$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa File: 3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa (raw, json) Hash identifier: kQChE75NKTLJReBhUJdETEQs+JC04nZO2QJgCQnmlHw= Subject key identifier: B8:6E:DC:FC:CD:5C:7A:24:DA:6E:13:8E:E1:36:0E:83:75:BD:5F:AE Certificate issuer: /CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07 Certificate serial: 010D0C9F4328584AADF121A187B0CA1E905C26C0 Authority key identifier: 7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 22773 IP address blocks: 207.90.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:21:a1:87:b0:ca:1e:90:5c:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=11b45dd4-367e-41c6-a464-98f65fe9cea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b6:e2:8d:eb:a4:e0:02:4e:af:13:41:b5:9b: e7:6b:36:4e:35:20:77:8e:51:f1:48:be:11:7d:5f: fc:5b:65:9a:44:16:40:7c:ff:17:f3:2b:5a:5c:02: 4b:75:1a:fe:32:62:e8:b4:3e:70:83:36:27:3b:a6: 87:50:74:ba:4a:6a:e1:c8:a2:6c:77:2b:2a:31:43: c3:43:90:71:dc:46:d5:a4:cf:a1:a0:9f:96:7a:f6: c4:ba:7d:ce:03:14:cc:eb:08:8d:72:4d:9e:1c:f2: 00:5a:8e:e9:f0:ed:45:8f:61:8c:c0:22:51:f1:90: a2:72:f5:59:b8:cc:ed:5a:50:8a:47:3b:ca:06:77: a7:ea:45:6e:64:ad:60:35:92:ea:fa:11:22:d1:a7: 49:f6:db:58:fb:3a:77:06:ee:50:b6:29:19:3e:5e: 09:a3:94:27:ff:e0:8a:2d:38:d5:65:69:11:53:84: c8:ca:f8:c8:80:f7:5f:ac:75:81:c2:81:a0:1a:23: cc:f2:eb:c9:aa:6e:b9:40:e4:3b:11:1a:c2:0e:56: 53:3b:ec:3e:f9:98:ce:09:77:e0:5e:25:67:05:92: d7:fc:54:7a:51:f2:b5:19:1e:d0:d3:0d:b6:6e:44: 76:d6:d4:82:10:fa:59:2d:3e:74:54:2a:df:01:a8: 18:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6E:DC:FC:CD:5C:7A:24:DA:6E:13:8E:E1:36:0E:83:75:BD:5F:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl X509v3 Authority Key Identifier: keyid:7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer sbgp-ipAddrBlock: critical IPv4: 207.90.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:73:db:b4:58:9b:67:de:8d:94:3e:60:ce:e2:06:55:a9:f4: b0:be:de:7c:ec:5f:dc:1b:ce:9f:98:d1:f8:e8:b6:30:22:e2: 9d:1d:54:32:64:7c:66:b9:88:50:fa:8b:6f:0e:51:13:56:73: 8b:9d:c1:47:f4:e2:25:21:78:ed:d8:93:8c:e4:32:e5:57:63: 47:ec:4b:11:8a:6c:08:1e:a3:95:de:b2:0a:97:44:d0:0a:ec: 91:19:90:cc:92:ec:2e:15:8a:6d:54:38:e6:31:7c:51:3f:77: a7:28:94:1a:5d:20:e6:3b:9f:84:1c:ca:f3:be:4d:13:95:3c: 15:96:24:01:d1:a9:15:5a:9d:b2:28:31:ee:49:db:9f:53:56: 2f:40:a6:f4:0c:14:33:23:ed:d9:5a:de:ec:70:26:bf:6d:97: 06:7c:42:74:54:f5:a3:84:09:15:df:84:7a:21:9a:38:4e:7b: 82:40:3d:e9:77:a8:f1:d3:93:2d:c7:1b:1c:8a:46:97:bb:fc: df:d0:04:ad:3a:16:b2:c6:6c:f9:d6:bf:ec:10:4c:1b:9e:2c: 7b:30:d6:d8:a5:b4:f0:f3:e3:61:79:18:0c:10:13:fa:63:c8: ec:58:f9:40:48:6e:7f:f9:e7:8c:46:75:07:cc:ba:cd:72:9a: 93:80:1e:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SGhh7DKHpBcJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyYzEzNzctNGYyNi00YWU0LWJiNmMtM2NhN2ZlMjVi ZTA3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MTFiNDVkZDQtMzY3ZS00MWM2LWE0NjQtOThmNjVmZTljZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrbijeuk4AJOrxNBtZvnazZONSB3jlHxSL4R fV/8W2WaRBZAfP8X8ytaXAJLdRr+MmLotD5wgzYnO6aHUHS6SmrhyKJsdysqMUPD Q5Bx3EbVpM+hoJ+WevbEun3OAxTM6wiNck2eHPIAWo7p8O1Fj2GMwCJR8ZCicvVZ uMztWlCKRzvKBnen6kVuZK1gNZLq+hEi0adJ9ttY+zp3Bu5QtikZPl4Jo5Qn/+CK LTjVZWkRU4TIyvjIgPdfrHWBwoGgGiPM8uvJqm65QOQ7ERrCDlZTO+w++ZjOCXfg XiVnBZLX/FR6UfK1GR7Q0w22bkR21tSCEPpZLT50VCrfAagY/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhu3PzNXHok2m4TjuE2DoN1vV+uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDJj MTM3Ny00ZjI2LTRhZTQtYmI2Yy0zY2E3ZmUyNWJlMDcvM2EwZDUyNDktMjUxMi0z Y2YxLWE5NmMtZmU3YTU4ZWU5YjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQyYzEzNzctNGYyNi00YWU0LWJi NmMtM2NhN2ZlMjViZTA3LzFkMmMxMzc3LTRmMjYtNGFlNC1iYjZjLTNjYTdmZTI1 YmUwNy5jcmwwHwYDVR0jBBgwFoAUfY6kggzcmm9PyTHHI3WQFOSuOv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZDJjMTM3Ny00ZjI2LTRhZTQtYmI2Yy0zY2E3 ZmUyNWJlMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz1rUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9z27RYm2fejZQ+YM7iBlWp9LC+3nzsX9wbzp+Y0fjotjAi4p0dVDJk fGa5iFD6i28OURNWc4udwUf04iUheO3Yk4zkMuVXY0fsSxGKbAgeo5XesgqXRNAK 7JEZkMyS7C4Vim1UOOYxfFE/d6colBpdIOY7n4QcyvO+TROVPBWWJAHRqRVanbIo Me5J259TVi9ApvQMFDMj7dla3uxwJr9tlwZ8QnRU9aOECRXfhHohmjhOe4JAPel3 qPHTky3HGxyKRpe7/N/QBK06FrLGbPnWv+wQTBueLHsw1tiltPDz42F5GAwQE/pj yOxY+UBIbn/554xGdQfMus1ympOAHiw= -----END CERTIFICATE-----Generated at Mon Aug 4 14:19:31 2025 by rpki-client