$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/e3175801-b86f-3e8a-b8d0-ca8c4c92c804.roa File: e3175801-b86f-3e8a-b8d0-ca8c4c92c804.roa (raw, json) Hash identifier: cQktMTiX9gRpHr07QLGHZ9UqM1LbKhKD2/KfVuxUYbg= Subject key identifier: 17:00:47:B7:86:05:75:8B:30:CF:6D:8A:03:53:C1:56:87:BD:D1:C9 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584A94D0D31EB41B041512021800 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/e3175801-b86f-3e8a-b8d0-ca8c4c92c804.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 28753 IP address blocks: 168.91.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d3:1e:b4:1b:04:15:12:02:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=543e42f2-7905-42f9-b9d5-95e837118976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4d:22:c5:7e:f2:0c:d7:c9:1d:81:41:bb:87: 6d:e6:b3:e0:1f:94:bb:0a:2d:97:c9:b5:e5:16:6a: e7:9b:14:76:e8:f3:22:42:61:82:c3:21:93:e7:a4: 15:da:c5:8a:07:8b:ca:a3:1b:3b:ca:d6:b5:30:dd: c7:f5:79:2c:4b:f6:ca:0f:92:1b:b9:9f:06:1d:45: 5b:f8:e8:f1:8f:01:26:68:07:a6:a4:c8:53:95:e2: 51:53:d9:da:60:df:3a:e6:58:98:de:c2:8a:75:e4: 45:c5:26:70:76:4b:ad:51:c9:1b:25:4d:81:64:6c: dd:4d:c0:08:6c:9b:66:29:d5:e4:e9:5e:fe:25:69: df:8f:0c:08:74:57:1a:f6:96:2d:ec:4a:37:4a:21: b7:92:de:bd:08:8d:e8:ba:88:04:5b:9b:22:b5:9c: e0:da:3c:99:4f:42:76:3e:2b:14:a7:e0:61:09:2f: 8f:09:e6:5f:a7:ba:6c:7a:5f:f3:86:0b:30:3c:f2: 3f:f8:0c:23:3c:28:51:e4:9f:6a:3b:ed:ba:0d:a8: c9:4b:2e:33:f2:bc:f3:04:77:e0:2b:2a:46:95:c3: 0f:5b:1e:b8:b0:59:fe:b9:cd:1d:a4:ed:26:64:51: e4:f1:90:50:0f:71:bc:83:5d:bc:98:2b:36:6f:48: d2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:00:47:B7:86:05:75:8B:30:CF:6D:8A:03:53:C1:56:87:BD:D1:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/e3175801-b86f-3e8a-b8d0-ca8c4c92c804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:61:88:ee:99:74:e0:c5:7f:13:68:39:1e:e6:cc:f4:ed:af: 15:27:d7:58:9d:37:fe:05:e8:2f:cd:c2:82:bc:06:70:e8:9c: 83:2c:a6:85:78:8d:a6:a0:39:08:d9:1e:f5:2d:ac:44:d8:04: 2d:a8:83:b0:01:27:1d:fd:d0:0e:12:5d:c3:67:6d:41:bc:b2: cb:f9:e0:31:62:81:66:22:f1:3d:c8:37:55:68:12:32:45:4c: 93:e7:80:9c:2a:94:49:28:d0:21:e6:30:6e:a6:11:04:ec:54: 6a:44:00:2f:d5:f9:c5:d3:ed:23:55:ab:fa:78:a0:10:a1:ce: 2b:c7:d1:c8:fe:13:da:75:7c:3b:a7:24:dd:1c:d5:1e:6f:c1: f5:2e:37:a7:ec:fd:30:d8:56:d7:c2:88:75:9f:ec:92:bf:81: 44:f3:eb:b1:66:d7:64:21:e1:a9:35:52:ac:3b:c7:a9:b0:02: 4c:19:14:08:4c:6f:6f:3a:83:fa:f9:8c:ea:ed:78:07:12:7e: ae:f8:cb:7e:a4:1e:d8:1d:ac:f2:03:9f:ba:1a:2e:a2:0f:ad: 69:19:1c:22:03:69:29:38:d8:4d:f1:4e:66:df:ee:43:b1:9f: 0a:d9:b9:55:04:5b:fa:d8:16:4e:32:ae:1a:ed:09:f4:c4:83: 32:96:3e:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NMetBsEFRICGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk NTQzZTQyZjItNzkwNS00MmY5LWI5ZDUtOTVlODM3MTE4OTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU0ixX7yDNfJHYFBu4dt5rPgH5S7Ci2XybXl FmrnmxR26PMiQmGCwyGT56QV2sWKB4vKoxs7yta1MN3H9XksS/bKD5IbuZ8GHUVb +OjxjwEmaAempMhTleJRU9naYN865liY3sKKdeRFxSZwdkutUckbJU2BZGzdTcAI bJtmKdXk6V7+JWnfjwwIdFca9pYt7Eo3SiG3kt69CI3ouogEW5sitZzg2jyZT0J2 PisUp+BhCS+PCeZfp7psel/zhgswPPI/+AwjPChR5J9qO+26DajJSy4z8rzzBHfg KypGlcMPWx64sFn+uc0dpO0mZFHk8ZBQD3G8g128mCs2b0jSFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcAR7eGBXWLMM9tigNTwVaHvdHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvZTMxNzU4MDEtYjg2Zi0z ZThhLWI4ZDAtY2E4YzRjOTJjODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANJhiO6ZdODFfxNoOR7mzPTtrxUn11idN/4F6C/NwoK8BnDonIMspoV4 jaagOQjZHvUtrETYBC2og7ABJx390A4SXcNnbUG8ssv54DFigWYi8T3IN1VoEjJF TJPngJwqlEko0CHmMG6mEQTsVGpEAC/V+cXT7SNVq/p4oBChzivH0cj+E9p1fDun JN0c1R5vwfUuN6fs/TDYVtfCiHWf7JK/gUTz67Fm12Qh4ak1Uqw7x6mwAkwZFAhM b286g/r5jOrteAcSfq74y36kHtgdrPIDn7oaLqIPrWkZHCIDaSk42E3xTmbf7kOx nwrZuVUEW/rYFk4yrhrtCfTEgzKWPtM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:54:46 2025 by rpki-client