$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa File: 3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa (raw, json) Hash identifier: LpJldm64bLzZSHfhYLotRl+34kFXVVpeX7m+tcJ1DYs= Subject key identifier: E4:D8:2C:EF:BD:F8:56:00:C0:EC:4B:94:7E:43:EF:E4:38:6A:07:A9 Certificate issuer: /CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07 Certificate serial: 010D0C9F43285849CE9A66ED09C7377B05798B80 Authority key identifier: 7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 22773 IP address blocks: 207.90.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:66:ed:09:c7:37:7b:05:79:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=f978c729-990f-484a-810a-d21075c6f70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:31:ae:88:1c:d3:47:7a:73:03:ed:46:f0: 61:74:44:ed:2f:f9:de:f2:ab:3a:4f:30:39:00:7b: d0:c9:4d:00:01:22:02:a6:6f:bc:e6:47:d3:f9:a4: 85:8b:13:b0:b8:81:94:36:f8:ca:29:a5:de:dd:eb: ea:68:f5:6a:3d:6a:2b:0a:ec:61:6a:01:95:8d:2b: d1:04:45:43:72:86:50:73:4c:09:8a:17:72:77:b3: 51:66:94:04:22:ec:8c:fd:3b:32:fd:d8:2e:4f:fa: f8:38:f5:6a:fe:ae:a4:30:fa:60:0d:2c:a1:ab:98: d4:60:f8:57:54:04:cd:c7:83:e6:f6:f5:30:98:8a: 31:68:97:6e:ae:83:13:b3:15:6b:6b:8f:39:7c:bf: a4:c4:87:7c:bc:4f:40:ee:08:b7:b5:10:ae:92:1f: 2a:be:78:a1:0d:2b:b2:1c:1b:dc:6b:3d:32:cb:4b: 26:10:44:f4:fe:06:5e:2a:bc:71:9c:e8:9e:e5:5c: a0:4e:c6:3c:f2:b1:60:b4:af:7c:dd:ec:91:d9:be: 8c:64:7f:10:1c:c5:21:cc:ea:f8:e3:06:c6:0e:2c: 44:59:41:b4:48:b0:1a:16:01:ce:13:3d:3a:17:38: 64:65:10:ad:02:43:3f:5c:c3:4b:81:1d:18:bd:6b: 2a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D8:2C:EF:BD:F8:56:00:C0:EC:4B:94:7E:43:EF:E4:38:6A:07:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl X509v3 Authority Key Identifier: keyid:7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer sbgp-ipAddrBlock: critical IPv4: 207.90.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a7:0d:e5:1d:ea:30:df:e3:5e:8f:be:44:9d:20:95:bf:c3: 5d:e9:bd:a5:8d:92:2a:e0:71:ff:f6:3b:56:be:85:6e:c8:cc: 45:3d:c7:41:38:01:a0:f9:cf:ce:59:a9:e0:31:40:b7:7a:bc: 14:95:19:e6:8d:ea:9b:22:bf:1e:35:a9:da:16:1c:c9:00:5d: 2e:15:d7:a9:69:34:e0:dc:b1:31:0b:95:84:fb:93:bf:f6:8e: c7:a5:0a:54:bc:f1:80:1b:58:dc:58:d2:f1:cc:43:7f:bb:a5: 07:e0:ea:9a:98:03:ee:19:66:67:60:0e:12:28:04:5b:cd:db: fc:75:ad:02:99:fd:3e:63:be:d3:13:3c:2b:c9:01:24:b7:47: b4:78:2c:f4:0e:6d:df:f8:01:f8:fd:99:ce:09:c1:d7:48:b7: d7:d2:c2:47:d0:c9:17:14:e6:ce:08:df:7e:ed:38:dd:ef:05: b0:eb:64:2d:4e:9c:63:b7:22:82:62:cf:82:ce:ca:b8:87:33: b9:99:3f:76:59:8a:57:fc:09:8f:bd:1a:64:75:3f:7b:a7:c1: 32:54:a6:0b:b9:9c:78:e9:95:ea:48:66:1f:f6:bd:1f:47:49: 2c:b5:07:6c:2f:ef:69:d3:12:d5:dd:c8:b7:59:ec:e2:1b:a5: 74:3d:3e:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmbtCcc3ewV5i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyYzEzNzctNGYyNi00YWU0LWJiNmMtM2NhN2ZlMjVi ZTA3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk Zjk3OGM3MjktOTkwZi00ODRhLTgxMGEtZDIxMDc1YzZmNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsekxrogc00d6cwPtRvBhdETtL/ne8qs6TzA5 AHvQyU0AASICpm+85kfT+aSFixOwuIGUNvjKKaXe3evqaPVqPWorCuxhagGVjSvR BEVDcoZQc0wJihdyd7NRZpQEIuyM/Tsy/dguT/r4OPVq/q6kMPpgDSyhq5jUYPhX VATNx4Pm9vUwmIoxaJduroMTsxVra485fL+kxId8vE9A7gi3tRCukh8qvnihDSuy HBvcaz0yy0smEET0/gZeKrxxnOie5VygTsY88rFgtK983eyR2b6MZH8QHMUhzOr4 4wbGDixEWUG0SLAaFgHOEz06FzhkZRCtAkM/XMNLgR0YvWsqqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTYLO+9+FYAwOxLlH5D7+Q4agepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDJj MTM3Ny00ZjI2LTRhZTQtYmI2Yy0zY2E3ZmUyNWJlMDcvM2EwZDUyNDktMjUxMi0z Y2YxLWE5NmMtZmU3YTU4ZWU5YjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQyYzEzNzctNGYyNi00YWU0LWJi NmMtM2NhN2ZlMjViZTA3LzFkMmMxMzc3LTRmMjYtNGFlNC1iYjZjLTNjYTdmZTI1 YmUwNy5jcmwwHwYDVR0jBBgwFoAUfY6kggzcmm9PyTHHI3WQFOSuOv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZDJjMTM3Ny00ZjI2LTRhZTQtYmI2Yy0zY2E3 ZmUyNWJlMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz1rUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKnDeUd6jDf416PvkSdIJW/w13pvaWNkirgcf/2O1a+hW7IzEU9x0E4 AaD5z85ZqeAxQLd6vBSVGeaN6psivx41qdoWHMkAXS4V16lpNODcsTELlYT7k7/2 jselClS88YAbWNxY0vHMQ3+7pQfg6pqYA+4ZZmdgDhIoBFvN2/x1rQKZ/T5jvtMT PCvJASS3R7R4LPQObd/4Afj9mc4JwddIt9fSwkfQyRcU5s4I337tON3vBbDrZC1O nGO3IoJiz4LOyriHM7mZP3ZZilf8CY+9GmR1P3unwTJUpgu5nHjplepIZh/2vR9H SSy1B2wv72nTEtXdyLdZ7OIbpXQ9Plo= -----END CERTIFICATE-----Generated at Fri Jun 6 03:20:09 2025 by rpki-client