$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31d23cad-4716-3dbd-9ad7-26b0bfda5def.roa File: 31d23cad-4716-3dbd-9ad7-26b0bfda5def.roa (raw, json) Hash identifier: A6Myi/gmyhhY/tQTRYSjNGkCBsvS+NUCa1SgfbOrAq0= Subject key identifier: CF:C7:3B:17:CA:A7:F2:67:E1:9B:B2:A5:AD:7F:8D:EF:F0:58:DB:F7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD8B79B328AAA8A38A9680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31d23cad-4716-3dbd-9ad7-26b0bfda5def.roa Signing time: Thu 01 May 2025 17:26:00 +0000 ROA not before: Thu 01 May 2025 17:26:00 +0000 ROA not after: Wed 30 Jul 2025 17:26:00 +0000 asID: 22773 IP address blocks: 72.199.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:8b:79:b3:28:aa:a8:a3:8a:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:00 2025 GMT Not After : Jul 30 17:26:00 2025 GMT Subject: CN=9bfd79b1-008c-49e2-a31f-6781d9e0de2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:dc:1b:6a:13:67:57:ea:e2:98:42:db:a8: e8:98:6d:66:9d:44:28:60:c2:db:90:ee:e2:8c:65: c3:5f:ad:93:a0:e7:6c:c9:2e:67:60:2e:d7:2c:a5: 60:8b:b6:26:23:83:96:e9:12:a0:de:dc:f5:7c:df: 9b:7f:70:cc:ad:a4:a7:4a:77:b3:36:15:1f:a9:2e: bc:0b:b0:96:dc:e9:cb:b4:91:f2:82:fa:3e:77:d0: 80:ac:7e:5f:db:54:42:6c:1c:96:e6:80:28:52:3a: 9c:ef:da:95:73:d4:a6:f1:a1:ff:d9:72:6e:c9:4c: 0c:ae:72:69:9e:c6:1c:61:07:7c:4e:8e:6e:99:c5: 42:2f:5e:8c:09:ac:52:c8:60:cf:58:fc:51:89:7a: 85:4f:3a:d8:1b:a2:dd:56:4a:46:16:c6:8d:7d:32: 5f:6a:74:6d:81:db:c7:09:10:0a:5c:a1:e5:44:4d: a6:cf:4e:95:22:48:86:9a:32:65:f8:29:78:fc:6d: ad:9b:38:50:a9:33:c9:95:84:6f:d5:e1:90:ab:61: 9a:ab:d8:25:60:08:23:e4:5c:23:9d:39:73:1d:58: d3:05:d4:c2:70:fc:39:57:ae:2f:9b:0b:3f:26:48: 89:99:bf:a9:dc:56:c5:8f:ca:48:06:a7:b4:cf:41: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C7:3B:17:CA:A7:F2:67:E1:9B:B2:A5:AD:7F:8D:EF:F0:58:DB:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31d23cad-4716-3dbd-9ad7-26b0bfda5def.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a5:56:81:40:d9:af:4e:1c:ca:3e:e8:3e:9a:6a:e1:1f:cb: 53:27:3f:11:ad:53:2b:c4:a6:de:86:12:86:eb:4b:30:8d:c3: 06:e0:5a:ea:92:79:ec:99:7b:ab:38:f5:d5:96:60:bc:60:6b: 3e:63:4f:95:36:52:f3:ed:05:58:7f:c6:15:78:05:b3:76:64: 21:ce:f2:4f:3f:ea:1c:95:68:91:b0:54:94:ab:db:39:19:6a: 02:16:da:e8:75:72:d0:3b:1a:dd:1c:6a:75:92:ef:10:25:c0: 8d:ca:7d:d8:e7:5e:79:01:ca:f4:3f:b5:6a:f3:cb:fd:70:0c: a2:d4:8e:ed:4d:82:87:f9:d7:e7:eb:4b:04:ff:d9:c1:a7:13: a9:d8:8c:bc:23:7f:9c:17:4e:b1:e8:79:4f:5e:4a:36:dd:3c: ed:34:07:a8:3c:ca:a8:e9:75:27:62:16:19:8d:f7:89:ba:e0: c0:e7:50:c9:4b:d8:9a:38:7d:85:4d:37:f3:ec:8e:f5:ed:e0: 8c:d1:10:21:89:a6:f1:f4:46:7f:7f:8d:c1:5c:d8:75:50:3d: dd:63:ad:30:cf:08:f5:d7:c5:55:7b:81:47:3c:8b:7c:ab:9b: bb:52:04:af:ae:bc:92:03:4c:39:fa:e7:8e:af:c4:a8:c7:dc: 40:02:b6:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/Yt5syiqqKOKloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYwMFoXDTI1MDczMDE3MjYwMFowLzEtMCsGA1UEAxMk OWJmZDc5YjEtMDA4Yy00OWUyLWEzMWYtNjc4MWQ5ZTBkZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaTcG2oTZ1fq4phC26jomG1mnUQoYMLbkO7i jGXDX62ToOdsyS5nYC7XLKVgi7YmI4OW6RKg3tz1fN+bf3DMraSnSnezNhUfqS68 C7CW3OnLtJHygvo+d9CArH5f21RCbByW5oAoUjqc79qVc9Sm8aH/2XJuyUwMrnJp nsYcYQd8To5umcVCL16MCaxSyGDPWPxRiXqFTzrYG6LdVkpGFsaNfTJfanRtgdvH CRAKXKHlRE2mz06VIkiGmjJl+Cl4/G2tmzhQqTPJlYRv1eGQq2Gaq9glYAgj5Fwj nTlzHVjTBdTCcPw5V64vmws/JkiJmb+p3FbFj8pIBqe0z0EbYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/HOxfKp/Jn4Zuypa1/je/wWNv3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzFkMjNjYWQtNDcxNi0z ZGJkLTlhZDctMjZiMGJmZGE1ZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGalVoFA2a9OHMo+6D6aauEfy1MnPxGtUyvEpt6GEobrSzCNwwbgWuqS eeyZe6s49dWWYLxgaz5jT5U2UvPtBVh/xhV4BbN2ZCHO8k8/6hyVaJGwVJSr2zkZ agIW2uh1ctA7Gt0canWS7xAlwI3KfdjnXnkByvQ/tWrzy/1wDKLUju1Ngof51+fr SwT/2cGnE6nYjLwjf5wXTrHoeU9eSjbdPO00B6g8yqjpdSdiFhmN94m64MDnUMlL 2Jo4fYVNN/PsjvXt4IzRECGJpvH0Rn9/jcFc2HVQPd1jrTDPCPXXxVV7gUc8i3yr m7tSBK+uvJIDTDn6546vxKjH3EACtvo= -----END CERTIFICATE-----Generated at Sat May 10 04:40:01 2025 by rpki-client