$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8ab967d8-f7b9-39c8-835c-f7d2d7a100fb.roa File: 8ab967d8-f7b9-39c8-835c-f7d2d7a100fb.roa (raw, json) Hash identifier: K1udw/TRnMC8qrOr7KStgvx6SjZNTeP9Xx9qoT2/M5c= Subject key identifier: 2B:32:C0:DF:C2:F7:66:65:35:C7:CC:F5:4A:53:0E:D5:AD:E0:07:98 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CE7B44CCACF39B3DBC500 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8ab967d8-f7b9-39c8-835c-f7d2d7a100fb.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 18779 IP address blocks: 172.252.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:e7:b4:4c:ca:cf:39:b3:db:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=db0e28e4-b4f5-4f73-95e4-c857afa167e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:31:e3:94:ae:0d:98:0b:6b:57:1f:86:1c:cc: 31:c9:cc:1a:66:44:cd:51:ff:dd:52:e8:5e:4b:8e: 7c:03:af:7c:fa:f9:8f:4b:9f:80:cf:e6:2c:c8:78: 4a:c9:5c:73:45:42:0e:41:79:5d:50:e6:dd:b1:fa: 63:6e:5c:49:67:e7:26:59:eb:00:50:66:3e:78:df: 50:f3:8f:08:ee:23:db:ca:60:f3:e8:fa:d5:bc:5f: ea:a1:34:3c:e5:89:b9:f9:4f:66:eb:87:5e:69:5b: 92:76:19:2d:83:b9:08:d1:75:31:f9:3a:b1:00:1c: 59:fd:7d:ae:f8:4f:fc:bd:79:b1:3e:45:6b:8a:6d: af:e2:69:92:96:d1:cc:82:b4:92:a8:b8:e2:1e:bd: 46:02:80:72:20:c0:d4:37:33:8b:d4:40:a0:5c:21: 00:ce:2c:d4:6d:e0:e2:80:9e:d7:d6:cd:d8:a6:a2: f4:24:cd:39:04:f3:eb:d7:05:19:8a:04:ab:89:c4: 17:4c:b5:c5:00:7e:ab:e3:25:ac:30:7e:89:d0:17: 35:82:35:35:f0:5a:53:e7:7b:4a:8e:c6:5d:72:df: 9c:b9:4f:41:84:d6:29:ff:86:0d:2f:6d:38:e4:a8: 39:c6:5e:3f:5e:73:27:a9:54:dc:a7:7e:88:c1:06: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:32:C0:DF:C2:F7:66:65:35:C7:CC:F5:4A:53:0E:D5:AD:E0:07:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8ab967d8-f7b9-39c8-835c-f7d2d7a100fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ec:16:8a:2e:3b:6c:11:ae:c4:46:24:03:80:fd:e0:c7:6b: fe:8a:5e:2f:1e:f1:12:8f:16:25:99:0a:b6:04:1a:fb:01:08: 97:45:40:d4:97:bc:c9:88:7e:ce:67:d4:2b:49:da:10:2b:42: a8:b5:4e:64:f6:39:8f:08:9b:73:e3:ff:60:a2:4e:1c:ce:a1: c9:f7:ba:66:ba:51:cc:6f:c3:ce:11:68:23:07:6b:10:dd:ec: c2:19:4b:6a:24:ae:0c:85:be:d2:bf:00:65:7b:86:43:4c:34: bc:ae:2a:03:88:7d:22:f9:9a:c0:43:02:35:e9:7a:93:69:ab: 35:7d:6d:62:54:ec:76:ef:db:c6:15:ad:21:67:a2:6c:d3:5d: 1a:fd:5d:5b:5e:41:c5:d3:d9:64:b2:e1:1c:95:90:d2:b5:97: 1c:01:48:00:25:db:d8:78:54:94:42:ae:e6:4b:25:c8:6d:71: 80:56:a4:89:a7:91:61:c1:99:25:ee:60:65:a0:7b:c2:18:e7: b8:e9:71:f8:63:01:0b:f3:e6:ad:92:a2:7e:02:cf:43:72:8a: 28:36:8e:1b:92:4d:4f:25:08:49:b7:4b:fe:30:df:50:95:d2: 0a:7e:cc:65:f0:b0:09:53:f4:35:04:37:de:61:a8:3e:cd:91: a2:d7:ae:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHOe0TMrPObPbxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZGIwZTI4ZTQtYjRmNS00ZjczLTk1ZTQtYzg1N2FmYTE2N2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjHjlK4NmAtrVx+GHMwxycwaZkTNUf/dUuhe S458A698+vmPS5+Az+YsyHhKyVxzRUIOQXldUObdsfpjblxJZ+cmWesAUGY+eN9Q 848I7iPbymDz6PrVvF/qoTQ85Ym5+U9m64deaVuSdhktg7kI0XUx+TqxABxZ/X2u +E/8vXmxPkVrim2v4mmSltHMgrSSqLjiHr1GAoByIMDUNzOL1ECgXCEAzizUbeDi gJ7X1s3YpqL0JM05BPPr1wUZigSricQXTLXFAH6r4yWsMH6J0Bc1gjU18FpT53tK jsZdct+cuU9BhNYp/4YNL2045Kg5xl4/XnMnqVTcp36IwQZpHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsywN/C92ZlNcfM9UpTDtWt4AeYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvOGFiOTY3ZDgtZjdiOS0z OWM4LTgzNWMtZjdkMmQ3YTEwMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnsFoouO2wRrsRGJAOA/eDHa/6KXi8e8RKPFiWZCrYEGvsBCJdFQNSX vMmIfs5n1CtJ2hArQqi1TmT2OY8Im3Pj/2CiThzOocn3uma6Ucxvw84RaCMHaxDd 7MIZS2okrgyFvtK/AGV7hkNMNLyuKgOIfSL5msBDAjXpepNpqzV9bWJU7Hbv28YV rSFnomzTXRr9XVteQcXT2WSy4RyVkNK1lxwBSAAl29h4VJRCruZLJchtcYBWpImn kWHBmSXuYGWge8IY57jpcfhjAQvz5q2Son4Cz0Nyiig2jhuSTU8lCEm3S/4w31CV 0gp+zGXwsAlT9DUEN95hqD7NkaLXrsc= -----END CERTIFICATE-----Generated at Mon Sep 28 10:07:29 2026 by rpki-client