$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52c71371-5adb-37f4-ad63-de9a2d4c18a5.roa File: 52c71371-5adb-37f4-ad63-de9a2d4c18a5.roa (raw, json) Hash identifier: HiyV620OT1PYX9Q9kTZlhCmsGHrlETdPKAPCicT08aM= Subject key identifier: 6B:8C:D5:A1:8B:5F:F6:5A:B8:02:A9:00:A4:A8:71:EB:1C:AF:F9:79 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F206518BFE5F1EA1602A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52c71371-5adb-37f4-ad63-de9a2d4c18a5.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.101.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:06:51:8b:fe:5f:1e:a1:60:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=71b23c95-8bb2-4737-a851-9ec684cceb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:be:43:a9:75:27:b9:25:7f:df:fa:54:b8:c5: 9b:eb:00:8f:1a:64:9f:50:4f:3a:4a:9b:02:de:b1: c4:66:67:95:6a:73:22:a7:31:9e:a8:87:69:ef:26: e8:15:aa:19:18:bc:7c:a3:af:19:fb:3e:35:32:cc: b2:52:45:69:85:b4:74:56:60:bb:57:7e:cc:c8:27: 44:7e:27:5b:a1:99:99:03:af:5c:b2:ea:49:81:a3: 30:41:3c:5b:12:81:cd:95:4e:95:da:61:5d:8c:1d: 08:3f:0e:b0:eb:8a:6c:c4:a5:db:42:ec:41:d2:9d: f3:1a:f9:ea:99:c3:80:b7:45:d0:32:40:6f:1b:39: c9:12:4f:18:19:45:5b:13:de:76:91:d7:d3:58:f9: 28:e2:8d:45:ec:14:d6:46:14:1f:c0:8e:da:c3:46: 82:5a:05:b4:83:d7:8c:84:e8:42:55:1f:fd:7e:7e: cd:74:85:c2:42:a9:45:19:23:d6:aa:0b:d7:88:ee: 9b:f0:c3:74:8f:f3:27:5f:b5:7e:4b:21:29:9f:fd: 00:cc:1f:c9:de:03:6c:df:28:46:5c:1d:9b:fb:b5: 33:d0:2e:bc:a3:d8:3f:0f:8a:cc:90:84:0c:10:33: 4f:b1:a5:8e:53:03:eb:5a:60:4f:69:71:76:3a:87: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8C:D5:A1:8B:5F:F6:5A:B8:02:A9:00:A4:A8:71:EB:1C:AF:F9:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52c71371-5adb-37f4-ad63-de9a2d4c18a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:91:e9:e2:96:13:28:32:59:fe:a0:a2:49:c1:9c:04:81:dd: ce:5a:f9:77:24:92:a4:9c:95:4e:0d:89:3b:33:1c:a5:16:82: 42:7a:d6:d8:13:8b:b5:61:8f:1c:1a:0e:ba:d2:33:47:03:42: a1:c5:7c:9f:2f:c0:64:98:94:c1:d7:99:32:31:71:70:d7:b5: a5:e3:77:93:5d:6c:77:bd:3c:03:cf:ec:2c:76:39:fe:ae:6e: c0:c2:1d:ac:18:a2:fd:c1:f3:90:81:e4:95:25:5a:58:42:8e: ee:90:0f:e7:3a:7d:08:e2:c3:53:95:e8:62:ff:38:5b:d2:71: 3b:f4:8c:dd:79:c0:df:3f:c3:92:ff:01:25:36:f1:60:5c:58: 26:c4:1f:32:ca:b8:18:90:f0:95:f4:30:4a:12:88:b7:84:ad: 02:63:d4:14:e6:e9:bb:19:0d:7c:35:e5:00:5c:3a:fc:c5:89: 14:bd:b9:a2:91:f3:da:1e:b7:d3:cd:b1:ec:47:f4:5a:54:16: 5c:1b:87:be:3a:40:3d:2b:4a:89:e9:5e:17:7b:e6:06:ad:f6: b7:9f:ee:e2:62:49:13:9b:b2:bd:4c:a6:61:06:59:e9:12:e6: 0d:34:4a:95:7c:ec:16:d8:f5:4d:d7:81:b1:6c:75:bd:ba:2c: 74:e6:88:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gZRi/5fHqFgKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NzFiMjNjOTUtOGJiMi00NzM3LWE4NTEtOWVjNjg0Y2NlYjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL5DqXUnuSV/3/pUuMWb6wCPGmSfUE86SpsC 3rHEZmeVanMipzGeqIdp7yboFaoZGLx8o68Z+z41MsyyUkVphbR0VmC7V37MyCdE fidboZmZA69csupJgaMwQTxbEoHNlU6V2mFdjB0IPw6w64psxKXbQuxB0p3zGvnq mcOAt0XQMkBvGznJEk8YGUVbE952kdfTWPko4o1F7BTWRhQfwI7aw0aCWgW0g9eM hOhCVR/9fn7NdIXCQqlFGSPWqgvXiO6b8MN0j/MnX7V+SyEpn/0AzB/J3gNs3yhG XB2b+7Uz0C68o9g/D4rMkIQMEDNPsaWOUwPrWmBPaXF2OocpEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuM1aGLX/ZauAKpAKSocescr/l5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTJjNzEzNzEtNWFkYi0z N2Y0LWFkNjMtZGU5YTJkNGMxOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWR6eKWEygyWf6goknBnASB3c5a+XckkqSclU4NiTszHKUWgkJ61tgT i7VhjxwaDrrSM0cDQqHFfJ8vwGSYlMHXmTIxcXDXtaXjd5NdbHe9PAPP7Cx2Of6u bsDCHawYov3B85CB5JUlWlhCju6QD+c6fQjiw1OV6GL/OFvScTv0jN15wN8/w5L/ ASU28WBcWCbEHzLKuBiQ8JX0MEoSiLeErQJj1BTm6bsZDXw15QBcOvzFiRS9uaKR 89oet9PNsexH9FpUFlwbh746QD0rSonpXhd75gat9ref7uJiSRObsr1MpmEGWekS 5g00SpV87BbY9U3XgbFsdb26LHTmiDc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:29:44 2025 by rpki-client