$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40bd5abb-2dfc-3116-969f-be9777f07963.roa File: 40bd5abb-2dfc-3116-969f-be9777f07963.roa (raw, json) Hash identifier: WTHy5J7AECQgvzf1tv6beOcrBgmF48P99CPiDkAxp/A= Subject key identifier: 99:FF:3B:10:9F:80:1E:71:88:C0:37:B8:36:DC:9F:0C:B6:63:0D:21 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1E28DB4DCDC74B0EA5800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40bd5abb-2dfc-3116-969f-be9777f07963.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 73.30.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:e2:8d:b4:dc:dc:74:b0:ea:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=478f8b77-5429-4f82-a496-103c0440d159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:79:f1:21:e0:74:28:72:a2:12:2c:40:37:d4: 9b:0a:57:e8:77:d8:7c:c3:80:0d:e1:e8:82:c5:28: aa:32:ff:33:5c:46:aa:b6:b5:3b:e9:ec:3f:45:19: 59:8a:16:92:69:cf:9a:dc:7f:ed:fd:6f:12:df:5d: f0:d3:ae:49:15:35:85:fb:38:c8:14:88:d1:73:9b: b5:a6:5d:13:c8:69:16:07:83:70:d5:55:c8:42:3c: d6:73:36:61:41:19:19:64:a7:3c:63:9c:2f:2a:47: 86:b5:ca:62:c2:7e:83:cd:ca:08:bf:01:84:71:d0: 2a:88:21:a9:c3:2b:e1:dd:ed:78:18:39:12:5a:bf: 7b:f0:15:f2:67:c9:64:a0:78:7a:5b:29:d6:0a:e5: e4:d8:f0:42:44:d0:35:0f:60:4e:10:cf:5f:a8:c9: c2:5f:60:14:e5:fc:9b:ca:de:4d:6b:02:79:f0:0c: d4:67:16:4f:36:4c:f1:36:11:05:f5:a7:21:72:8a: b7:75:cb:c6:de:00:a4:25:e4:7b:42:c0:c7:fb:96: a9:c5:d2:32:82:f2:97:45:ac:ba:c9:95:0f:f5:ba: 26:4c:12:6d:78:17:06:59:b4:0e:47:fe:1b:4f:b7: f8:ed:48:ce:27:45:31:2e:29:ec:4f:7c:09:59:5c: d6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FF:3B:10:9F:80:1E:71:88:C0:37:B8:36:DC:9F:0C:B6:63:0D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40bd5abb-2dfc-3116-969f-be9777f07963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.30.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:72:f8:44:0b:6f:60:12:61:98:24:4e:d1:b0:92:a5:1c:3b: c1:ee:4b:26:a6:17:05:2d:ee:96:fd:e1:66:d5:82:95:17:a3: 80:8c:fd:23:d1:ed:a3:99:05:34:cd:d5:7f:47:0d:38:75:78: c9:49:82:fb:c0:92:df:4d:3b:68:95:74:cf:9b:f0:42:b7:ee: 6a:67:70:0a:d3:b7:72:74:9d:3e:a8:c0:72:ad:ca:99:b8:42: b7:4c:a2:ee:81:8d:84:22:a8:c9:7c:d4:6e:cf:16:c2:75:85: d8:37:b3:7a:f5:b1:cd:60:84:15:61:c7:2b:be:96:62:7a:8b: 96:2c:ff:7f:0b:fd:61:f1:bd:4b:fb:50:42:7b:f9:4b:03:1d: 38:3e:3e:eb:ca:f2:a7:29:27:63:bb:50:6e:76:48:fc:8a:b0: b2:f1:c3:60:fc:5c:1d:1d:95:7e:70:a6:c2:e5:2c:16:64:5e: 67:01:51:ff:a2:8e:0b:d3:d8:d6:94:ff:de:de:62:b0:32:86: ef:a4:51:5e:87:ff:3c:c1:86:d4:5e:4f:d6:35:17:6b:ad:71: 58:1b:7f:7e:44:d1:00:fa:3a:ab:23:9c:7e:21:4c:46:1f:8f: a9:c0:4f:db:af:6f:a9:4c:e9:22:64:85:0a:fa:db:1b:cb:7f: 95:e4:e3:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsweKNtNzcdLDqWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDc4ZjhiNzctNTQyOS00ZjgyLWE0OTYtMTAzYzA0NDBkMTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXnxIeB0KHKiEixAN9SbClfod9h8w4AN4eiC xSiqMv8zXEaqtrU76ew/RRlZihaSac+a3H/t/W8S313w065JFTWF+zjIFIjRc5u1 pl0TyGkWB4Nw1VXIQjzWczZhQRkZZKc8Y5wvKkeGtcpiwn6DzcoIvwGEcdAqiCGp wyvh3e14GDkSWr978BXyZ8lkoHh6WynWCuXk2PBCRNA1D2BOEM9fqMnCX2AU5fyb yt5NawJ58AzUZxZPNkzxNhEF9achcoq3dcvG3gCkJeR7QsDH+5apxdIygvKXRay6 yZUP9bomTBJteBcGWbQOR/4bT7f47UjOJ0UxLinsT3wJWVzWZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn/OxCfgB5xiMA3uDbcnwy2Yw0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBiZDVhYmItMmRmYy0z MTE2LTk2OWYtYmU5Nzc3ZjA3OTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSR7KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZy+EQLb2ASYZgkTtGwkqUcO8HuSyamFwUt7pb94WbVgpUXo4CM/SPR 7aOZBTTN1X9HDTh1eMlJgvvAkt9NO2iVdM+b8EK37mpncArTt3J0nT6owHKtypm4 QrdMou6BjYQiqMl81G7PFsJ1hdg3s3r1sc1ghBVhxyu+lmJ6i5Ys/38L/WHxvUv7 UEJ7+UsDHTg+PuvK8qcpJ2O7UG52SPyKsLLxw2D8XB0dlX5wpsLlLBZkXmcBUf+i jgvT2NaU/97eYrAyhu+kUV6H/zzBhtReT9Y1F2utcVgbf35E0QD6OqsjnH4hTEYf j6nAT9uvb6lM6SJkhQr62xvLf5Xk42o= -----END CERTIFICATE-----Generated at Sun Aug 24 01:25:32 2025 by rpki-client