$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47c85bc3-ee3d-3de4-9180-5daca1128f51.roa File: 47c85bc3-ee3d-3de4-9180-5daca1128f51.roa (raw, json) Hash identifier: TywxJZDYxo1UjnXzL1GH1f4FkpUdtgLwHH/ZhPmb72o= Subject key identifier: B5:76:89:E9:C7:CC:A4:F4:D0:EC:BD:5A:6A:A3:6B:12:D0:EC:9F:B1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206734C53FC7CF5773CBAD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47c85bc3-ee3d-3de4-9180-5daca1128f51.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 174.68.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:34:c5:3f:c7:cf:57:73:cb:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=db89ecf0-38d8-4ddd-b262-842a3f0e0cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0c:7d:c3:3f:90:3f:89:cf:79:bf:3c:9d:90: 39:23:6e:23:04:6b:93:98:4b:56:26:5e:7d:c7:82: 37:3f:8e:3a:90:21:f1:1d:15:d8:ed:d3:cd:22:3c: cf:82:f4:ee:a5:e5:da:e4:a9:8b:7b:3d:f8:17:62: 2d:01:0a:61:bc:2e:7a:88:e3:f3:bb:2c:84:93:f1: 4a:d2:ab:4b:40:75:ec:59:4d:b7:3b:7d:99:c8:6d: 61:94:d3:24:76:1c:d2:65:93:09:cc:28:65:3d:2b: f3:99:1c:8a:0e:f8:df:92:6c:c5:75:8f:fc:ea:76: 61:43:1f:bf:52:03:ff:9b:12:84:b1:38:df:08:c0: 21:6b:08:51:18:b0:ae:dd:e3:c4:94:b1:d1:13:ab: 8f:30:c4:87:51:7d:e1:55:c0:90:e2:87:85:b3:a9: e6:32:35:ea:4d:c1:7f:ae:ec:2e:3d:b3:41:73:d8: 91:54:76:2a:ba:8f:e8:36:2d:cf:c7:af:84:63:17: 99:0c:56:87:64:90:54:4a:6c:3a:e8:b1:b2:05:8d: 24:91:90:49:ea:36:b4:ad:57:26:77:be:08:57:ed: 36:a6:2e:d8:95:ed:b9:f5:c7:f7:22:8f:e3:f1:24: 63:4e:34:90:98:c2:4c:b9:9b:93:18:25:39:db:d3: 05:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:76:89:E9:C7:CC:A4:F4:D0:EC:BD:5A:6A:A3:6B:12:D0:EC:9F:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47c85bc3-ee3d-3de4-9180-5daca1128f51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:7c:66:1a:b9:96:a9:88:4c:54:d1:a5:36:e4:6c:5b:d4:3b: f7:e6:6f:28:f9:c4:10:99:31:be:2a:ab:47:bc:f8:90:ae:4b: c3:49:6e:04:68:6a:a0:40:ad:18:5c:8b:46:c6:85:0a:fc:51: b4:b3:81:90:51:d8:af:98:b8:5e:21:c4:7a:b6:ee:dc:9d:53: 45:23:4a:0b:bd:b5:ac:3f:e8:12:77:3d:70:4c:e9:7a:b6:07: 01:e2:ba:8f:fa:42:26:46:ea:8a:21:9e:b6:25:d1:23:5d:aa: d6:dc:34:4b:e3:d1:c3:e0:87:2f:a8:4a:50:38:79:a1:d3:17: 77:9a:aa:b3:25:69:90:31:bf:1b:24:68:8f:f6:90:93:d8:f5: d0:59:86:fc:bc:a6:bf:55:43:2f:79:c4:b2:f2:e2:fd:79:0f: 49:02:e4:75:dc:01:62:03:f4:19:d1:a4:e3:bf:16:b9:1f:9b: 22:0d:2f:d9:7b:e7:3b:6e:db:2b:7e:57:9d:ca:2a:50:b4:61: 9d:9a:e7:b7:13:a6:20:c0:80:8f:cd:54:01:66:95:7d:23:ff: e6:80:0f:bc:03:c2:14:eb:02:eb:ce:80:68:d5:6c:1b:d1:a0: a1:48:45:28:4e:d5:6f:0b:f7:8d:1b:7a:0b:71:1a:59:4b:81: 1c:74:fc:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZzTFP8fPV3PLrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGI4OWVjZjAtMzhkOC00ZGRkLWIyNjItODQyYTNmMGUwY2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwx9wz+QP4nPeb88nZA5I24jBGuTmEtWJl59 x4I3P446kCHxHRXY7dPNIjzPgvTupeXa5KmLez34F2ItAQphvC56iOPzuyyEk/FK 0qtLQHXsWU23O32ZyG1hlNMkdhzSZZMJzChlPSvzmRyKDvjfkmzFdY/86nZhQx+/ UgP/mxKEsTjfCMAhawhRGLCu3ePElLHRE6uPMMSHUX3hVcCQ4oeFs6nmMjXqTcF/ ruwuPbNBc9iRVHYquo/oNi3Px6+EYxeZDFaHZJBUSmw66LGyBY0kkZBJ6ja0rVcm d74IV+02pi7Yle259cf3Io/j8SRjTjSQmMJMuZuTGCU529MF0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLV2ienHzKT00Oy9WmqjaxLQ7J+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDdjODViYzMtZWUzZC0z ZGU0LTkxODAtNWRhY2ExMTI4ZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG58Zhq5lqmITFTRpTbkbFvUO/fmbyj5xBCZMb4qq0e8+JCuS8NJbgRo aqBArRhci0bGhQr8UbSzgZBR2K+YuF4hxHq27tydU0UjSgu9taw/6BJ3PXBM6Xq2 BwHiuo/6QiZG6oohnrYl0SNdqtbcNEvj0cPghy+oSlA4eaHTF3eaqrMlaZAxvxsk aI/2kJPY9dBZhvy8pr9VQy95xLLy4v15D0kC5HXcAWID9BnRpOO/FrkfmyINL9l7 5ztu2yt+V53KKlC0YZ2a57cTpiDAgI/NVAFmlX0j/+aAD7wDwhTrAuvOgGjVbBvR oKFIRShO1W8L940begtxGllLgRx0/NU= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:47 2025 by rpki-client