$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3b214d5-d800-3770-9574-001a0ddf16d8.roa File: a3b214d5-d800-3770-9574-001a0ddf16d8.roa (raw, json) Hash identifier: 3xP7CGnu3pSCNBt28vBYspKOLkvArzuIXbe3FajsYww= Subject key identifier: F9:FB:53:C5:22:89:6B:E6:44:B3:5F:43:72:7B:C2:52:F2:22:40:5C Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E00668BD9655B83373A09A80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3b214d5-d800-3770-9574-001a0ddf16d8.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 33363 IP address blocks: 71.44.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:68:bd:96:55:b8:33:73:a0:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=ac2d9614-db43-4257-afef-69eb12f702bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:48:a6:01:9f:e6:a1:66:1c:d3:03:ce:59: 98:de:cb:79:35:a4:aa:12:03:c2:d3:d3:36:cb:c4: 63:f2:81:49:8a:f6:dc:14:cb:7b:3f:3e:bd:7e:26: c3:55:25:86:fa:f3:59:e0:26:dd:3e:6c:ce:1e:2a: c1:41:1f:e3:35:e9:93:c6:cf:c5:a7:08:a8:6b:85: 54:61:e2:50:22:f9:3b:66:7c:af:a6:6d:6d:d7:85: aa:05:b8:d2:cc:c2:6d:18:80:6c:c6:5c:24:bf:fa: 4f:07:d7:5c:5b:72:95:ee:c7:ca:c4:53:ff:fc:df: b4:31:a1:e1:2a:1a:b9:9a:00:fd:0d:26:60:f8:b3: 5c:28:ae:e8:d4:b9:e7:7d:86:98:df:fc:fe:7f:31: c7:e2:d0:21:c5:d2:3f:76:41:4e:a7:0e:35:65:ca: 96:6f:ac:db:9a:c0:15:b7:9f:9c:c7:46:5e:40:24: 95:6d:0b:ec:62:93:2b:4d:a2:4e:4c:b6:fe:10:e9: e0:d0:d3:b2:a2:be:1e:65:df:48:cd:eb:6e:61:a8: 52:3b:f2:d9:08:4c:10:19:ad:db:1b:a7:85:5b:7b: 61:32:3a:b7:49:bd:98:bd:87:bf:59:f9:c2:76:ff: f1:0e:86:79:70:70:46:85:ee:9b:4a:57:99:5d:ce: e8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FB:53:C5:22:89:6B:E6:44:B3:5F:43:72:7B:C2:52:F2:22:40:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3b214d5-d800-3770-9574-001a0ddf16d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.44.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:23:ec:6f:53:21:41:85:eb:56:36:81:f6:0c:2e:cc:48:12: f8:e4:f8:d4:c6:37:29:a7:ae:45:60:ec:29:01:14:f3:cb:25: 03:94:49:ef:46:2d:37:62:a1:fd:a9:e1:46:04:95:f2:d8:0b: f2:6f:75:71:b5:fc:d7:30:19:9d:ef:fd:98:d9:e6:25:04:6f: 32:d0:13:7c:26:94:5f:65:f9:39:78:86:59:99:c5:9d:29:bd: 4a:d7:aa:20:2f:23:78:11:fc:dc:f6:b0:88:02:05:32:50:1d: 5b:d3:db:ac:39:f5:af:94:c8:a8:17:7f:7f:f3:91:6a:0a:20: c0:7a:8d:3f:f7:30:62:5c:81:90:fe:04:6f:c6:38:7a:0e:78: 8b:f1:24:fb:65:f4:88:29:45:c2:04:92:57:59:79:f7:fe:49: 8c:ee:0a:c1:38:0b:a2:cf:cb:b0:c8:d0:76:ba:18:ce:2f:14: ca:82:e9:43:be:6a:d7:c6:27:0e:ac:54:f4:eb:45:9f:fb:55: 60:64:fe:8f:3c:df:90:83:8d:91:23:81:09:b2:46:bf:6f:ac: 25:9b:35:cc:eb:cd:9e:ae:7d:8e:bf:c6:e1:35:87:fe:fa:f5: 8d:1e:97:1c:9e:28:f4:f8:2f:d2:0a:05:20:f3:5d:79:e3:69: df:60:d4:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBmi9llW4M3OgmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YWMyZDk2MTQtZGI0My00MjU3LWFmZWYtNjllYjEyZjcwMmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwlIpgGf5qFmHNMDzlmY3st5NaSqEgPC09M2 y8Rj8oFJivbcFMt7Pz69fibDVSWG+vNZ4CbdPmzOHirBQR/jNemTxs/Fpwioa4VU YeJQIvk7Znyvpm1t14WqBbjSzMJtGIBsxlwkv/pPB9dcW3KV7sfKxFP//N+0MaHh Khq5mgD9DSZg+LNcKK7o1LnnfYaY3/z+fzHH4tAhxdI/dkFOpw41ZcqWb6zbmsAV t5+cx0ZeQCSVbQvsYpMrTaJOTLb+EOng0NOyor4eZd9IzetuYahSO/LZCEwQGa3b G6eFW3thMjq3Sb2YvYe/WfnCdv/xDoZ5cHBGhe6bSleZXc7onwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPn7U8UiiWvmRLNfQ3J7wlLyIkBcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTNiMjE0ZDUtZDgwMC0z NzcwLTk1NzQtMDAxYTBkZGYxNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRyx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0j7G9TIUGF61Y2gfYMLsxIEvjk+NTGNymnrkVg7CkBFPPLJQOUSe9G LTdiof2p4UYElfLYC/JvdXG1/NcwGZ3v/ZjZ5iUEbzLQE3wmlF9l+Tl4hlmZxZ0p vUrXqiAvI3gR/Nz2sIgCBTJQHVvT26w59a+UyKgXf3/zkWoKIMB6jT/3MGJcgZD+ BG/GOHoOeIvxJPtl9IgpRcIEkldZeff+SYzuCsE4C6LPy7DI0Ha6GM4vFMqC6UO+ atfGJw6sVPTrRZ/7VWBk/o8835CDjZEjgQmyRr9vrCWbNczrzZ6ufY6/xuE1h/76 9Y0elxyeKPT4L9IKBSDzXXnjad9g1PE= -----END CERTIFICATE-----Generated at Sat Apr 5 03:48:45 2025 by rpki-client