$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36af8151-27ed-3eff-bdfd-dd5a5fc7f4c0.roa File: 36af8151-27ed-3eff-bdfd-dd5a5fc7f4c0.roa (raw, json) Hash identifier: el96PsDl5gEO6kaXzkrNZxW2AFKBdsLdWL+HxvS6Vn8= Subject key identifier: B3:28:98:5A:17:2F:FA:B3:75:B4:2F:67:0D:E1:C8:BF:DB:6B:BB:E4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D40CB9F0A53BDA70125E62E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36af8151-27ed-3eff-bdfd-dd5a5fc7f4c0.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 173.28.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9f:0a:53:bd:a7:01:25:e6:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=438d07d4-eb7c-40ea-a134-07704406c8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3c:e7:ea:07:58:fc:24:db:f5:1b:53:dc:08: 7c:b7:cb:d8:a4:95:af:b9:a8:97:56:3d:8d:7c:d4: 37:6e:04:c7:7a:01:0f:44:e5:9e:ed:fa:ae:06:98: c3:c4:ad:04:2b:7b:a5:5a:ae:68:d0:8b:9a:bb:3c: 99:75:6a:49:79:cc:29:0d:0e:ee:31:12:ca:7f:06: c6:d0:63:a1:13:bc:ba:2f:02:f9:ab:d9:ea:45:f8: e7:a7:48:7d:b7:d2:1e:ce:38:d0:cb:5b:e5:8b:b8: b8:b5:43:80:82:73:a3:78:6c:32:e2:a6:a4:3f:d5: 01:77:04:67:b0:82:a5:79:7f:1f:ad:07:64:80:be: 1f:af:a3:a1:8a:a0:ed:22:60:eb:d0:e3:0c:ab:fd: 44:1d:d8:6e:52:eb:f3:d0:58:6b:e0:bd:5d:4e:36: a8:c4:34:ec:b5:ab:9b:6f:7b:77:ca:70:48:cb:c5: 9c:95:09:0e:eb:35:f7:c2:2a:c5:ac:5e:cd:43:43: b4:90:db:91:fb:d2:da:ae:83:01:3a:56:37:8c:46: 5a:36:b9:e7:d4:10:ad:16:5e:30:56:69:47:a6:b4: e6:0f:8c:0e:d3:43:88:61:2f:94:ae:f6:b1:93:f1: 03:30:41:47:ac:37:f6:8b:80:3f:8d:71:eb:65:0c: b2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:28:98:5A:17:2F:FA:B3:75:B4:2F:67:0D:E1:C8:BF:DB:6B:BB:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36af8151-27ed-3eff-bdfd-dd5a5fc7f4c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:8e:e2:e5:8d:0b:a9:a9:57:e8:a6:e3:3d:1c:20:e6:ef:49: 29:6e:b7:f8:43:0b:25:5d:76:ec:97:da:98:d5:00:31:c0:0f: 83:c8:81:b5:db:5a:79:bd:93:d0:44:02:82:6a:f9:5f:47:5a: a8:42:1d:93:ba:ed:58:c8:89:16:c0:2a:06:af:ac:68:36:11: 52:61:c2:03:77:46:7d:b4:88:4f:87:88:7f:35:65:cc:8a:05: 62:e2:89:5e:ad:8c:56:60:9a:9c:9f:5c:ad:93:3e:d1:ff:70: 4c:9e:5b:80:88:a1:41:a6:92:34:57:a2:da:b1:f3:a2:8b:fa: 21:fc:fc:3f:07:fd:75:33:dc:56:90:5b:b1:77:52:fa:67:ac: 17:20:1b:7c:ff:14:a6:3c:7f:2b:2e:b0:12:2f:65:ab:d9:1a: 87:1d:f3:ab:a1:c6:63:67:43:9a:41:f6:79:bf:47:8f:1e:34: e1:fb:ca:a4:29:9a:88:4e:e4:2e:bf:f8:49:97:f6:0f:9d:83: 0f:78:1f:b7:42:32:1c:ce:ad:ad:1e:7c:83:48:d2:3a:d7:7b: 5c:2c:5f:7f:27:8f:70:6b:42:80:3e:de:e8:3c:42:bf:ab:a0: 12:b7:d4:9a:6a:55:70:bf:a5:9c:73:a5:71:b8:7c:22:2b:0a: d9:3f:a7:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay58KU72nASXmLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NDM4ZDA3ZDQtZWI3Yy00MGVhLWExMzQtMDc3MDQ0MDZjOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dzn6gdY/CTb9RtT3Ah8t8vYpJWvuaiXVj2N fNQ3bgTHegEPROWe7fquBpjDxK0EK3ulWq5o0IuauzyZdWpJecwpDQ7uMRLKfwbG 0GOhE7y6LwL5q9nqRfjnp0h9t9IezjjQy1vli7i4tUOAgnOjeGwy4qakP9UBdwRn sIKleX8frQdkgL4fr6OhiqDtImDr0OMMq/1EHdhuUuvz0Fhr4L1dTjaoxDTstaub b3t3ynBIy8WclQkO6zX3wirFrF7NQ0O0kNuR+9LaroMBOlY3jEZaNrnn1BCtFl4w VmlHprTmD4wO00OIYS+Urvaxk/EDMEFHrDf2i4A/jXHrZQyyRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMomFoXL/qzdbQvZw3hyL/ba7vkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzZhZjgxNTEtMjdlZC0z ZWZmLWJkZmQtZGQ1YTVmYzdmNGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRz4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuO4uWNC6mpV+im4z0cIObvSSlut/hDCyVdduyX2pjVADHAD4PIgbXb Wnm9k9BEAoJq+V9HWqhCHZO67VjIiRbAKgavrGg2EVJhwgN3Rn20iE+HiH81ZcyK BWLiiV6tjFZgmpyfXK2TPtH/cEyeW4CIoUGmkjRXotqx86KL+iH8/D8H/XUz3FaQ W7F3UvpnrBcgG3z/FKY8fysusBIvZavZGocd86uhxmNnQ5pB9nm/R48eNOH7yqQp mohO5C6/+EmX9g+dgw94H7dCMhzOra0efINI0jrXe1wsX38nj3BrQoA+3ug8Qr+r oBK31JpqVXC/pZxzpXG4fCIrCtk/p/k= -----END CERTIFICATE-----Generated at Thu Mar 26 11:29:28 2026 by rpki-client