$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52406f4d-279b-3c45-bd5b-ac32f3163a7a.roa File: 52406f4d-279b-3c45-bd5b-ac32f3163a7a.roa (raw, json) Hash identifier: I5/ZjVeo/7FL15blmaLhHvxl9GDPfpPrv9fniIYaFDc= Subject key identifier: D8:CA:80:BE:AA:7D:54:B0:E1:5C:4A:07:07:49:A9:D4:92:3B:C9:04 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C257DF7CD05FCEF379100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52406f4d-279b-3c45-bd5b-ac32f3163a7a.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:25:7d:f7:cd:05:fc:ef:37:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=7107c268-6a12-456a-a0f8-c09ade783ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:cf:16:44:5a:b9:1e:6c:60:c6:7c:7c:19:0d: 01:89:f6:88:d2:de:03:3b:3a:54:a8:cf:11:38:02: 65:63:c4:8e:b9:6d:3f:70:9d:14:05:40:f5:d5:ab: 8d:29:dc:f0:37:a4:d8:b0:50:b0:17:0d:92:61:6f: dc:12:83:a4:8f:48:40:6f:43:8a:1b:36:26:2d:4e: 58:8e:e0:02:59:f9:4f:28:ee:10:4f:10:95:55:ea: f1:9e:2e:d6:d9:d2:fc:a4:4e:7b:86:70:86:bc:66: a9:c2:0a:74:91:6d:56:f3:91:23:a6:13:a1:53:9c: 10:53:82:80:e2:0f:d3:ae:76:d2:07:a0:e9:6c:37: 38:27:15:6d:bf:9c:36:7d:b7:c8:24:4a:4d:d6:5c: 4b:9e:3e:01:e1:6e:83:2e:fe:4b:92:c7:9a:7c:f9: 6f:e2:57:8f:c4:88:0f:91:17:b1:1d:c8:5d:eb:40: 24:df:c3:4f:29:d7:df:82:01:96:30:da:4e:92:26: e7:31:2e:d1:ca:f0:92:b5:14:95:39:90:e2:ec:4c: 1b:1d:96:d7:9a:d0:c4:5a:69:a6:f9:d8:f1:70:80: 7f:7f:8f:40:d4:57:7f:16:14:2d:76:ba:7d:45:27: 54:10:9c:33:80:92:d4:df:41:b6:4e:d0:74:e2:0b: 0a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CA:80:BE:AA:7D:54:B0:E1:5C:4A:07:07:49:A9:D4:92:3B:C9:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52406f4d-279b-3c45-bd5b-ac32f3163a7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:6e:7f:24:60:25:e4:74:2a:2a:c1:5f:67:92:d6:a2:60:1d: 74:d6:1a:b9:cc:29:16:57:f2:9b:d0:8e:52:1f:9d:78:6d:22: 15:74:76:e9:74:df:f8:dc:1f:30:b9:8c:65:c2:70:1b:74:6e: b8:5e:bc:7b:6f:db:03:9b:71:e1:08:0d:f2:e5:b3:68:84:c9: c9:64:73:b4:ae:89:6b:c5:da:dc:b4:75:54:97:41:90:43:fb: d3:91:17:11:c2:0c:5a:1c:87:94:1f:b7:90:57:ee:42:ad:d1: 5f:d4:50:9e:7b:cf:07:bc:c7:c4:82:aa:15:14:7e:b3:b1:ec: d0:dc:52:a0:44:67:af:8b:f2:15:90:68:23:f2:21:15:d2:b5: 65:ef:aa:dd:13:9e:9f:c1:60:c3:17:18:f9:8c:c8:aa:87:06: f6:5e:4c:88:52:92:03:54:ea:21:27:e4:a7:15:46:d2:13:9e: 3f:fe:70:ac:bd:72:30:1e:d2:01:ee:21:91:33:0a:18:72:9c: 08:97:81:79:da:7f:c5:62:24:f6:34:2b:74:30:4b:90:36:27: 01:0c:26:59:d8:21:3e:ff:e1:69:b0:be:08:a4:61:c8:b3:59: 9b:2a:54:38:0a:11:66:39:3e:5c:a0:d6:63:af:84:c9:06:25: fd:c6:f9:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCV9980F/O83kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk NzEwN2MyNjgtNmExMi00NTZhLWEwZjgtYzA5YWRlNzgzY2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/s8WRFq5Hmxgxnx8GQ0BifaI0t4DOzpUqM8R OAJlY8SOuW0/cJ0UBUD11auNKdzwN6TYsFCwFw2SYW/cEoOkj0hAb0OKGzYmLU5Y juACWflPKO4QTxCVVerxni7W2dL8pE57hnCGvGapwgp0kW1W85EjphOhU5wQU4KA 4g/TrnbSB6DpbDc4JxVtv5w2fbfIJEpN1lxLnj4B4W6DLv5LkseafPlv4lePxIgP kRexHchd60Ak38NPKdffggGWMNpOkibnMS7RyvCStRSVOZDi7EwbHZbXmtDEWmmm +djxcIB/f49A1Fd/FhQtdrp9RSdUEJwzgJLU30G2TtB04gsK7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjKgL6qfVSw4VxKBwdJqdSSO8kEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI0MDZmNGQtMjc5Yi0z YzQ1LWJkNWItYWMzMmYzMTYzYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5ufyRgJeR0KirBX2eS1qJgHXTWGrnMKRZX8pvQjlIfnXhtIhV0dul0 3/jcHzC5jGXCcBt0brhevHtv2wObceEIDfLls2iEyclkc7SuiWvF2ty0dVSXQZBD +9ORFxHCDFoch5Qft5BX7kKt0V/UUJ57zwe8x8SCqhUUfrOx7NDcUqBEZ6+L8hWQ aCPyIRXStWXvqt0Tnp/BYMMXGPmMyKqHBvZeTIhSkgNU6iEn5KcVRtITnj/+cKy9 cjAe0gHuIZEzChhynAiXgXnaf8ViJPY0K3QwS5A2JwEMJlnYIT7/4WmwvgikYciz WZsqVDgKEWY5Plyg1mOvhMkGJf3G+T0= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:03 2025 by rpki-client