b:d3:f4:42:c5:94:02:af: 00:69:8b:61:9f:95:ba:c7:2a:09:3d:d9:e1:5b:f0:bb:bf:b8: 2c:37:34:c7:c7:50:e7:11:57:9f:60:6f:79:07:26:e7:bc:9e: 3c:b7:37:e9:87:10:cd:3b:ef:e3:1b:83:9c:bb:b4:bf:46:4f: 11:8a:58:9c:91:be:a4:b7:4a:9f:56:f2:e6:74:08:33:d4:7a: 2a:93:a2:10:4f:dc:ca:2f:a4:83:36:66:e7:82:4d:cd:43:6f: b4:2a:ab:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmrXYMTuxKWGAsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk YjcyNDdkMjItMjIzYy00ZWVmLTkzOTAtMDNiY2ZiNjdhMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8KLtM99m89GQHE4xsqRy+tXGOcNxc38XEM1 lz+XuooSq0CQeJcaaTa4VLbEqn/4tVqi94a0hvy1S0q6NQcK950v2f7R2V1oHcZi F4/rmCkDGmLtePdZhCrIZX6Ovqx56tAh/AXUE8GFO5qlccwt0DxpVyrcKpMW/Wr5 7lKvHOySTjo1n2llwRrEMtQjfy6ntQXq/5CL22OODaBLTfrcp/xe7f+M6nVWGB26 sGVS/yfjQb9+SKUfavFKSM20A5mlBb9lP0xMOlXl5D6XDfgX8H9g0VimB9raw2pb fP6WM2z442YQxghH1zd6mFLboffSLI8O94DZi3w8BH45r8jOywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiBT4MGXxF5Tzjme+K/FMmzdUyNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvZDU2ZmMyNDEtMmJjMS0z ZmZkLWExYWItYTY4ZGM4NTYxNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFtdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD43Hj9rTbD1E2hVXkHcXSvtwO5GfFtv3RrxF0XT7j+as6IymEkQokPs Aq+Y/pb2HML71F7W3G+dQJRlgIoT8qZUvdRL8pBCrV1JdVizp1q5w/WYJ0XHPW3m p0y3CbcJOupoeLLpTJpG0Cu9STnrtMGYNodsYuEvXbUPFFJmzK7znfg08/ECe+Fq I8Harx0Jawh+zorrWI04l7gL0/RCxZQCrwBpi2GflbrHKgk92eFb8Lu/uCw3NMfH UOcRV59gb3kHJue8njy3N+mHEM077+Mbg5y7tL9GTxGKWJyRvqS3Sp9W8uZ0CDPU eiqTohBP3MovpIM2ZueCTc1Db7Qqq6I= -----END CERTIFICATE-----Generated at Sun Jun 29 00:44:26 2025 by rpki-client