$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b01a33cc-4594-3603-b5b8-3e9763379e38.roa File: b01a33cc-4594-3603-b5b8-3e9763379e38.roa (raw, json) Hash identifier: 39fzAL0KC8l0sAvRZ+lPBTGdNx1izTMQBJbi5lwM/eo= Subject key identifier: E4:B2:80:12:A3:14:08:13:41:EA:87:7E:C5:F8:E9:45:DB:92:4A:0F Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F94DF68D9AA20C473D180 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b01a33cc-4594-3603-b5b8-3e9763379e38.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 33363 IP address blocks: 71.44.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:94:df:68:d9:aa:20:c4:73:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=e08a8a7e-e908-4ffa-a414-1cd2213d181d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:45:47:04:4a:a1:e2:eb:c1:f7:df:fe:88:66: dc:eb:f5:8a:40:71:d8:80:96:20:7a:dc:fd:38:13: fd:1a:9c:51:50:2d:0d:f9:82:cf:ea:da:43:be:10: 33:0e:bf:e6:d9:a4:4d:9c:cc:65:47:a4:8e:d3:18: 59:14:ec:ce:41:33:5f:6f:0e:45:27:fd:8c:76:08: 8b:90:75:04:a7:ef:c7:b3:4b:2e:df:43:4d:52:ba: fc:e5:3f:30:f2:be:00:d1:5f:24:19:36:78:14:04: a7:42:89:8a:d0:ce:c4:fb:e2:74:bb:6f:db:19:c7: e6:9d:0a:5d:5e:af:b2:dd:8d:00:55:64:2f:5b:1e: 14:ff:99:0b:f2:89:d9:ed:60:90:49:d1:7d:00:6e: 5b:ca:f3:f4:43:cb:30:14:99:e4:95:0f:44:c0:f9: 10:f1:76:c6:8f:12:31:0a:f3:3c:44:45:f3:fd:6a: 29:a0:f8:df:b6:71:4d:b1:f0:f8:21:71:c1:0d:26: 9b:ee:e9:01:c7:37:39:59:57:69:63:23:58:60:08: 34:08:e2:06:2d:b9:35:91:1f:dd:90:32:c9:77:31: cc:0a:86:cd:3d:96:97:f4:0b:a3:17:4d:76:7a:c9: 3c:31:7a:1f:43:76:1f:9b:fe:23:20:dc:e1:3e:8c: 03:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B2:80:12:A3:14:08:13:41:EA:87:7E:C5:F8:E9:45:DB:92:4A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b01a33cc-4594-3603-b5b8-3e9763379e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.44.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a2:ec:eb:b3:90:db:54:a4:76:67:fc:cb:4c:50:75:cc:29: 64:34:1a:85:1c:d3:14:22:37:f5:5b:07:05:7c:02:0d:33:71: b9:65:49:a0:b8:01:8c:10:07:03:5d:0c:ab:24:2c:33:cb:b8: 64:50:11:76:35:d5:09:67:e8:4c:a9:41:d6:90:f3:07:e1:8d: b3:f4:93:bc:87:24:ba:26:fc:29:95:80:f5:7f:32:3a:af:9d: bd:7a:2c:16:3a:18:0f:a5:f8:b0:de:32:3e:9b:ce:4c:3b:15: 64:e2:14:fb:d0:c6:86:45:e5:8e:73:94:21:81:c4:3e:47:22: dd:86:93:22:f9:b1:2e:11:f0:14:d1:f5:01:d5:c0:7a:d1:d0: c5:8d:25:ee:d7:a7:b2:e3:17:ad:f3:43:16:d7:66:08:cd:f3: 70:13:8b:a8:02:7e:25:4f:74:72:43:da:18:85:42:d5:ab:5d: 03:f4:5a:31:39:5d:62:e1:56:a4:1b:2b:e4:be:f7:5d:5b:73: 9a:69:39:2c:15:0e:44:bc:d4:ae:cf:77:36:5d:d8:e4:f7:ec: c5:e2:c4:24:b1:60:55:8e:ea:ab:c0:00:ef:58:ee:27:91:83: 25:69:ed:a9:c5:8d:99:f5:0b:13:db:d0:ca:a6:c8:f0:64:06: 7e:7e:ee:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5TfaNmqIMRz0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZTA4YThhN2UtZTkwOC00ZmZhLWE0MTQtMWNkMjIxM2QxODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEVHBEqh4uvB99/+iGbc6/WKQHHYgJYgetz9 OBP9GpxRUC0N+YLP6tpDvhAzDr/m2aRNnMxlR6SO0xhZFOzOQTNfbw5FJ/2MdgiL kHUEp+/Hs0su30NNUrr85T8w8r4A0V8kGTZ4FASnQomK0M7E++J0u2/bGcfmnQpd Xq+y3Y0AVWQvWx4U/5kL8onZ7WCQSdF9AG5byvP0Q8swFJnklQ9EwPkQ8XbGjxIx CvM8REXz/WopoPjftnFNsfD4IXHBDSab7ukBxzc5WVdpYyNYYAg0COIGLbk1kR/d kDLJdzHMCobNPZaX9AujF012esk8MXofQ3Yfm/4jINzhPowDPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSygBKjFAgTQeqHfsX46UXbkkoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYjAxYTMzY2MtNDU5NC0z NjAzLWI1YjgtM2U5NzYzMzc5ZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRyw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIii7OuzkNtUpHZn/MtMUHXMKWQ0GoUc0xQiN/VbBwV8Ag0zcbllSaC4 AYwQBwNdDKskLDPLuGRQEXY11Qln6EypQdaQ8wfhjbP0k7yHJLom/CmVgPV/Mjqv nb16LBY6GA+l+LDeMj6bzkw7FWTiFPvQxoZF5Y5zlCGBxD5HIt2GkyL5sS4R8BTR 9QHVwHrR0MWNJe7Xp7LjF63zQxbXZgjN83ATi6gCfiVPdHJD2hiFQtWrXQP0WjE5 XWLhVqQbK+S+911bc5ppOSwVDkS81K7PdzZd2OT37MXixCSxYFWO6qvAAO9Y7ieR gyVp7anFjZn1CxPb0MqmyPBkBn5+7lU= -----END CERTIFICATE-----Generated at Wed May 7 22:10:12 2025 by rpki-client