$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8e78436-e696-38eb-918c-9aaf893d3717.roa File: a8e78436-e696-38eb-918c-9aaf893d3717.roa (raw, json) Hash identifier: QkAwfUtmNRvj5HesBqMMSYYoLFLbJwI6gG3q9F7Gvgw= Subject key identifier: E5:ED:9D:63:9B:BE:E8:33:8E:36:82:2D:0A:E3:30:29:97:94:B9:AB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584986C5BE28C22AC724B3330280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8e78436-e696-38eb-918c-9aaf893d3717.roa Signing time: Mon 14 Apr 2025 19:30:34 +0000 ROA not before: Mon 14 Apr 2025 19:30:34 +0000 ROA not after: Sun 13 Jul 2025 19:30:34 +0000 asID: 19905 IP address blocks: 173.25.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:c5:be:28:c2:2a:c7:24:b3:33:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 14 19:30:34 2025 GMT Not After : Jul 13 19:30:34 2025 GMT Subject: CN=f8567546-c627-4f7b-878d-b27dfd1bdf73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:e5:72:20:53:c4:ef:f7:1e:02:da:11:82: 9b:4d:02:63:06:68:83:b6:65:b2:27:dc:22:c1:2b: 4f:92:4a:79:a2:09:11:9e:42:35:57:79:9f:89:7f: a3:e6:ef:14:90:58:45:3d:3d:af:3b:ec:87:ce:43: 49:91:23:99:cb:08:c0:51:66:10:62:15:f4:36:2d: a7:5f:3d:8b:fe:88:9f:57:76:2c:69:a2:b1:2c:5c: 07:a9:c3:b7:b4:40:18:1f:8c:12:d4:c1:ee:e7:94: d1:90:01:46:5a:68:14:01:f0:2b:3a:63:03:e1:4b: 2d:99:e8:05:0f:a1:dc:53:9e:3a:59:98:b7:1b:85: f2:88:a1:c1:4d:39:1f:1f:0b:0f:6d:e3:84:a5:38: 92:93:c6:cc:39:8b:a8:2d:9b:e7:50:2a:33:4d:af: ab:22:7e:99:86:66:09:0a:4b:60:78:12:e0:de:d5: 21:96:05:73:1b:d2:d6:3f:bd:a0:51:b6:67:ce:ed: c5:f2:1a:e7:ea:f8:f0:39:ac:91:e0:8b:11:a5:3d: 10:d6:06:d8:b3:a2:0a:7a:f7:62:ad:07:9c:4f:14: 7c:08:05:93:bb:97:af:20:b3:ae:2b:bd:c7:2e:66: 68:88:f1:11:b5:69:bc:93:9c:a4:0b:d4:cd:01:b4: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:ED:9D:63:9B:BE:E8:33:8E:36:82:2D:0A:E3:30:29:97:94:B9:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8e78436-e696-38eb-918c-9aaf893d3717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:62:28:d6:48:ca:f9:6b:f0:59:c8:e5:af:a6:79:93:08:a5: af:82:8c:cf:83:42:37:04:6d:2b:3e:1f:9a:fd:62:a5:23:11: a3:3a:5e:83:5c:58:cf:cc:8d:87:fb:f8:1e:98:dd:d4:d4:7a: f7:be:ff:15:5e:1b:3b:15:2c:e9:3f:a1:b2:35:28:6d:d8:22: ed:20:5d:28:13:66:fb:41:1e:a4:62:a7:21:a0:c1:31:1a:23: 9a:1c:00:29:cc:d8:ab:80:81:49:12:3f:5f:c8:31:c8:55:0c: b3:dd:55:10:94:92:8a:a7:30:56:40:8e:2d:e0:7b:52:3b:b2: 4a:6b:00:ae:1c:2a:d8:04:6a:a3:10:13:58:33:96:25:37:9d: 2e:e1:61:87:9d:33:cc:1f:fe:36:3c:53:ae:f4:82:67:e0:40: a9:51:78:09:b5:fa:86:45:4a:8f:66:50:0d:be:9d:b6:2d:86: 45:68:92:7c:43:2e:f6:b8:cc:63:3f:83:7f:67:94:bb:2b:a3: b3:04:df:dd:5f:53:74:3b:e8:3c:93:68:45:71:ec:8b:e9:7a: 24:af:b0:06:87:f0:1c:2f:a8:02:0c:a0:eb:de:82:b6:6b:5d: d1:62:cb:dc:e2:8a:29:97:00:2a:97:7f:a6:c9:47:9b:e1:b7: 9a:4b:6f:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGxb4owirHJLMzAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQxNDE5MzAzNFoXDTI1MDcxMzE5MzAzNFowLzEtMCsGA1UEAxMk Zjg1Njc1NDYtYzYyNy00ZjdiLTg3OGQtYjI3ZGZkMWJkZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFflciBTxO/3HgLaEYKbTQJjBmiDtmWyJ9wi wStPkkp5ogkRnkI1V3mfiX+j5u8UkFhFPT2vO+yHzkNJkSOZywjAUWYQYhX0Ni2n Xz2L/oifV3YsaaKxLFwHqcO3tEAYH4wS1MHu55TRkAFGWmgUAfArOmMD4UstmegF D6HcU546WZi3G4XyiKHBTTkfHwsPbeOEpTiSk8bMOYuoLZvnUCozTa+rIn6ZhmYJ CktgeBLg3tUhlgVzG9LWP72gUbZnzu3F8hrn6vjwOayR4IsRpT0Q1gbYs6IKevdi rQecTxR8CAWTu5evILOuK73HLmZoiPERtWm8k5ykC9TNAbTFAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXtnWObvugzjjaCLQrjMCmXlLmrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYThlNzg0MzYtZTY5Ni0z OGViLTkxOGMtOWFhZjg5M2QzNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFiKNZIyvlr8FnI5a+meZMIpa+CjM+DQjcEbSs+H5r9YqUjEaM6XoNc WM/MjYf7+B6Y3dTUeve+/xVeGzsVLOk/obI1KG3YIu0gXSgTZvtBHqRipyGgwTEa I5ocACnM2KuAgUkSP1/IMchVDLPdVRCUkoqnMFZAji3ge1I7skprAK4cKtgEaqMQ E1gzliU3nS7hYYedM8wf/jY8U670gmfgQKlReAm1+oZFSo9mUA2+nbYthkVoknxD Lva4zGM/g39nlLsro7ME391fU3Q76DyTaEVx7IvpeiSvsAaH8BwvqAIMoOvegrZr XdFiy9ziiimXACqXf6bJR5vht5pLbzc= -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:13 2025 by rpki-client