$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a082c1a2-20a2-3a98-9315-78b6452b30aa.roa File: a082c1a2-20a2-3a98-9315-78b6452b30aa.roa (raw, json) Hash identifier: f5bVCtqlFYpJs1ZM6MXq2Lnf1CYF/d927/LGzXIye04= Subject key identifier: 1B:C6:21:00:BB:6D:D0:3F:4F:38:AA:3A:66:09:CC:19:04:E4:95:8D Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CA6D83FE1E6C9B5BE27EC Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a082c1a2-20a2-3a98-9315-78b6452b30aa.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 401182 IP address blocks: 172.252.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:a6:d8:3f:e1:e6:c9:b5:be:27:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=bca76f3e-0eec-4513-bfb8-2611b43ff6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e9:69:fc:cc:14:c6:28:b3:68:d9:88:ce:16: 10:45:c6:c8:38:65:5a:be:1b:c1:97:3e:05:30:e1: d8:e8:be:79:65:7e:b1:68:f2:3f:2c:76:a0:e6:96: 10:ca:a6:98:85:77:7d:4f:c8:ac:c7:18:0b:72:be: 6d:9c:81:0e:d5:6b:57:64:fd:a8:13:5c:a2:a7:c2: fd:4b:2b:ec:e5:b8:36:1c:3c:d3:8b:a7:3e:72:92: fc:38:53:a6:30:e6:dc:c2:b7:ae:40:12:ae:53:0d: 80:28:ef:ac:1f:04:11:8b:bc:66:88:cc:b0:e8:31: b7:d1:c1:20:c6:03:a3:8d:36:b9:9e:cb:39:82:c0: 21:5f:b3:1f:0e:5f:a5:e9:bd:a5:5b:d3:99:22:47: c9:c3:77:a4:d6:ad:01:eb:a1:3a:61:a0:fa:67:28: 51:9e:3a:61:3a:5d:eb:8e:3b:c2:5b:12:48:31:b9: 04:93:7d:13:5d:9b:3f:77:44:5d:f1:c1:c1:aa:ac: c0:80:92:2e:95:84:c5:e1:4e:bf:61:c1:45:22:14: e8:9f:99:02:cd:95:a8:20:79:7d:0c:ce:3c:aa:41: 07:c6:e2:dd:34:7c:dd:93:08:d4:6a:55:a8:69:da: 71:29:cb:25:d1:6e:1c:64:cf:b7:d5:3c:35:6b:c2: 5a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C6:21:00:BB:6D:D0:3F:4F:38:AA:3A:66:09:CC:19:04:E4:95:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a082c1a2-20a2-3a98-9315-78b6452b30aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:2c:82:75:c7:05:3e:37:c9:76:aa:2a:78:3d:cd:29:a0:54: ab:e6:6f:14:88:01:bc:a6:aa:b2:1a:8f:7c:f8:2e:0a:8d:43: 09:bb:12:49:fd:9d:77:dc:4e:b8:4f:69:b3:74:11:e0:7d:6e: c2:a2:be:23:80:ee:43:f6:da:fe:8e:f3:52:08:8d:9e:eb:95: a9:61:61:8a:ec:19:69:5e:5f:9f:3b:ab:67:8f:ad:ed:0b:d5: 07:eb:bd:02:dd:3c:f2:32:3b:94:53:86:e9:ec:77:ee:da:d1: 22:33:a3:f9:c8:2c:b7:79:a7:4c:48:da:f6:14:61:39:ed:39: d6:58:6c:39:56:3e:1b:62:7c:e1:54:87:33:56:ba:eb:e3:e5: 77:55:61:b9:d8:09:0d:28:1b:53:77:12:f9:37:67:6f:88:e6: 79:1f:0b:05:92:2c:71:64:34:92:7d:32:55:01:b6:05:bc:6c: 1e:8f:7a:82:e6:21:04:f9:ad:41:1a:c8:b4:1e:37:ac:47:21: 45:0f:19:43:a1:16:d7:dd:0b:b7:8f:53:37:55:d5:2e:1a:62: db:20:21:12:64:71:c9:d2:00:31:c2:3b:bb:7e:8c:7e:71:2e: 1a:00:cb:59:83:73:a8:9d:36:b7:a3:be:b5:81:00:5d:4c:4e: 40:12:d2:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHKbYP+HmybW+J+wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk YmNhNzZmM2UtMGVlYy00NTEzLWJmYjgtMjYxMWI0M2ZmNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgelp/MwUxiizaNmIzhYQRcbIOGVavhvBlz4F MOHY6L55ZX6xaPI/LHag5pYQyqaYhXd9T8isxxgLcr5tnIEO1WtXZP2oE1yip8L9 Syvs5bg2HDzTi6c+cpL8OFOmMObcwreuQBKuUw2AKO+sHwQRi7xmiMyw6DG30cEg xgOjjTa5nss5gsAhX7MfDl+l6b2lW9OZIkfJw3ek1q0B66E6YaD6ZyhRnjphOl3r jjvCWxJIMbkEk30TXZs/d0Rd8cHBqqzAgJIulYTF4U6/YcFFIhTon5kCzZWoIHl9 DM48qkEHxuLdNHzdkwjUalWoadpxKcsl0W4cZM+31Tw1a8Ja8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvGIQC7bdA/TziqOmYJzBkE5JWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYTA4MmMxYTItMjBhMi0z YTk4LTkzMTUtNzhiNjQ1MmIzMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPy7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgsgnXHBT43yXaqKng9zSmgVKvmbxSIAbymqrIaj3z4LgqNQwm7Ekn9 nXfcTrhPabN0EeB9bsKiviOA7kP22v6O81IIjZ7rlalhYYrsGWleX587q2ePre0L 1QfrvQLdPPIyO5RThunsd+7a0SIzo/nILLd5p0xI2vYUYTntOdZYbDlWPhtifOFU hzNWuuvj5XdVYbnYCQ0oG1N3Evk3Z2+I5nkfCwWSLHFkNJJ9MlUBtgW8bB6PeoLm IQT5rUEayLQeN6xHIUUPGUOhFtfdC7ePUzdV1S4aYtsgIRJkccnSADHCO7t+jH5x LhoAy1mDc6idNrejvrWBAF1MTkAS0lQ= -----END CERTIFICATE-----Generated at Sun Sep 27 14:48:15 2026 by rpki-client