$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/188f9052-5ceb-3128-a31f-f70d9a1d4a82.roa File: 188f9052-5ceb-3128-a31f-f70d9a1d4a82.roa (raw, json) Hash identifier: fWIdEYXidalj3237f6mrNS8hEP1ZrgIhLMJV6jx0JgM= Subject key identifier: A5:A0:86:0B:0F:20:67:3C:2E:03:17:30:01:E2:08:71:45:9A:AE:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75F56678718B7A89075200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/188f9052-5ceb-3128-a31f-f70d9a1d4a82.roa Signing time: Thu 19 Jun 2025 14:38:33 +0000 ROA not before: Thu 19 Jun 2025 14:38:33 +0000 ROA not after: Wed 17 Sep 2025 14:38:33 +0000 asID: 22773 IP address blocks: 72.206.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:f5:66:78:71:8b:7a:89:07:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:33 2025 GMT Not After : Sep 17 14:38:33 2025 GMT Subject: CN=f4eb0362-23bb-4603-90d2-b8fd92f998a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:3d:64:23:2a:ef:8f:a1:23:8b:63:78:f0: 2c:41:01:9e:01:e9:74:79:c5:ee:a3:52:65:fa:8c: 31:44:12:c5:b6:60:e5:b8:78:40:6e:cd:2b:50:aa: f5:82:1c:2b:b3:e6:41:f3:b8:3e:7d:53:b4:10:2b: de:41:e7:ff:44:11:15:f5:55:80:f6:37:de:5a:ab: 00:7b:cf:cc:86:a2:9e:ba:78:75:8e:7a:28:85:c3: e6:da:d6:2a:f1:31:7e:42:c5:c6:da:be:13:69:fa: 68:86:dc:f5:70:99:26:f4:43:f0:8d:25:da:f0:cf: cc:c2:fd:f0:8d:a5:75:b2:d8:44:bb:4e:06:07:a6: 42:f8:13:b8:db:98:66:9d:71:38:38:8d:67:94:b8: 42:ff:4c:4c:82:2b:cd:63:87:9c:54:43:18:92:55: 92:c9:74:bd:65:23:3f:95:1a:6f:e0:9b:27:d2:8b: 27:15:4b:84:12:fc:c1:82:3f:bc:e1:75:a0:4b:2a: bf:cf:ea:d6:e7:2f:94:82:2e:46:13:63:83:59:2b: 96:08:c4:6f:b1:cc:01:f4:14:01:77:81:46:b2:26: 89:16:31:96:d3:41:b8:bb:02:72:2a:0b:8c:fb:a8: 1e:e0:e3:e4:5a:81:cf:2b:44:2d:da:d8:e7:86:bb: 2e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A0:86:0B:0F:20:67:3C:2E:03:17:30:01:E2:08:71:45:9A:AE:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/188f9052-5ceb-3128-a31f-f70d9a1d4a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:52:a0:cf:85:90:0d:4e:ad:2c:1a:e7:74:ce:fa:bf:46:98: dd:d6:36:65:c7:b6:b8:a2:03:ef:c9:94:11:2e:06:c6:55:88: 52:e9:80:ab:33:b3:a6:9e:88:b7:3f:4d:d6:56:e3:df:be:2d: eb:90:14:6c:03:a1:3a:f6:36:1b:b8:e2:ba:b9:00:be:9e:50: 17:fc:22:0f:9a:f0:6a:95:21:30:e5:3f:19:c6:9a:f0:1c:ef: 04:19:16:d3:40:e6:a5:e4:81:6a:68:b1:23:7e:eb:90:60:eb: 23:a5:bd:40:9b:fd:ff:b3:8c:1b:f0:41:73:d8:eb:7a:1d:c0: 2f:be:da:3f:6c:f9:18:81:a7:c0:a1:c1:77:49:5e:cc:1c:46: 44:ef:34:26:a6:77:30:2f:14:02:db:6e:63:5e:c5:48:cf:24: b2:2b:b0:b2:e8:74:77:2b:e4:61:ba:3e:12:e2:e2:6a:76:29: cb:91:68:50:03:b4:6e:64:b3:71:f2:79:1d:c5:ab:c8:e0:c0: c4:14:00:78:b1:94:e8:25:b0:41:1d:15:6f:74:18:68:4c:1a: d8:63:6d:b2:4f:1e:97:78:87:f9:2f:ff:8f:3b:b0:88:54:67: a0:c6:c1:9d:17:b0:8a:2c:80:29:bc:88:2b:e5:36:e8:c3:f3: 9d:51:f4:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dfVmeHGLeokHUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgzM1oXDTI1MDkxNzE0MzgzM1owLzEtMCsGA1UEAxMk ZjRlYjAzNjItMjNiYi00NjAzLTkwZDItYjhmZDkyZjk5OGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG89ZCMq74+hI4tjePAsQQGeAel0ecXuo1Jl +owxRBLFtmDluHhAbs0rUKr1ghwrs+ZB87g+fVO0ECveQef/RBEV9VWA9jfeWqsA e8/MhqKeunh1jnoohcPm2tYq8TF+QsXG2r4Tafpohtz1cJkm9EPwjSXa8M/Mwv3w jaV1sthEu04GB6ZC+BO425hmnXE4OI1nlLhC/0xMgivNY4ecVEMYklWSyXS9ZSM/ lRpv4Jsn0osnFUuEEvzBgj+84XWgSyq/z+rW5y+Ugi5GE2ODWSuWCMRvscwB9BQB d4FGsiaJFjGW00G4uwJyKguM+6ge4OPkWoHPK0Qt2tjnhrsuDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWghgsPIGc8LgMXMAHiCHFFmq7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTg4ZjkwNTItNWNlYi0z MTI4LWEzMWYtZjcwZDlhMWQ0YTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZSoM+FkA1OrSwa53TO+r9GmN3WNmXHtriiA+/JlBEuBsZViFLpgKsz s6aeiLc/TdZW49++LeuQFGwDoTr2Nhu44rq5AL6eUBf8Ig+a8GqVITDlPxnGmvAc 7wQZFtNA5qXkgWposSN+65Bg6yOlvUCb/f+zjBvwQXPY63odwC++2j9s+RiBp8Ch wXdJXswcRkTvNCamdzAvFALbbmNexUjPJLIrsLLodHcr5GG6PhLi4mp2KcuRaFAD tG5ks3HyeR3Fq8jgwMQUAHixlOglsEEdFW90GGhMGthjbbJPHpd4h/kv/487sIhU Z6DGwZ0XsIosgCm8iCvlNujD851R9Ow= -----END CERTIFICATE-----Generated at Tue Jul 1 06:56:53 2025 by rpki-client