$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95a38ca8-22a0-33c2-b326-f653eedad819.roa File: 95a38ca8-22a0-33c2-b326-f653eedad819.roa (raw, json) Hash identifier: HPhYXiQjOnIuCqt4YtO5hPYPa/qsbfHObDxVtZti9dQ= Subject key identifier: 90:EB:01:0A:5A:F8:7A:8C:02:00:18:83:71:79:E3:D5:D7:ED:28:39 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75E689FEF990BAA419B280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95a38ca8-22a0-33c2-b326-f653eedad819.roa Signing time: Thu 19 Jun 2025 14:38:26 +0000 ROA not before: Thu 19 Jun 2025 14:38:26 +0000 ROA not after: Wed 17 Sep 2025 14:38:26 +0000 asID: 22773 IP address blocks: 72.206.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:e6:89:fe:f9:90:ba:a4:19:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:26 2025 GMT Not After : Sep 17 14:38:26 2025 GMT Subject: CN=dbbf6115-a0fb-4034-b7ba-68b9640856b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:29:47:b1:03:84:b1:2c:de:70:e1:20:c8: 61:54:88:7a:31:90:c9:bc:54:2c:63:a8:7c:18:f7: 35:60:b0:02:8f:77:06:c8:e1:31:31:15:67:41:17: 4b:d6:f9:7f:52:59:79:4b:44:a1:eb:d6:bf:4c:9e: 7f:53:ce:14:1f:49:98:46:95:cf:99:53:d4:46:a4: 61:a8:9c:8f:c3:e7:f6:ac:f6:96:ad:6e:d8:77:c2: 40:bc:b8:b2:4b:42:b9:27:cb:02:d5:d9:0a:d3:37: 86:be:f2:3d:37:b7:83:6c:83:34:43:19:71:0e:fc: 8c:7d:8b:23:91:be:6a:3a:0e:eb:89:ca:1c:52:5b: 84:c1:02:51:58:3f:be:73:dc:52:f5:91:16:1c:e6: c5:b1:5b:2a:2b:10:59:02:9b:19:05:d9:46:56:da: f0:a7:58:92:1d:45:4d:d3:23:db:0e:2a:03:da:45: 39:6b:59:d3:89:c4:59:ff:cd:3e:da:8e:1b:fd:b4: 7c:70:ca:36:49:4b:c2:a6:17:f6:f3:ef:1f:9b:69: 57:ef:1d:e5:8e:fe:2a:35:6f:80:49:2c:79:49:b8: 58:d3:a2:70:26:67:96:66:6e:e7:d4:91:9b:97:82: 03:fd:87:9f:65:20:20:4e:a0:82:14:e7:6b:02:4d: 3c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EB:01:0A:5A:F8:7A:8C:02:00:18:83:71:79:E3:D5:D7:ED:28:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95a38ca8-22a0-33c2-b326-f653eedad819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:70:38:6c:ec:f1:44:ec:22:a3:61:0d:6c:84:5f:b3:aa:86: 06:5e:38:cf:15:00:07:29:9d:d3:21:f6:07:3c:f3:97:27:9a: a7:1b:32:5b:ca:2a:6c:ae:ee:ea:86:29:0e:87:f1:d5:70:ce: e4:37:e4:7a:a2:2b:de:51:1c:a9:d6:46:76:e0:28:26:bc:6d: 85:9e:ee:89:02:55:d1:cd:bc:71:6c:97:7d:0b:e0:20:86:40: 44:79:08:5c:f5:87:04:88:2e:0f:21:9c:4e:ae:90:35:2d:6a: 8c:13:d5:52:35:12:9b:4d:1d:a7:b1:95:99:ca:77:17:f6:28: 23:4b:e5:fb:a9:e5:15:87:c3:8a:71:2f:b8:02:fe:59:23:16: 45:6f:4c:7a:8a:97:7b:3a:aa:fd:09:66:80:e8:8e:d4:62:0c: 21:2f:ac:78:e2:3a:d9:43:4e:d5:a2:32:01:0b:e1:e0:67:03: 8c:69:60:04:e1:80:d7:2a:4d:f7:9a:f1:b8:3a:b9:fb:4b:86: 95:67:ae:4a:b4:c5:e0:82:45:1d:35:c9:02:88:df:a2:43:b7: 87:f5:2f:dc:cb:74:83:a1:97:ca:5a:e5:a3:58:fa:7f:ca:52: e5:e9:48:42:1c:42:f7:20:0e:72:90:f5:88:96:e5:d2:32:9c: 84:ab:1c:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+deaJ/vmQuqQZsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgyNloXDTI1MDkxNzE0MzgyNlowLzEtMCsGA1UEAxMk ZGJiZjYxMTUtYTBmYi00MDM0LWI3YmEtNjhiOTY0MDg1NmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkYpR7EDhLEs3nDhIMhhVIh6MZDJvFQsY6h8 GPc1YLACj3cGyOExMRVnQRdL1vl/Ull5S0Sh69a/TJ5/U84UH0mYRpXPmVPURqRh qJyPw+f2rPaWrW7Yd8JAvLiyS0K5J8sC1dkK0zeGvvI9N7eDbIM0QxlxDvyMfYsj kb5qOg7ricocUluEwQJRWD++c9xS9ZEWHObFsVsqKxBZApsZBdlGVtrwp1iSHUVN 0yPbDioD2kU5a1nTicRZ/80+2o4b/bR8cMo2SUvCphf28+8fm2lX7x3ljv4qNW+A SSx5SbhY06JwJmeWZm7n1JGbl4ID/YefZSAgTqCCFOdrAk088QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDrAQpa+HqMAgAYg3F549XX7Sg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTVhMzhjYTgtMjJhMC0z M2MyLWIzMjYtZjY1M2VlZGFkODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRwOGzs8UTsIqNhDWyEX7OqhgZeOM8VAAcpndMh9gc885cnmqcbMlvK Kmyu7uqGKQ6H8dVwzuQ35HqiK95RHKnWRnbgKCa8bYWe7okCVdHNvHFsl30L4CCG QER5CFz1hwSILg8hnE6ukDUtaowT1VI1EptNHaexlZnKdxf2KCNL5fup5RWHw4px L7gC/lkjFkVvTHqKl3s6qv0JZoDojtRiDCEvrHjiOtlDTtWiMgEL4eBnA4xpYATh gNcqTfea8bg6uftLhpVnrkq0xeCCRR01yQKI36JDt4f1L9zLdIOhl8pa5aNY+n/K UuXpSEIcQvcgDnKQ9YiW5dIynISrHNo= -----END CERTIFICATE-----Generated at Wed Jul 2 14:33:57 2025 by rpki-client