$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/436490f9-a30b-39dc-a537-f7bafe2c2135.roa File: 436490f9-a30b-39dc-a537-f7bafe2c2135.roa (raw, json) Hash identifier: CNe2XnjKwgFQkw5FShLdZoTSp/HJ2PmyIzqoXJObJg4= Subject key identifier: 37:89:F4:8F:D0:AB:9A:84:B9:C0:93:B1:B0:C4:B5:57:29:F9:4E:F0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75E06B4C8236922A35F7C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/436490f9-a30b-39dc-a537-f7bafe2c2135.roa Signing time: Thu 19 Jun 2025 14:38:23 +0000 ROA not before: Thu 19 Jun 2025 14:38:23 +0000 ROA not after: Wed 17 Sep 2025 14:38:23 +0000 asID: 22773 IP address blocks: 72.206.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:e0:6b:4c:82:36:92:2a:35:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:23 2025 GMT Not After : Sep 17 14:38:23 2025 GMT Subject: CN=033cc664-4a81-4195-b99e-3a711a60ba8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:fc:a0:12:2c:88:7e:cc:bf:8d:85:12:bd: 36:cd:75:b4:c4:ef:c9:0a:d4:d5:51:9c:e2:3b:d9: ca:e8:f4:24:01:88:a1:08:18:9e:67:87:e5:4e:41: e3:b1:6f:9a:b4:46:e9:8f:6a:ab:40:38:1e:b5:51: f1:11:ee:3c:8a:f6:b8:cf:29:d4:ad:94:7d:8a:9a: 26:94:66:81:9c:59:d5:b4:e5:f2:cd:3f:5a:f8:ad: b7:0f:4c:1f:91:0f:f8:b7:65:ff:fd:71:e7:16:33: dc:20:75:b7:af:53:f0:6c:ab:25:07:e0:cd:2c:40: 7b:c4:a3:d4:5d:fc:0f:a8:bf:d5:35:58:9b:48:8c: 7d:2f:e6:14:dc:40:db:6a:81:e8:3d:16:4f:56:7f: ad:64:c6:fe:08:d8:2e:ac:02:66:da:2e:78:67:7e: 25:05:cc:f2:9e:4f:29:6f:14:9c:5a:de:08:c5:37: a2:56:d5:4f:44:9a:7a:c6:75:e4:a0:fd:93:fb:e4: 3e:0c:1b:74:0a:5f:4c:1d:bd:a0:eb:7c:83:bd:b3: 2c:66:5b:67:4c:46:14:3e:b8:9a:c4:93:f4:81:fe: 57:e5:f4:07:38:64:2d:81:7f:7b:b8:59:dd:8b:fe: 3a:4d:6a:97:b2:86:03:c5:bb:4e:b9:f6:f2:40:2d: f0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:89:F4:8F:D0:AB:9A:84:B9:C0:93:B1:B0:C4:B5:57:29:F9:4E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/436490f9-a30b-39dc-a537-f7bafe2c2135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:3e:93:64:c4:69:96:4c:f7:da:fe:af:71:c3:ef:6a:5d:b2: b2:73:5b:b3:de:16:64:38:bb:03:11:a1:76:6f:22:09:75:f8: 35:64:02:e6:fd:de:b0:07:cf:cf:4e:a1:75:77:3b:ec:6d:c2: 30:dc:3a:07:78:2e:3b:af:72:e2:a9:5d:a0:5c:1c:32:f7:48: 02:9d:35:92:03:92:5f:a5:c4:65:0c:05:91:0a:ec:a0:9f:a5: c4:84:3b:74:9f:e1:b7:64:39:92:a4:b6:49:26:18:66:ad:81: 18:bf:af:65:cd:3d:20:b9:cc:8c:be:de:52:ce:dd:62:a9:08: 7e:23:ad:ff:57:29:d3:7e:c1:b9:90:3b:16:0a:32:3e:d8:b5: d0:35:6e:3a:5a:4f:eb:da:55:fd:29:89:75:a2:3b:76:68:b6: 27:3c:4d:ad:a0:7e:22:02:62:39:2c:b5:69:15:ae:27:1a:db: 98:3f:de:26:ac:21:5e:66:82:d8:74:18:c4:9e:0e:fc:74:0d: b5:f7:c2:5c:d9:50:31:86:e3:08:99:2d:42:b6:8e:c1:a0:e8: bf:5f:87:8d:66:e3:17:c1:33:3a:4f:31:d3:c7:ad:ac:9d:37: 00:d7:8c:8a:e8:59:43:fe:f0:fe:46:8c:53:49:1b:ab:29:36: 8e:3d:87:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+deBrTII2kio198AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgyM1oXDTI1MDkxNzE0MzgyM1owLzEtMCsGA1UEAxMk MDMzY2M2NjQtNGE4MS00MTk1LWI5OWUtM2E3MTFhNjBiYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv578oBIsiH7Mv42FEr02zXW0xO/JCtTVUZzi O9nK6PQkAYihCBieZ4flTkHjsW+atEbpj2qrQDgetVHxEe48iva4zynUrZR9ipom lGaBnFnVtOXyzT9a+K23D0wfkQ/4t2X//XHnFjPcIHW3r1PwbKslB+DNLEB7xKPU XfwPqL/VNVibSIx9L+YU3EDbaoHoPRZPVn+tZMb+CNgurAJm2i54Z34lBczynk8p bxScWt4IxTeiVtVPRJp6xnXkoP2T++Q+DBt0Cl9MHb2g63yDvbMsZltnTEYUPria xJP0gf5X5fQHOGQtgX97uFndi/46TWqXsoYDxbtOufbyQC3wRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeJ9I/Qq5qEucCTsbDEtVcp+U7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM2NDkwZjktYTMwYi0z OWRjLWE1MzctZjdiYWZlMmMyMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE+k2TEaZZM99r+r3HD72pdsrJzW7PeFmQ4uwMRoXZvIgl1+DVkAub9 3rAHz89OoXV3O+xtwjDcOgd4LjuvcuKpXaBcHDL3SAKdNZIDkl+lxGUMBZEK7KCf pcSEO3Sf4bdkOZKktkkmGGatgRi/r2XNPSC5zIy+3lLO3WKpCH4jrf9XKdN+wbmQ OxYKMj7YtdA1bjpaT+vaVf0piXWiO3Zotic8Ta2gfiICYjkstWkVrica25g/3ias IV5mgth0GMSeDvx0DbX3wlzZUDGG4wiZLUK2jsGg6L9fh41m4xfBMzpPMdPHrayd NwDXjIroWUP+8P5GjFNJG6spNo49h0c= -----END CERTIFICATE-----Generated at Tue Jul 1 18:24:01 2025 by rpki-client