$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0be3b9ca-ff99-3665-8941-159a0e82a4aa.roa File: 0be3b9ca-ff99-3665-8941-159a0e82a4aa.roa (raw, json) Hash identifier: g5IPtrlpPjnnliXp0EZMkPMwa213KI56gAmDoxJzZeM= Subject key identifier: A3:F7:FD:5F:11:B0:8B:1D:4D:E2:85:80:30:4A:E0:D1:BA:DC:C6:A4 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F713FA4DDD23B27D92500 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0be3b9ca-ff99-3665-8941-159a0e82a4aa.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 33363 IP address blocks: 71.46.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:71:3f:a4:dd:d2:3b:27:d9:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=acc49b60-f49b-47c7-b8e6-1b410c86c189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:9c:43:22:70:8b:0b:45:ce:05:06:4c:e4: 2c:11:22:38:c5:2d:db:f8:2c:ba:6b:2c:d5:23:66: 57:be:81:52:97:10:1a:6e:84:52:0a:0f:1f:41:cf: c2:a6:6d:7a:c6:24:58:11:92:ba:5a:f6:2a:d1:e1: 52:b0:1e:92:58:1a:7e:d4:fc:d2:a2:2d:b3:0c:a4: 25:2b:0a:1b:f7:e0:be:64:52:d9:a3:01:b1:c3:cb: 5f:65:62:30:f5:82:ea:5d:4a:0a:90:8a:92:ee:1c: d9:60:1a:e5:ea:a0:67:19:17:bc:af:e7:85:e4:99: 86:0e:8d:23:87:3c:95:1b:95:6d:6a:89:d2:be:5f: 7d:a5:39:ab:37:cf:14:3f:24:b8:77:6a:9d:66:a3: e4:57:1c:13:ff:5f:13:83:ac:36:47:90:3f:da:41: 90:64:c2:b2:86:b5:4f:33:99:b5:4a:63:52:b7:e0: 95:f2:c7:85:71:aa:df:f9:f9:5a:9b:6f:1a:6f:f2: 75:e1:f4:9f:62:3f:c1:32:98:97:12:6e:e9:a9:3d: fe:97:84:59:32:ec:07:d2:9f:bb:b3:fe:ce:cc:65: 8b:33:c4:9c:fc:7e:ba:08:5d:f9:81:52:c0:01:82: d6:77:81:39:96:6c:4e:39:31:06:c6:e4:90:23:f8: f3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F7:FD:5F:11:B0:8B:1D:4D:E2:85:80:30:4A:E0:D1:BA:DC:C6:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0be3b9ca-ff99-3665-8941-159a0e82a4aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.46.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:6b:4f:0d:65:a6:16:3d:e4:90:94:5b:a6:f4:00:67:dd:0d: 1b:e8:6e:b3:2d:f1:58:d2:1a:b4:f0:61:44:cd:27:83:0a:22: 4f:a5:6c:06:3a:90:20:4e:45:f9:82:ac:f6:97:44:06:e0:4f: 0f:81:19:20:79:bc:e6:14:5f:60:1d:6c:e3:ad:83:a6:34:e9: cd:16:92:0f:59:40:71:5e:72:ab:39:d4:78:60:e3:ec:25:94: 9a:29:c7:7c:0a:5a:bb:79:cf:26:3b:9e:f2:8b:1f:5f:ed:3c: f9:cb:b6:71:1b:bb:ad:30:2b:4f:24:a9:93:36:98:9c:84:29: 9c:5b:6a:29:55:5e:e2:1e:06:ad:1d:22:85:45:59:2e:77:8d: e8:d7:c2:f7:56:67:d7:9e:5a:ad:98:20:d9:12:50:87:83:ee: 42:38:d3:6f:66:83:a9:17:09:8b:fa:19:90:5d:76:11:52:14: 23:18:0d:d7:77:ad:dc:b6:54:66:87:2d:18:d4:6a:e8:09:6c: 10:8c:44:c8:2f:f8:47:3b:70:08:68:63:7b:f3:e2:84:23:7c: a2:d2:57:f0:eb:71:98:ee:d5:cc:04:24:62:df:30:01:e3:c5: 21:07:b4:b8:64:d2:11:84:ac:ae:6f:d2:f8:23:c7:96:44:16: ff:58:9e:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P3E/pN3SOyfZJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YWNjNDliNjAtZjQ5Yi00N2M3LWI4ZTYtMWI0MTBjODZjMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJCcQyJwiwtFzgUGTOQsESI4xS3b+Cy6ayzV I2ZXvoFSlxAaboRSCg8fQc/Cpm16xiRYEZK6WvYq0eFSsB6SWBp+1PzSoi2zDKQl Kwob9+C+ZFLZowGxw8tfZWIw9YLqXUoKkIqS7hzZYBrl6qBnGRe8r+eF5JmGDo0j hzyVG5VtaonSvl99pTmrN88UPyS4d2qdZqPkVxwT/18Tg6w2R5A/2kGQZMKyhrVP M5m1SmNSt+CV8seFcarf+flam28ab/J14fSfYj/BMpiXEm7pqT3+l4RZMuwH0p+7 s/7OzGWLM8Sc/H66CF35gVLAAYLWd4E5lmxOOTEGxuSQI/jzKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP3/V8RsIsdTeKFgDBK4NG63MakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMGJlM2I5Y2EtZmY5OS0z NjY1LTg5NDEtMTU5YTBlODJhNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERy4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRrTw1lphY95JCUW6b0AGfdDRvobrMt8VjSGrTwYUTNJ4MKIk+lbAY6 kCBORfmCrPaXRAbgTw+BGSB5vOYUX2AdbOOtg6Y06c0Wkg9ZQHFecqs51Hhg4+wl lJopx3wKWrt5zyY7nvKLH1/tPPnLtnEbu60wK08kqZM2mJyEKZxbailVXuIeBq0d IoVFWS53jejXwvdWZ9eeWq2YINkSUIeD7kI4029mg6kXCYv6GZBddhFSFCMYDdd3 rdy2VGaHLRjUaugJbBCMRMgv+Ec7cAhoY3vz4oQjfKLSV/DrcZju1cwEJGLfMAHj xSEHtLhk0hGErK5v0vgjx5ZEFv9YnlY= -----END CERTIFICATE-----Generated at Sat May 10 07:59:23 2025 by rpki-client