$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af502088-6eb3-305e-ba41-75d8d6f83b1d.roa File: af502088-6eb3-305e-ba41-75d8d6f83b1d.roa (raw, json) Hash identifier: a1qmRvHNAiYA3qDH5q3QaxJt2ryTA8MZ1StCv90YYNY= Subject key identifier: 13:3F:B4:65:0D:CF:AF:47:E0:31:56:05:D6:E4:72:8F:45:69:27:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C068FFEB890774758291700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af502088-6eb3-305e-ba41-75d8d6f83b1d.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 73.73.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:8f:fe:b8:90:77:47:58:29:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=38f13d77-78fc-418c-bbd5-ac197bd0c278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2b:1c:f9:4d:67:51:b4:bf:a7:21:3b:9e:a8: 5f:fb:88:c1:0a:a8:c9:27:9a:c2:04:61:79:8c:96: a8:90:38:50:bb:4c:b1:fc:d8:47:e8:c9:5e:b5:aa: 7a:6f:07:44:6d:f0:17:0d:f1:72:67:de:96:4a:99: 46:e0:53:d3:a1:c7:27:cb:a5:ac:bd:78:10:b4:a0: d8:43:41:ed:39:d7:7f:9c:2c:29:25:37:c1:39:ec: 2b:ec:9c:0e:39:f0:e7:a9:26:87:a4:d4:f4:3a:66: 08:16:1a:7f:a0:16:9b:67:01:57:98:e0:0b:fe:46: f1:ca:f0:0e:55:08:74:55:b8:57:36:29:8f:70:df: ba:39:f2:5a:52:aa:61:6b:9b:10:f6:ef:68:bc:06: 78:f8:50:f9:a6:ff:8e:9e:a3:b4:46:e5:d9:c3:b1: b5:0b:99:4f:02:04:dd:19:87:5e:a6:a4:cf:97:e3: 9f:13:a8:11:06:65:4a:63:8c:9e:1d:11:c8:b8:62: c2:e5:43:a5:d9:dd:11:f8:59:52:d3:d5:72:c3:2b: 08:26:8c:02:82:63:dc:20:fb:7b:98:7e:75:f7:b7: 8d:7d:89:49:d5:75:0c:2a:25:a0:3f:48:f7:99:13: 84:ed:e3:ca:45:0d:e0:c2:f2:82:e3:54:6b:9c:c6: 02:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3F:B4:65:0D:CF:AF:47:E0:31:56:05:D6:E4:72:8F:45:69:27:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af502088-6eb3-305e-ba41-75d8d6f83b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.73.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:84:43:3d:de:01:65:60:4a:07:0a:05:01:13:10:c5:e4:a8: d4:1f:3f:32:f6:60:8f:9c:cb:b0:e5:37:82:67:a0:ac:47:85: 13:68:3c:60:27:2f:85:b3:59:6a:d3:21:b9:6b:c8:e6:ae:d5: b1:0b:ba:8b:25:f8:e7:f7:78:0f:d4:63:ca:22:7c:79:1b:70: 12:d1:ce:d2:8a:24:6e:f0:30:a2:69:e5:ac:82:03:ce:12:c4: e5:73:6a:7d:e5:05:d2:61:7f:cf:9e:c6:88:f7:11:66:7f:5e: 66:e2:18:cd:58:6b:1a:d8:af:8c:04:72:82:ae:8a:95:35:10: 0a:35:6f:6a:6d:26:02:1f:07:b2:c6:36:8b:4c:8b:eb:c8:b4: ef:f6:01:9e:cb:e6:55:4d:0a:fc:57:c3:19:07:43:c2:d9:3c: 11:54:33:03:17:4c:3e:04:c7:c6:5b:ec:e5:3b:2e:ed:6c:d5: 70:02:55:9a:fa:97:aa:32:cf:1d:ad:c6:e6:a4:b9:05:7f:7d: dc:4e:a6:96:d1:cb:0d:b8:50:57:c2:d4:17:32:13:c5:24:eb: 9d:13:11:14:93:cb:50:e7:bd:d3:73:03:e3:06:01:3c:28:10: e9:34:bb:84:80:25:db:b9:6b:c9:11:fa:4e:2b:63:8a:b3:40: d7:b6:7e:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBo/+uJB3R1gpFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MzhmMTNkNzctNzhmYy00MThjLWJiZDUtYWMxOTdiZDBjMjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiysc+U1nUbS/pyE7nqhf+4jBCqjJJ5rCBGF5 jJaokDhQu0yx/NhH6Mletap6bwdEbfAXDfFyZ96WSplG4FPToccny6WsvXgQtKDY Q0HtOdd/nCwpJTfBOewr7JwOOfDnqSaHpNT0OmYIFhp/oBabZwFXmOAL/kbxyvAO VQh0VbhXNimPcN+6OfJaUqpha5sQ9u9ovAZ4+FD5pv+OnqO0RuXZw7G1C5lPAgTd GYdepqTPl+OfE6gRBmVKY4yeHRHIuGLC5UOl2d0R+FlS09VywysIJowCgmPcIPt7 mH5197eNfYlJ1XUMKiWgP0j3mROE7ePKRQ3gwvKC41RrnMYC8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBM/tGUNz69H4DFWBdbkco9FaSeRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY1MDIwODgtNmViMy0z MDVlLWJhNDEtNzVkOGQ2ZjgzYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSUksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOEQz3eAWVgSgcKBQETEMXkqNQfPzL2YI+cy7DlN4JnoKxHhRNoPGAn L4WzWWrTIblryOau1bELuosl+Of3eA/UY8oifHkbcBLRztKKJG7wMKJp5ayCA84S xOVzan3lBdJhf8+exoj3EWZ/XmbiGM1YaxrYr4wEcoKuipU1EAo1b2ptJgIfB7LG NotMi+vItO/2AZ7L5lVNCvxXwxkHQ8LZPBFUMwMXTD4Ex8Zb7OU7Lu1s1XACVZr6 l6oyzx2txuakuQV/fdxOppbRyw24UFfC1BcyE8Uk650TERSTy1DnvdNzA+MGATwo EOk0u4SAJdu5a8kR+k4rY4qzQNe2frA= -----END CERTIFICATE-----Generated at Tue Jul 1 22:30:07 2025 by rpki-client