$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2032b63b-c963-3cbe-8d6a-f8120714ad4a.roa File: 2032b63b-c963-3cbe-8d6a-f8120714ad4a.roa (raw, json) Hash identifier: BMIL4tONaZ5+i7DtrQGOYc61ubCWxzus9oZxyo+cXGo= Subject key identifier: 25:9E:0C:37:1C:EB:BB:38:B0:96:25:9C:6C:A2:36:13:D3:05:1D:09 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CC2543159A38FB52CA860 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2032b63b-c963-3cbe-8d6a-f8120714ad4a.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 401182 IP address blocks: 172.252.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:c2:54:31:59:a3:8f:b5:2c:a8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=27e2bbc2-3380-46f9-9c7d-99cd4b29f910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7b:51:4d:56:f2:94:53:52:41:f2:2a:2b:2d: 4e:7f:b6:11:84:c5:1d:1e:07:84:1c:66:e7:10:97: 60:b0:c4:b9:4b:22:6a:f7:5c:a6:ad:17:b2:bc:7c: 00:06:76:96:e7:9d:cf:d5:be:30:61:c7:cd:39:49: ae:f2:2b:65:da:d4:fc:22:d4:e5:c5:a6:9f:46:80: ac:70:03:a3:bc:5a:69:57:e3:21:f1:5c:59:24:d5: 45:8f:ce:d0:22:2d:27:a1:09:fd:de:96:14:f5:b2: cc:3e:9f:89:13:9b:fd:1f:4a:b8:c9:27:0f:5b:1c: f9:6c:4d:79:63:2a:c4:ff:1f:92:d8:34:02:c6:2f: 7e:fd:44:45:2e:c7:7d:3f:88:da:e6:7b:d2:42:31: 82:25:1d:bd:8d:8c:d9:dd:2e:d8:05:d7:02:df:17: ba:88:19:ef:12:65:d2:24:55:7a:c8:1f:96:56:5f: 0f:c3:95:02:c1:81:8c:56:73:ae:5e:18:7c:6d:a6: dd:d3:23:ed:6f:5c:e5:77:76:74:84:19:51:6e:e6: 8d:79:91:29:52:68:ef:0b:24:91:b8:62:68:1d:d4: e6:3a:33:d2:4a:ed:11:e4:05:b3:9e:43:1c:fa:45: fe:7d:0d:03:b0:22:9c:db:62:f3:05:80:77:c1:85: bb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9E:0C:37:1C:EB:BB:38:B0:96:25:9C:6C:A2:36:13:D3:05:1D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2032b63b-c963-3cbe-8d6a-f8120714ad4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:65:d0:26:bf:a2:6c:e0:1b:4f:6f:4d:80:5c:fe:ea:21:92: df:25:ba:dd:a8:39:bc:99:ac:d1:88:55:9c:1d:d6:42:ca:93: 4d:dd:56:b6:41:0e:0c:55:c9:64:30:52:28:a3:a7:41:7b:b2: b3:ff:42:d7:da:b1:df:5c:7e:63:eb:0a:d6:88:5d:2d:e3:70: a5:60:c3:da:4b:fd:0e:c1:4a:95:73:04:61:43:ae:7f:66:01: 17:3b:8c:d8:0d:c6:80:a8:4d:7e:4a:d7:68:33:51:d3:f8:77: 98:8d:ff:d6:82:50:4c:f9:76:de:af:15:bd:98:53:c6:59:91: 30:62:23:cf:4f:a0:0e:f4:74:e9:22:5b:d0:fd:49:38:1e:63: 23:4e:7f:b3:71:5f:96:f4:f8:40:e1:1e:dc:75:24:37:7f:dc: c6:f6:b2:f8:91:5c:58:75:84:d1:f9:c0:29:ef:94:c6:bc:28: 4e:03:c0:14:a6:22:48:b7:3f:e2:bf:16:6c:23:33:f9:96:8f: e7:a2:42:c5:91:ad:c9:f4:64:8b:9f:3d:2b:e3:a5:68:56:28: 58:46:11:0d:be:c3:6f:a1:f7:6b:44:ef:20:ff:30:82:a3:b9: f9:4b:57:80:b1:93:2f:d7:55:dd:95:d2:ab:3e:6f:d8:17:b8: c8:90:e4:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHMJUMVmjj7UsqGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MjdlMmJiYzItMzM4MC00NmY5LTljN2QtOTljZDRiMjlmOTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3tRTVbylFNSQfIqKy1Of7YRhMUdHgeEHGbn EJdgsMS5SyJq91ymrReyvHwABnaW553P1b4wYcfNOUmu8itl2tT8ItTlxaafRoCs cAOjvFppV+Mh8VxZJNVFj87QIi0noQn93pYU9bLMPp+JE5v9H0q4yScPWxz5bE15 YyrE/x+S2DQCxi9+/URFLsd9P4ja5nvSQjGCJR29jYzZ3S7YBdcC3xe6iBnvEmXS JFV6yB+WVl8Pw5UCwYGMVnOuXhh8babd0yPtb1zld3Z0hBlRbuaNeZEpUmjvCySR uGJoHdTmOjPSSu0R5AWznkMc+kX+fQ0DsCKc22LzBYB3wYW7aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWeDDcc67s4sJYlnGyiNhPTBR0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMjAzMmI2M2ItYzk2My0z Y2JlLThkNmEtZjgxMjA3MTRhZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPx+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJl0Ca/omzgG09vTYBc/uohkt8lut2oObyZrNGIVZwd1kLKk03dVrZB DgxVyWQwUiijp0F7srP/Qtfasd9cfmPrCtaIXS3jcKVgw9pL/Q7BSpVzBGFDrn9m ARc7jNgNxoCoTX5K12gzUdP4d5iN/9aCUEz5dt6vFb2YU8ZZkTBiI89PoA70dOki W9D9STgeYyNOf7NxX5b0+EDhHtx1JDd/3Mb2sviRXFh1hNH5wCnvlMa8KE4DwBSm Iki3P+K/FmwjM/mWj+eiQsWRrcn0ZIufPSvjpWhWKFhGEQ2+w2+h92tE7yD/MIKj uflLV4Cxky/XVd2V0qs+b9gXuMiQ5NA= -----END CERTIFICATE-----Generated at Mon Sep 28 06:16:47 2026 by rpki-client