$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36af8151-27ed-3eff-bdfd-dd5a5fc7f4c0.roa File: 36af8151-27ed-3eff-bdfd-dd5a5fc7f4c0.roa (raw, json) Hash identifier: TQKU+WL/D5SR0c7TaEo0j67GexkQYnRHIQLy3Cfpw2E= Subject key identifier: 72:4B:C8:97:6B:2D:F3:69:AA:7D:C2:B8:DE:BB:67:B7:00:D6:74:7A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B821E21111DB6C1434FAE14C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36af8151-27ed-3eff-bdfd-dd5a5fc7f4c0.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 30036 IP address blocks: 173.28.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:21:11:1d:b6:c1:43:4f:ae:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=43c08994-7ab8-42f4-8504-514ae5cd0f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:53:d0:ac:35:4c:2f:91:f8:b9:c4:bd:53:c2: 9c:f5:65:ed:6a:53:fd:18:ae:74:0f:2c:a5:76:1a: cf:93:df:4b:39:5e:46:66:6b:6b:b8:d7:fb:f8:e8: e7:9c:e8:d8:f3:1c:70:66:64:d7:70:9a:0d:af:db: 1b:10:69:e3:1a:39:1d:98:14:93:1a:9c:e9:c1:06: 14:e5:83:c3:4f:d0:70:d7:00:bb:5b:b0:3b:6c:d2: 78:e8:98:14:37:c7:fc:38:ff:44:7f:99:05:0f:40: 75:bc:25:0a:e5:55:e7:6f:8b:4e:77:49:17:ee:57: b2:d0:44:e6:0c:70:36:78:13:b3:23:28:d3:18:16: 08:d1:42:7e:7b:ab:aa:52:fd:ac:a0:6e:cf:dc:c1: 11:d0:bc:43:ce:15:dc:0b:03:6f:84:9d:aa:52:35: 23:45:e6:ce:81:d8:df:26:67:33:95:57:d0:79:fb: ce:83:ee:98:d1:f3:2d:68:97:15:74:ed:52:f3:c4: 63:b5:72:58:31:cb:65:10:cb:78:8c:70:4a:21:66: 61:ad:df:a7:57:c6:00:ea:ce:45:38:45:9c:2c:f6: 3d:e5:f4:90:5d:16:1b:7e:93:75:bb:8c:7f:54:3f: 5f:5c:4c:f7:c6:a3:eb:cb:07:ac:e4:58:27:8d:cf: 2a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4B:C8:97:6B:2D:F3:69:AA:7D:C2:B8:DE:BB:67:B7:00:D6:74:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36af8151-27ed-3eff-bdfd-dd5a5fc7f4c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:8f:c3:d0:20:c7:a1:24:9c:ee:cd:7e:1d:e2:7d:23:d7:08: d7:04:55:99:1c:01:57:c7:59:d5:32:b4:09:ea:cf:9b:6b:a4: 64:d9:9b:5f:26:17:5a:67:50:53:5d:3d:b2:d4:ad:d0:22:c2: d3:bd:ec:6d:94:9e:20:4b:75:e3:f6:47:09:9f:3b:c5:21:34: 4c:18:c0:c6:21:6d:aa:b3:2d:d5:81:0b:9d:50:09:78:f1:3a: 13:1b:c1:4c:d8:cf:e9:0c:32:88:ff:ea:fb:1c:01:35:be:46: 71:fb:83:7c:e3:90:9e:09:e7:d6:d0:69:89:e6:c3:bc:a6:95: de:1d:e8:0e:a6:8b:18:ee:e0:66:23:1d:34:b8:75:5b:7a:19: 20:49:c0:23:41:e0:a4:d0:f4:0d:ee:99:da:62:b1:09:15:1d: 73:75:bf:c1:04:ae:b6:f0:10:3d:35:25:6d:da:12:7d:79:f6: d3:cb:88:18:c9:25:2d:4e:2a:3f:d7:63:ee:82:6d:04:d6:8a: 6c:03:74:05:00:2a:4f:28:5a:6b:54:ea:e5:16:1b:52:8a:de: 9b:e8:82:6e:37:d0:8a:6c:cd:cc:e9:75:cc:d8:ba:56:a6:6f: 54:72:5c:dc:a7:47:66:2a:0f:ea:86:b4:7a:53:c4:29:16:1f: 96:ef:7d:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHiERHbbBQ0+uFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NDNjMDg5OTQtN2FiOC00MmY0LTg1MDQtNTE0YWU1Y2QwZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFPQrDVML5H4ucS9U8Kc9WXtalP9GK50Dyyl dhrPk99LOV5GZmtruNf7+OjnnOjY8xxwZmTXcJoNr9sbEGnjGjkdmBSTGpzpwQYU 5YPDT9Bw1wC7W7A7bNJ46JgUN8f8OP9Ef5kFD0B1vCUK5VXnb4tOd0kX7ley0ETm DHA2eBOzIyjTGBYI0UJ+e6uqUv2soG7P3MER0LxDzhXcCwNvhJ2qUjUjRebOgdjf JmczlVfQefvOg+6Y0fMtaJcVdO1S88RjtXJYMctlEMt4jHBKIWZhrd+nV8YA6s5F OEWcLPY95fSQXRYbfpN1u4x/VD9fXEz3xqPrywes5Fgnjc8q4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJLyJdrLfNpqn3CuN67Z7cA1nR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzZhZjgxNTEtMjdlZC0z ZWZmLWJkZmQtZGQ1YTVmYzdmNGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRz4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqPw9Agx6EknO7Nfh3ifSPXCNcEVZkcAVfHWdUytAnqz5trpGTZm18m F1pnUFNdPbLUrdAiwtO97G2UniBLdeP2RwmfO8UhNEwYwMYhbaqzLdWBC51QCXjx OhMbwUzYz+kMMoj/6vscATW+RnH7g3zjkJ4J59bQaYnmw7ymld4d6A6mixju4GYj HTS4dVt6GSBJwCNB4KTQ9A3umdpisQkVHXN1v8EErrbwED01JW3aEn159tPLiBjJ JS1OKj/XY+6CbQTWimwDdAUAKk8oWmtU6uUWG1KK3pvogm430IpszczpdczYulam b1RyXNynR2YqD+qGtHpTxCkWH5bvfQg= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:48 2025 by rpki-client