$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/647b37b1-ca37-35c8-9e68-13481963a385.roa File: 647b37b1-ca37-35c8-9e68-13481963a385.roa (raw, json) Hash identifier: VqsIMDjpj2u+tIihg3v5iHM9TdeoYH+CR6iVyt50scw= Subject key identifier: 77:03:B5:A7:A8:CA:BF:74:8E:97:98:1A:CB:C1:86:DC:E0:8C:02:B8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA44CD70A67884E5433B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/647b37b1-ca37-35c8-9e68-13481963a385.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:44:cd:70:a6:78:84:e5:43:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=40172391-e160-4fb9-97e7-852c064f63ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:32:d9:74:4e:76:6e:e1:8d:da:33:eb:3e: c6:5d:d8:40:cd:be:e4:b6:0c:81:58:03:06:95:b1: 17:26:be:4f:32:1f:27:e6:86:d1:1f:f6:63:e5:71: 24:17:ac:b0:32:12:76:a5:6e:4e:94:19:dd:bd:a6: 7d:25:94:d1:59:62:73:7b:fb:13:ca:36:eb:ae:f6: 92:59:5f:4a:33:dc:11:20:24:69:6b:ad:5b:83:e9: bd:2a:3d:87:77:f2:a3:a7:f8:29:75:4c:67:98:84: 14:9b:e8:62:ee:ea:5c:83:23:38:11:05:c2:d9:41: db:26:98:c8:cf:8e:88:40:21:ed:e4:48:f7:fa:99: b8:63:74:5c:dd:ed:fd:83:5e:ce:da:4e:5e:8d:c6: 9f:8c:5b:c7:75:02:59:e4:00:2a:ee:99:fa:68:85: fe:53:47:c6:e8:4e:60:af:3e:eb:19:51:50:76:92: 71:a7:3c:a5:26:f3:2d:4d:54:a4:fe:4b:5c:a6:31: 8d:d2:30:de:ef:bf:a9:39:2f:a2:40:ca:c2:90:6a: 61:c3:ab:ae:a6:e1:f7:66:ae:7d:23:9a:00:a7:c0: 36:0a:2f:70:f0:af:cb:ab:d9:19:aa:10:6a:40:93: f4:39:d7:35:db:b6:74:b0:8d:6a:96:e6:f9:76:bf: 4d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:03:B5:A7:A8:CA:BF:74:8E:97:98:1A:CB:C1:86:DC:E0:8C:02:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/647b37b1-ca37-35c8-9e68-13481963a385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:62:1b:d5:f3:3f:6c:22:73:72:3d:5d:4b:c8:7e:f4:ef:7b: 51:4a:ba:a1:24:c0:c9:45:20:40:93:25:29:e5:8d:81:63:47: 4e:a0:7a:27:74:2f:65:cd:79:18:25:c1:52:47:93:ba:99:22: 40:d3:32:cc:cd:3f:da:6a:e0:09:5a:cc:8f:e7:cf:4a:f4:e5: 1e:ce:81:0b:d0:ed:38:88:9d:de:27:25:8b:11:ee:1b:b5:19: 12:2a:16:3e:32:2d:b6:cf:5d:72:84:cf:9e:c3:23:7f:51:b6: f0:aa:20:0f:aa:46:c2:34:71:dc:44:3e:1d:7e:dd:05:52:b5: cb:43:72:84:0b:c1:68:1b:c6:31:ed:d8:c6:ce:55:de:ca:9c: 74:63:5c:8f:d4:66:c4:2e:e0:cd:b6:3f:66:46:86:63:17:30: 94:97:fb:0c:ff:d9:75:38:46:40:18:c9:f2:a9:db:26:41:78: 7b:52:ce:d6:9c:db:38:34:c5:71:39:95:8f:99:50:49:61:e2: 2f:85:56:96:1b:06:e1:12:6b:e8:77:a9:23:54:46:8c:43:9b: 1e:2a:37:5c:65:6f:7f:df:5f:0f:e0:e7:b5:05:06:a9:f0:f7: 8d:68:3e:eb:76:00:b4:d9:1b:d8:8e:c9:26:92:d4:5a:42:21: d6:9d:37:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukTNcKZ4hOVDO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDAxNzIzOTEtZTE2MC00ZmI5LTk3ZTctODUyYzA2NGY2M2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/ky2XROdm7hjdoz6z7GXdhAzb7ktgyBWAMG lbEXJr5PMh8n5obRH/Zj5XEkF6ywMhJ2pW5OlBndvaZ9JZTRWWJze/sTyjbrrvaS WV9KM9wRICRpa61bg+m9Kj2Hd/Kjp/gpdUxnmIQUm+hi7upcgyM4EQXC2UHbJpjI z46IQCHt5Ej3+pm4Y3Rc3e39g17O2k5ejcafjFvHdQJZ5AAq7pn6aIX+U0fG6E5g rz7rGVFQdpJxpzylJvMtTVSk/ktcpjGN0jDe77+pOS+iQMrCkGphw6uupuH3Zq59 I5oAp8A2Ci9w8K/Lq9kZqhBqQJP0Odc127Z0sI1qlub5dr9NRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcDtaeoyr90jpeYGsvBhtzgjAK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjQ3YjM3YjEtY2EzNy0z NWM4LTllNjgtMTM0ODE5NjNhMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRklMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhiG9XzP2wic3I9XUvIfvTve1FKuqEkwMlFIECTJSnljYFjR06geid0 L2XNeRglwVJHk7qZIkDTMszNP9pq4AlazI/nz0r05R7OgQvQ7TiInd4nJYsR7hu1 GRIqFj4yLbbPXXKEz57DI39RtvCqIA+qRsI0cdxEPh1+3QVStctDcoQLwWgbxjHt 2MbOVd7KnHRjXI/UZsQu4M22P2ZGhmMXMJSX+wz/2XU4RkAYyfKp2yZBeHtSztac 2zg0xXE5lY+ZUElh4i+FVpYbBuESa+h3qSNURoxDmx4qN1xlb3/fXw/g57UFBqnw 941oPut2ALTZG9iOySaS1FpCIdadNyA= -----END CERTIFICATE-----Generated at Sat Apr 26 21:02:39 2025 by rpki-client