$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25820c3a-f5e5-3985-a127-acc836c819f9.roa File: 25820c3a-f5e5-3985-a127-acc836c819f9.roa (raw, json) Hash identifier: WFAMoElQ3KOiJlZe4m5e1ZYvnJwAOx+ryL5eQtihsEA= Subject key identifier: 71:19:DB:01:B8:85:1B:56:FB:1B:89:83:B2:F7:E2:29:8B:35:20:22 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E15E464269E0E2C532F5C5500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25820c3a-f5e5-3985-a127-acc836c819f9.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 22773 IP address blocks: 72.220.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:64:26:9e:0e:2c:53:2f:5c:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=39ed718d-3afe-4a3f-b630-cc9bac6ad37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:e4:e8:0a:82:18:b5:5e:7b:5b:70:66:c2: af:8a:46:66:e8:6d:61:0f:a5:75:43:96:de:22:25: cd:14:d3:96:4e:29:7c:73:c2:61:ca:2c:6b:ac:05: 7c:d1:5c:23:73:2e:62:31:06:d6:3e:31:9a:82:63: cd:e2:55:ce:ca:12:dd:e7:62:25:9b:60:d0:0c:c1: 68:ca:05:33:c2:d2:6d:23:33:23:2b:de:61:28:c5: a0:ba:3a:22:e5:27:5e:52:e3:48:ba:01:14:53:e4: ac:c8:a8:a5:a0:cd:cf:1e:26:71:ea:0d:54:93:a8: a7:90:eb:0c:db:bb:3f:d7:44:8d:13:c6:82:3a:7d: bd:ff:ce:f5:25:80:05:23:99:04:53:e7:a3:7d:5e: 44:44:ae:c3:41:3f:15:25:8f:ad:4d:5e:5e:e0:86: 1f:7c:48:25:1a:75:c0:5b:23:f5:52:0e:c6:82:f0: cd:51:c4:c1:41:6a:10:b2:f4:c0:1c:a9:5c:d5:10: 66:aa:63:bc:40:12:31:ff:86:7c:3e:bc:51:21:95: 8d:91:d8:c9:47:a2:97:30:b9:fc:ad:53:54:a1:d3: 73:32:2a:e4:cc:4f:ea:2a:9e:f4:69:3d:d9:19:c0: 1e:5f:71:50:95:71:97:21:1b:a2:4a:82:0b:9b:12: ba:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:19:DB:01:B8:85:1B:56:FB:1B:89:83:B2:F7:E2:29:8B:35:20:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25820c3a-f5e5-3985-a127-acc836c819f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:78:19:8b:33:83:6a:90:40:04:28:0f:53:95:91:97:0c:83: 67:3f:64:eb:f9:16:40:5b:e4:12:db:74:58:b6:a0:aa:ac:a2: 85:02:60:fd:65:ac:a3:1a:11:ae:5c:15:92:3a:84:d3:18:d9: 5c:2a:32:9a:c5:27:d4:71:ae:e5:91:86:70:1a:df:84:83:77: da:86:1f:a9:69:cf:d4:16:25:26:15:11:8f:b3:8f:f1:1d:e3: 5b:c0:7a:2d:12:d5:52:53:b3:16:3f:a6:66:c5:d8:66:65:be: 8b:b5:13:e4:41:57:63:27:20:a0:85:15:89:26:a5:ca:34:3e: 00:43:1f:02:84:7a:43:86:c6:5b:5c:49:e4:ea:85:54:eb:2d: 80:28:a4:22:c5:1f:7b:22:89:4f:ec:86:8f:0d:31:78:94:03: 43:d1:20:36:29:00:f1:22:7b:f6:4c:c2:ab:a8:b0:a3:16:c3: 32:98:dd:f0:e7:b7:5f:da:59:b8:e0:5b:82:96:58:37:8f:23: 93:80:5b:b4:61:75:37:22:bb:3c:63:ac:09:29:e5:91:ad:0a: aa:b6:2d:d6:a4:43:93:0d:72:bb:e5:1c:30:37:f9:bf:cd:51: b0:e3:1c:04:f6:77:43:06:e2:06:51:0f:d6:7e:fa:d7:47:7d: cc:8c:b7:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5GQmng4sUy9cVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk MzllZDcxOGQtM2FmZS00YTNmLWI2MzAtY2M5YmFjNmFkMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntbk6AqCGLVee1twZsKvikZm6G1hD6V1Q5be IiXNFNOWTil8c8JhyixrrAV80Vwjcy5iMQbWPjGagmPN4lXOyhLd52Ilm2DQDMFo ygUzwtJtIzMjK95hKMWgujoi5SdeUuNIugEUU+SsyKiloM3PHiZx6g1Uk6inkOsM 27s/10SNE8aCOn29/871JYAFI5kEU+ejfV5ERK7DQT8VJY+tTV5e4IYffEglGnXA WyP1Ug7GgvDNUcTBQWoQsvTAHKlc1RBmqmO8QBIx/4Z8PrxRIZWNkdjJR6KXMLn8 rVNUodNzMirkzE/qKp70aT3ZGcAeX3FQlXGXIRuiSoILmxK6uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEZ2wG4hRtW+xuJg7L34imLNSAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjU4MjBjM2EtZjVlNS0z OTg1LWExMjctYWNjODM2YzgxOWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR4GYszg2qQQAQoD1OVkZcMg2c/ZOv5FkBb5BLbdFi2oKqsooUCYP1l rKMaEa5cFZI6hNMY2VwqMprFJ9RxruWRhnAa34SDd9qGH6lpz9QWJSYVEY+zj/Ed 41vAei0S1VJTsxY/pmbF2GZlvou1E+RBV2MnIKCFFYkmpco0PgBDHwKEekOGxltc SeTqhVTrLYAopCLFH3siiU/sho8NMXiUA0PRIDYpAPEie/ZMwquosKMWwzKY3fDn t1/aWbjgW4KWWDePI5OAW7RhdTciuzxjrAkp5ZGtCqq2LdakQ5MNcrvlHDA3+b/N UbDjHAT2d0MG4gZRD9Z++tdHfcyMt3Q= -----END CERTIFICATE-----Generated at Sat Jun 13 23:33:00 2026 by rpki-client