$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af1e3040-2ce4-30ca-80a6-41e2ad73d401.roa File: af1e3040-2ce4-30ca-80a6-41e2ad73d401.roa (raw, json) Hash identifier: j7mtidE0vDVN8qgDlwr2OafWREpnq7PcD9GHCbsj3p4= Subject key identifier: B5:D3:EC:F8:96:9E:A8:B0:19:46:CA:74:43:E5:0E:85:89:85:2F:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C05ECE2CCB58B37C0959EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af1e3040-2ce4-30ca-80a6-41e2ad73d401.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33287 IP address blocks: 73.30.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:ec:e2:cc:b5:8b:37:c0:95:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=ab545b45-d557-4448-b5ad-6c4e3469e762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:1a:c1:5c:11:c0:17:0b:64:81:44:8b:a9: df:45:2b:75:a9:33:6e:9c:ac:4a:e5:96:3e:8a:83: 7e:ca:f7:e6:00:0a:7b:79:9b:e5:24:e7:98:78:5c: 34:3e:9e:51:9f:63:d9:23:40:10:b7:14:b4:0b:9b: 64:5e:fa:4b:d3:2e:f5:92:ab:83:e6:65:a1:c4:65: 66:f4:1c:78:d6:47:62:f5:58:01:af:73:6a:b4:8f: 64:c8:ff:43:1b:fa:de:6f:db:64:86:ee:4a:83:0c: 94:1c:31:66:03:7e:5d:ff:c4:18:c3:42:5d:f6:9a: 47:ba:24:66:a6:52:09:03:7c:b0:69:4c:a1:31:81: 8e:81:ec:74:f8:e0:ec:52:db:da:a8:71:c4:1a:a9: 35:4d:a4:30:42:34:d1:56:84:9b:5e:83:6b:7e:d9: 0f:cc:12:cb:bd:50:e7:ef:dc:2a:51:34:89:e3:c3: 7b:6a:97:72:4e:50:54:49:e0:c4:59:44:59:b4:b0: 84:97:e8:86:15:1b:ea:66:a2:72:34:51:7e:4b:2e: 0a:f3:ac:4c:2f:85:95:f4:bc:40:1c:e8:16:41:90: 30:ad:a8:41:80:75:05:8e:18:df:c5:7e:64:02:e9: 2a:33:a2:31:35:34:c1:70:1d:ee:54:55:03:3b:b3: db:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D3:EC:F8:96:9E:A8:B0:19:46:CA:74:43:E5:0E:85:89:85:2F:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af1e3040-2ce4-30ca-80a6-41e2ad73d401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.30.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:7a:f5:70:e8:a7:5e:d8:b2:60:52:cb:5b:f5:08:c9:a2:9c: fd:2e:b7:14:76:e1:7e:11:7e:64:a7:82:b7:a9:9f:1f:33:da: c9:60:17:44:8a:ba:c2:57:cb:cd:63:2d:c4:17:73:e7:ac:65: 9f:33:29:b7:31:e1:ff:4e:cf:9f:6c:fb:53:f7:78:28:03:c5: cd:77:1b:5a:c8:01:e9:95:b2:2a:7d:49:1a:ee:f3:da:33:ee: 43:6c:0f:93:f0:30:c3:7c:90:f9:3d:44:24:7e:48:89:af:b7: e8:b5:ce:8a:24:ca:fa:5a:21:a3:b5:8a:f5:58:ec:1b:ef:0b: 07:a3:87:c9:fb:fe:b3:a6:4e:88:0c:28:6e:f8:a8:22:cd:04: 3d:62:23:28:1b:35:65:45:b8:e3:83:d6:d4:4a:98:0f:b3:eb: 80:0c:b4:66:c4:c0:76:6c:59:e0:fd:7a:27:5a:39:8f:6d:48: f9:af:a1:72:d4:56:c9:ba:fe:97:55:4b:42:ac:41:87:69:21: 44:ea:9a:9c:0e:89:62:82:4a:28:f7:f7:e6:16:2a:0e:fc:3e: b8:c5:a4:a8:9a:08:aa:52:7a:59:82:a4:1f:5f:85:55:fb:aa: ce:22:30:d2:48:ce:72:2b:a7:56:af:35:86:f2:6d:e7:b1:e4: 60:31:35:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBezizLWLN8CVnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YWI1NDViNDUtZDU1Ny00NDQ4LWI1YWQtNmM0ZTM0NjllNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi0awVwRwBcLZIFEi6nfRSt1qTNunKxK5ZY+ ioN+yvfmAAp7eZvlJOeYeFw0Pp5Rn2PZI0AQtxS0C5tkXvpL0y71kquD5mWhxGVm 9Bx41kdi9VgBr3NqtI9kyP9DG/reb9tkhu5KgwyUHDFmA35d/8QYw0Jd9ppHuiRm plIJA3ywaUyhMYGOgex0+ODsUtvaqHHEGqk1TaQwQjTRVoSbXoNrftkPzBLLvVDn 79wqUTSJ48N7apdyTlBUSeDEWURZtLCEl+iGFRvqZqJyNFF+Sy4K86xML4WV9LxA HOgWQZAwrahBgHUFjhjfxX5kAukqM6IxNTTBcB3uVFUDO7PbZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXT7PiWnqiwGUbKdEPlDoWJhS/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWYxZTMwNDAtMmNlNC0z MGNhLTgwYTYtNDFlMmFkNzNkNDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSR5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF69XDop17YsmBSy1v1CMminP0utxR24X4RfmSngrepnx8z2slgF0SK usJXy81jLcQXc+esZZ8zKbcx4f9Oz59s+1P3eCgDxc13G1rIAemVsip9SRru89oz 7kNsD5PwMMN8kPk9RCR+SImvt+i1zookyvpaIaO1ivVY7BvvCwejh8n7/rOmTogM KG74qCLNBD1iIygbNWVFuOOD1tRKmA+z64AMtGbEwHZsWeD9eidaOY9tSPmvoXLU Vsm6/pdVS0KsQYdpIUTqmpwOiWKCSij39+YWKg78PrjFpKiaCKpSelmCpB9fhVX7 qs4iMNJIznIrp1avNYbybeex5GAxNYI= -----END CERTIFICATE-----Generated at Tue Jun 3 06:04:19 2025 by rpki-client