$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/647b37b1-ca37-35c8-9e68-13481963a385.roa File: 647b37b1-ca37-35c8-9e68-13481963a385.roa (raw, json) Hash identifier: TkOXdczv7FZgENUvg2rtutgquoy4XixZGedCaeA70j4= Subject key identifier: 4B:F6:2A:10:C0:06:0D:E4:02:3D:C0:81:55:4E:90:66:75:0B:7E:41 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF8FE7DD094AB72163B400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/647b37b1-ca37-35c8-9e68-13481963a385.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.25.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:8f:e7:dd:09:4a:b7:21:63:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=dfd0d7e3-0ea4-4e4e-8c69-bf83f5f24137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:84:9a:9a:f3:04:22:ec:11:43:09:27:3f:93: af:53:5a:6f:ac:44:a5:11:24:5e:84:25:b9:b3:9a: eb:4d:93:a3:36:e8:dc:c2:86:26:85:e7:cc:12:28: 7f:d4:0a:84:97:3b:ec:54:70:48:71:ed:58:ce:ce: 37:dc:91:82:37:17:da:fd:7d:b2:6f:e9:cd:56:e2: cf:32:9c:57:ce:57:5f:d0:63:ee:17:92:d5:1d:03: 38:58:f2:fe:9a:97:a0:00:47:f2:44:2b:4b:f6:7a: 66:f5:df:90:70:c2:b1:e1:28:96:4b:24:dd:ca:f1: 1d:3e:39:6c:91:4e:6d:14:29:9d:56:83:16:cd:b0: 8e:21:a2:e3:7b:46:4d:3d:8f:66:48:a0:2f:bb:80: b9:8f:a1:76:97:5d:52:1c:ec:48:2e:1f:56:e1:5a: 43:2a:b8:58:30:ea:b9:77:3d:ee:4d:42:ce:67:1b: 3d:fd:a8:48:58:b5:9a:6a:5d:5d:73:91:eb:1b:a0: 85:31:93:a1:48:e0:8f:a9:8e:2e:45:d0:72:f3:3c: e2:ba:3e:2e:94:1c:38:d9:ee:45:c1:89:65:94:6c: 76:3a:01:ed:f6:ab:34:7f:48:66:d6:f7:15:5b:24: 77:fd:47:38:ae:90:cb:e9:7b:e4:26:39:d4:51:90: e4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F6:2A:10:C0:06:0D:E4:02:3D:C0:81:55:4E:90:66:75:0B:7E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/647b37b1-ca37-35c8-9e68-13481963a385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:de:e5:a1:99:37:76:be:6b:a9:7b:f0:f4:c2:a8:49:e1:02: 23:99:78:3c:b8:84:3c:1a:ee:a8:49:05:2f:b9:2b:68:2d:40: e1:c6:da:e0:a4:92:cb:c5:11:65:f0:6c:7c:75:e6:e2:9c:1f: 19:52:a9:bb:a0:de:14:c1:26:9d:73:42:b6:24:7e:03:5a:33: c4:6b:c1:81:21:94:18:8b:62:d0:8f:29:02:26:93:51:7b:37: 2e:64:a4:7b:d2:8e:4f:92:77:d7:44:c6:42:ff:b4:d8:be:72: 99:20:d8:2c:3d:e9:06:e1:f6:0c:45:aa:77:1c:c8:92:47:d0: 4c:d7:79:26:60:a6:5d:a7:6a:9f:73:b1:8c:88:54:dc:d8:91: 80:d2:b8:cb:44:ab:ec:21:3c:66:dd:c4:d5:3d:61:71:6d:90: 29:74:a2:37:5b:d5:a8:70:fe:70:5a:df:23:25:bc:c6:e3:35: 74:b4:13:78:64:68:d1:13:32:fa:5b:7a:93:53:b2:a2:3f:9e: ff:4f:f6:76:4c:63:10:25:37:48:4b:5d:5e:79:8d:74:a1:d6: a7:f5:46:c7:04:b2:4c:7b:2d:8c:72:9c:96:de:8d:aa:61:d1: 80:fe:ca:0c:3d:84:ff:07:43:1f:97:a0:de:d2:76:ec:49:98: bf:30:6b:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k34/n3QlKtyFjtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGZkMGQ3ZTMtMGVhNC00ZTRlLThjNjktYmY4M2Y1ZjI0MTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkISamvMEIuwRQwknP5OvU1pvrESlESRehCW5 s5rrTZOjNujcwoYmhefMEih/1AqElzvsVHBIce1Yzs433JGCNxfa/X2yb+nNVuLP MpxXzldf0GPuF5LVHQM4WPL+mpegAEfyRCtL9npm9d+QcMKx4SiWSyTdyvEdPjls kU5tFCmdVoMWzbCOIaLje0ZNPY9mSKAvu4C5j6F2l11SHOxILh9W4VpDKrhYMOq5 dz3uTULOZxs9/ahIWLWaal1dc5HrG6CFMZOhSOCPqY4uRdBy8zziuj4ulBw42e5F wYlllGx2OgHt9qs0f0hm1vcVWyR3/Uc4rpDL6XvkJjnUUZDkNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEv2KhDABg3kAj3AgVVOkGZ1C35BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjQ3YjM3YjEtY2EzNy0z NWM4LTllNjgtMTM0ODE5NjNhMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRklMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3e5aGZN3a+a6l78PTCqEnhAiOZeDy4hDwa7qhJBS+5K2gtQOHG2uCk ksvFEWXwbHx15uKcHxlSqbug3hTBJp1zQrYkfgNaM8RrwYEhlBiLYtCPKQImk1F7 Ny5kpHvSjk+Sd9dExkL/tNi+cpkg2Cw96Qbh9gxFqnccyJJH0EzXeSZgpl2nap9z sYyIVNzYkYDSuMtEq+whPGbdxNU9YXFtkCl0ojdb1ahw/nBa3yMlvMbjNXS0E3hk aNETMvpbepNTsqI/nv9P9nZMYxAlN0hLXV55jXSh1qf1RscEskx7LYxynJbejaph 0YD+ygw9hP8HQx+XoN7SduxJmL8wa0A= -----END CERTIFICATE-----Generated at Thu Mar 26 10:59:01 2026 by rpki-client