$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fae0a95-a13c-3baf-8094-1c3e66b5e174.roa File: 7fae0a95-a13c-3baf-8094-1c3e66b5e174.roa (raw, json) Hash identifier: kwMDBT0lBK7d9IMUXpeyNGMBHQ/gfmxPZBygBCBcrEc= Subject key identifier: 4A:22:B6:49:55:50:8A:8D:F0:F5:AD:9E:FC:C2:CD:FA:3D:97:65:AE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75E13C8F27D669069459C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fae0a95-a13c-3baf-8094-1c3e66b5e174.roa Signing time: Thu 19 Jun 2025 14:38:24 +0000 ROA not before: Thu 19 Jun 2025 14:38:24 +0000 ROA not after: Wed 17 Sep 2025 14:38:24 +0000 asID: 22773 IP address blocks: 72.206.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:e1:3c:8f:27:d6:69:06:94:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:38:24 2025 GMT Not After : Sep 17 14:38:24 2025 GMT Subject: CN=d759536c-3055-46f6-a427-f6eebf64792c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:38:14:27:a0:a1:49:10:77:99:f1:aa:c1:a3: 81:02:ac:41:fd:31:2d:d1:08:c7:6c:43:12:02:c1: 00:a6:bc:6a:73:17:23:03:1c:1a:14:66:d4:bb:90: 73:4e:92:f1:04:4e:72:2b:04:94:99:46:77:b8:5c: 5c:5c:e0:b4:30:fb:56:87:f8:c1:aa:7d:40:5e:2a: 30:ff:58:bf:38:35:ad:9f:db:00:9e:c2:b1:af:6b: 8a:85:44:b9:aa:a3:9d:60:3f:76:ce:a4:a2:cb:0f: ba:3b:14:ad:9d:24:0b:33:e2:11:10:5f:56:73:36: 7b:bb:dc:56:10:cc:4d:18:61:94:89:d1:91:a0:a9: 2b:4b:0e:fa:9f:ac:9a:12:bd:36:ed:1e:12:75:ed: 66:13:43:f4:d6:ab:44:b9:e0:4b:6f:52:b0:14:38: 97:1a:29:50:8f:b3:69:56:3b:83:04:9b:fa:f8:e9: 4a:98:86:44:d0:16:89:81:f5:ad:c9:9e:a5:ec:c8: b2:15:ec:e5:ef:7b:3d:18:4a:9f:73:8f:e4:80:b9: 02:84:e0:09:07:23:9b:77:58:f6:85:60:46:d9:ce: 4a:d5:e7:71:03:79:6d:64:a3:cf:62:69:9f:91:2a: b5:37:fd:6c:ad:ca:97:78:46:7f:d7:ce:20:de:87: ce:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:22:B6:49:55:50:8A:8D:F0:F5:AD:9E:FC:C2:CD:FA:3D:97:65:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fae0a95-a13c-3baf-8094-1c3e66b5e174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:11:68:b2:96:88:25:d8:d4:77:3e:e0:e7:46:bd:9f:ca:d9: 42:fe:75:7a:b6:15:d1:e7:94:bd:22:29:92:32:07:12:8e:47: 36:f2:7c:bd:14:c4:d6:ae:75:9a:24:e0:31:51:10:54:87:fe: d4:d1:36:45:f3:f5:d6:30:13:57:0a:4b:9a:f0:f8:93:f8:ea: 3c:35:28:3b:70:e1:42:2d:f4:01:ef:e9:ec:cc:1d:b2:3c:41: 42:ca:c8:b0:5b:81:f7:8f:71:e4:7b:16:ee:84:43:bd:ec:29: 31:12:76:a1:72:30:4b:a8:39:7f:28:79:75:60:a4:79:6f:fe: d4:2e:24:8a:f9:0e:db:38:6d:78:6a:f9:b2:d5:3d:ad:d6:c2: af:a1:34:cf:1b:46:03:2b:06:95:a0:3d:cb:d7:fb:d8:2a:e6: 3a:c5:d7:43:e2:dd:bd:8b:f4:fe:d8:27:43:76:3b:2b:f4:c8: 2f:ee:bf:c2:66:ef:2d:74:e8:8d:77:44:bb:57:1c:c7:e6:21: 3f:c6:04:77:e1:1c:08:ae:74:59:c3:ca:ce:f0:61:87:d8:a3: ae:3f:c1:35:5d:61:99:07:00:bc:9c:49:59:eb:d2:a0:ca:57: 75:1f:5c:fc:63:b9:10:65:1d:ec:64:42:66:00:fa:e5:66:4f: 14:fe:b5:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+deE8jyfWaQaUWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzgyNFoXDTI1MDkxNzE0MzgyNFowLzEtMCsGA1UEAxMk ZDc1OTUzNmMtMzA1NS00NmY2LWE0MjctZjZlZWJmNjQ3OTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDgUJ6ChSRB3mfGqwaOBAqxB/TEt0QjHbEMS AsEAprxqcxcjAxwaFGbUu5BzTpLxBE5yKwSUmUZ3uFxcXOC0MPtWh/jBqn1AXiow /1i/ODWtn9sAnsKxr2uKhUS5qqOdYD92zqSiyw+6OxStnSQLM+IREF9WczZ7u9xW EMxNGGGUidGRoKkrSw76n6yaEr027R4Sde1mE0P01qtEueBLb1KwFDiXGilQj7Np VjuDBJv6+OlKmIZE0BaJgfWtyZ6l7MiyFezl73s9GEqfc4/kgLkChOAJByObd1j2 hWBG2c5K1edxA3ltZKPPYmmfkSq1N/1srcqXeEZ/184g3ofOlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoitklVUIqN8PWtnvzCzfo9l2WuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2ZhZTBhOTUtYTEzYy0z YmFmLTgwOTQtMWMzZTY2YjVlMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0RaLKWiCXY1Hc+4OdGvZ/K2UL+dXq2FdHnlL0iKZIyBxKORzbyfL0U xNaudZok4DFREFSH/tTRNkXz9dYwE1cKS5rw+JP46jw1KDtw4UIt9AHv6ezMHbI8 QULKyLBbgfePceR7Fu6EQ73sKTESdqFyMEuoOX8oeXVgpHlv/tQuJIr5Dts4bXhq +bLVPa3Wwq+hNM8bRgMrBpWgPcvX+9gq5jrF10Pi3b2L9P7YJ0N2Oyv0yC/uv8Jm 7y106I13RLtXHMfmIT/GBHfhHAiudFnDys7wYYfYo64/wTVdYZkHALycSVnr0qDK V3UfXPxjuRBlHexkQmYA+uVmTxT+tco= -----END CERTIFICATE-----Generated at Tue Jul 1 00:52:54 2025 by rpki-client