$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/40325e41-d450-30ad-97bd-8d3e7d0567da.roa File: 40325e41-d450-30ad-97bd-8d3e7d0567da.roa (raw, json) Hash identifier: duYyx2j6g5ea8CfzDYe3ws0RLJD3p9Aj6k11O8aR6gY= Subject key identifier: 0C:3F:4C:73:39:85:35:53:EE:9D:5F:4B:B8:F2:73:45:B8:36:64:03 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CB1AC92DB930B5EA148C0 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/40325e41-d450-30ad-97bd-8d3e7d0567da.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 212238 IP address blocks: 104.253.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:b1:ac:92:db:93:0b:5e:a1:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=dffa7267-483d-4e1f-b411-b253a6ed983a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:b8:04:ef:1b:23:67:a4:da:99:da:99:80: bf:0b:fb:3a:65:b5:1f:98:ba:5b:50:6a:55:f7:f3: 1e:28:f5:ff:51:d7:e6:a2:9b:82:41:87:82:41:ea: 09:36:4b:0a:35:28:6a:2f:da:ec:d8:f5:15:2b:a6: 65:3e:ce:7f:84:c6:37:d7:2c:62:a1:5a:6d:74:48: d9:7c:1f:d1:21:33:b7:00:2a:49:9d:f7:b2:6d:5b: 13:02:b9:dc:2e:05:2c:6e:e7:08:dc:4c:23:44:ee: a5:7c:e3:7b:0f:af:ad:1a:71:93:53:36:34:93:05: 61:98:2d:c8:e1:80:f5:ff:aa:e8:34:4a:ad:0a:83: b4:56:7a:4e:01:24:38:d9:f6:00:54:dd:e0:84:54: 12:bf:d4:e8:ff:69:b1:2a:54:66:86:22:e9:33:2b: 51:c2:a8:31:1b:67:e4:a5:35:d6:24:8c:ef:0e:d5: 50:60:0d:91:f4:f1:b8:9d:36:e6:62:8a:9d:a5:be: 8a:07:17:85:f4:fa:01:ec:b9:de:ff:bb:09:ee:0e: 38:97:44:23:53:fc:73:1c:20:59:c9:ac:15:53:e6: ce:c2:ff:d9:b5:fe:40:90:9b:0c:9a:54:eb:dc:73: d7:93:69:db:d0:c2:df:6a:66:cd:52:29:2f:d8:db: 94:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3F:4C:73:39:85:35:53:EE:9D:5F:4B:B8:F2:73:45:B8:36:64:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/40325e41-d450-30ad-97bd-8d3e7d0567da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.253.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:14:01:20:d3:3a:23:82:c3:a4:86:02:53:26:64:a6:2a:e6: f9:f0:36:79:42:11:a3:1e:cc:23:4b:06:52:43:80:6f:80:b9: 5f:56:d5:4f:3d:52:e3:e3:4c:9e:d4:b5:e8:78:a7:54:d5:a9: 02:3a:58:a3:ac:4a:93:bb:4c:e4:2b:fa:27:83:b4:e0:05:c6: 3f:46:56:6d:9f:dd:b7:59:cf:ab:16:45:5d:e8:95:4e:33:93: b5:28:a8:43:9e:54:f8:40:e5:b9:3d:75:cb:23:33:82:c4:e1: a7:c1:72:40:68:d1:09:d1:bd:3a:3a:e9:18:a9:a8:c6:b7:52: e4:34:1e:e2:c3:5a:ca:cd:de:c6:fb:68:a2:85:d9:88:7d:c6: e5:94:f9:be:9f:a4:7c:69:d4:90:3b:56:3c:8a:ac:31:4b:37: fc:e6:86:26:00:82:ae:4d:bd:4a:76:87:3c:83:c0:04:47:2e: e8:23:61:d4:88:64:11:cc:e2:d7:a8:0f:18:09:d9:ea:ab:e6: 93:84:ea:fa:81:50:50:a0:e3:6e:ad:98:91:6c:c0:b3:51:16: 98:69:9d:cd:21:3f:c1:ae:ef:e0:42:a1:a9:e0:66:e9:7d:43: 88:8b:8e:2e:64:8c:da:fd:c0:6c:7c:16:47:5e:1f:d0:f0:35: a0:86:1c:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHLGsktuTC16hSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZGZmYTcyNjctNDgzZC00ZTFmLWI0MTEtYjI1M2E2ZWQ5ODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVi4BO8bI2ek2pnamYC/C/s6ZbUfmLpbUGpV 9/MeKPX/UdfmopuCQYeCQeoJNksKNShqL9rs2PUVK6ZlPs5/hMY31yxioVptdEjZ fB/RITO3ACpJnfeybVsTArncLgUsbucI3EwjRO6lfON7D6+tGnGTUzY0kwVhmC3I 4YD1/6roNEqtCoO0VnpOASQ42fYAVN3ghFQSv9To/2mxKlRmhiLpMytRwqgxG2fk pTXWJIzvDtVQYA2R9PG4nTbmYoqdpb6KBxeF9PoB7Lne/7sJ7g44l0QjU/xzHCBZ yawVU+bOwv/Ztf5AkJsMmlTr3HPXk2nb0MLfambNUikv2NuUjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAw/THM5hTVT7p1fS7jyc0W4NmQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNDAzMjVlNDEtZDQ1MC0z MGFkLTk3YmQtOGQzZTdkMDU2N2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwUASDTOiOCw6SGAlMmZKYq5vnwNnlCEaMezCNLBlJDgG+AuV9W1U89 UuPjTJ7Uteh4p1TVqQI6WKOsSpO7TOQr+ieDtOAFxj9GVm2f3bdZz6sWRV3olU4z k7UoqEOeVPhA5bk9dcsjM4LE4afBckBo0QnRvTo66RipqMa3UuQ0HuLDWsrN3sb7 aKKF2Yh9xuWU+b6fpHxp1JA7VjyKrDFLN/zmhiYAgq5NvUp2hzyDwARHLugjYdSI ZBHM4teoDxgJ2eqr5pOE6vqBUFCg426tmJFswLNRFphpnc0hP8Gu7+BCoangZul9 Q4iLji5kjNr9wGx8FkdeH9DwNaCGHM8= -----END CERTIFICATE-----Generated at Thu Sep 24 05:45:47 2026 by rpki-client