$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95a38ca8-22a0-33c2-b326-f653eedad819.roa File: 95a38ca8-22a0-33c2-b326-f653eedad819.roa (raw, json) Hash identifier: 2C31/4ZxZTe+pfE3vw+yISRUGCJYrQ5ZYYBvvaddkH8= Subject key identifier: 1C:31:C8:B8:B5:80:E0:0E:12:38:6E:81:B4:89:DB:75:10:26:37:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01A5DCE5B9FCDD2497DC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95a38ca8-22a0-33c2-b326-f653eedad819.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 72.206.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:a5:dc:e5:b9:fc:dd:24:97:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=fe1796d2-50b2-4bb7-9513-9fceb598fe2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:aa:5f:41:96:cf:a6:e4:89:b0:a2:cd:b0:f8: ac:02:3b:dd:11:5b:6a:32:be:bc:21:5d:fd:32:98: 2d:88:ab:a0:72:cd:d1:fd:3a:aa:50:5e:c8:5c:cb: 0b:d9:57:b6:c7:94:f7:e1:79:e8:67:1e:a0:5e:b8: b3:4b:fd:06:e0:6b:62:2e:74:f1:3d:26:31:91:c2: 4e:78:03:a9:f2:9b:40:0e:46:96:a9:b0:29:68:cb: 2c:d6:d7:f3:25:70:93:ec:e7:e8:4b:97:b9:58:2d: b4:56:b5:e8:fe:1f:04:ad:92:92:24:3d:d7:23:c3: 86:ab:e0:e5:ab:7a:91:3e:ad:18:fc:c6:dd:b4:be: e8:7a:7d:02:01:c0:8c:1b:49:e2:7c:60:e8:8c:82: aa:64:7a:c5:fa:4a:60:b5:b0:aa:00:ea:0a:f4:24: f6:85:c9:8e:fc:ac:3e:6c:39:e4:d3:6c:f3:ab:bb: af:cc:f6:7e:30:57:e2:28:b1:24:da:97:f4:a6:56: 10:73:b0:23:80:bb:9d:4d:9a:41:f6:1f:2f:43:d8: 20:41:fd:34:7b:9e:32:2e:e2:e0:bf:08:51:d8:eb: c1:5f:87:cc:e4:bc:5b:d9:c4:da:d9:9b:b7:39:98: 06:05:30:37:60:ce:5f:02:cd:ef:23:d8:67:85:e1: ba:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:31:C8:B8:B5:80:E0:0E:12:38:6E:81:B4:89:DB:75:10:26:37:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95a38ca8-22a0-33c2-b326-f653eedad819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:8d:b6:c5:e0:88:db:ff:d9:cd:c4:28:01:4e:a8:f8:20:95: 01:71:1d:e9:ca:d6:57:f0:5f:05:dd:a5:dc:a9:44:5c:c7:ac: c6:d5:1d:a6:49:1a:10:9b:3d:db:de:3a:6d:d2:ee:53:9f:e4: 5f:50:0c:f8:1f:e8:1c:cc:ca:67:33:00:95:ef:79:9d:0f:f2: 9a:35:45:cb:70:06:4b:2e:40:05:d0:ba:a2:dd:f9:67:1e:32: 7c:80:fa:8e:be:63:48:ee:66:9d:bf:31:33:7a:7b:9a:7f:a4: ab:2b:1d:25:21:c3:ec:d7:1a:28:3f:99:81:b7:ae:db:1a:f4: 19:5d:ce:3a:57:2d:7c:ab:bb:e5:2d:27:91:e3:c0:25:7d:65: 56:64:eb:7f:4e:ef:20:c9:1b:5e:20:cd:34:11:23:23:da:32: de:7c:e2:37:c8:e1:82:83:a7:73:a2:46:50:7e:d3:61:c0:81: 50:df:c6:1d:b7:7c:12:e3:de:92:53:dd:77:39:bb:65:00:03: 81:44:20:36:78:4e:e2:e3:27:c0:96:8e:1c:ad:ce:a2:5f:68: ac:cc:79:da:e4:aa:fb:3a:6d:3e:24:38:78:62:a5:4e:b9:44: b7:a2:e6:be:15:81:13:cf:29:19:ec:6b:09:d9:23:06:8d:3a: e0:96:d7:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaXc5bn83SSX3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZmUxNzk2ZDItNTBiMi00YmI3LTk1MTMtOWZjZWI1OThmZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46pfQZbPpuSJsKLNsPisAjvdEVtqMr68IV39 MpgtiKugcs3R/TqqUF7IXMsL2Ve2x5T34XnoZx6gXrizS/0G4GtiLnTxPSYxkcJO eAOp8ptADkaWqbApaMss1tfzJXCT7OfoS5e5WC20VrXo/h8ErZKSJD3XI8OGq+Dl q3qRPq0Y/MbdtL7oen0CAcCMG0nifGDojIKqZHrF+kpgtbCqAOoK9CT2hcmO/Kw+ bDnk02zzq7uvzPZ+MFfiKLEk2pf0plYQc7AjgLudTZpB9h8vQ9ggQf00e54yLuLg vwhR2OvBX4fM5Lxb2cTa2Zu3OZgGBTA3YM5fAs3vI9hnheG6VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwxyLi1gOAOEjhugbSJ23UQJjf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTVhMzhjYTgtMjJhMC0z M2MyLWIzMjYtZjY1M2VlZGFkODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABONtsXgiNv/2c3EKAFOqPgglQFxHenK1lfwXwXdpdypRFzHrMbVHaZJ GhCbPdveOm3S7lOf5F9QDPgf6BzMymczAJXveZ0P8po1RctwBksuQAXQuqLd+Wce MnyA+o6+Y0juZp2/MTN6e5p/pKsrHSUhw+zXGig/mYG3rtsa9BldzjpXLXyru+Ut J5HjwCV9ZVZk639O7yDJG14gzTQRIyPaMt584jfI4YKDp3OiRlB+02HAgVDfxh23 fBLj3pJT3Xc5u2UAA4FEIDZ4TuLjJ8CWjhytzqJfaKzMedrkqvs6bT4kOHhipU65 RLei5r4VgRPPKRnsawnZIwaNOuCW16Q= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:03 2025 by rpki-client