$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a494a71d-0000-3cac-b7fd-5f5c30c7e7e8.roa File: a494a71d-0000-3cac-b7fd-5f5c30c7e7e8.roa (raw, json) Hash identifier: 6I7qVI+PAbOM2Qg9J+BzjHQfzrpRYsWBdx/6q2VPUSs= Subject key identifier: 00:BE:28:4F:2E:C5:0A:DB:F6:3E:DD:51:2B:8A:3C:65:61:42:D9:06 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584F1B62458C5E1142A181EEDE00 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a494a71d-0000-3cac-b7fd-5f5c30c7e7e8.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 400899 IP address blocks: 104.253.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:45:8c:5e:11:42:a1:81:ee:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=4bea720f-0943-448e-abf6-ddeb4d9a1091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:f0:ca:ba:84:1b:62:a0:ad:9d:7a:83:41: 80:a8:d6:94:ee:91:75:1f:7e:05:ec:0a:91:60:c9: 57:8d:cd:ee:1b:20:a4:73:7c:14:21:4f:63:cc:e6: 9c:4c:cc:5e:fd:af:31:70:29:f1:60:c9:bc:dd:71: 98:7d:dc:28:72:a7:3f:43:5c:e8:31:cb:28:d3:eb: 1a:1c:5e:56:73:11:c6:07:43:9a:01:50:58:b2:0c: 00:b9:c2:4e:50:90:af:df:22:27:20:a3:c2:04:45: 17:7f:62:f1:ff:5e:c4:04:40:7a:f0:0c:47:68:25: d6:77:1a:e5:f5:05:85:24:a8:63:62:cf:8f:e2:22: a5:0b:6b:e9:67:c2:a9:17:56:8c:6f:8d:0d:2e:fc: 88:3e:f2:8d:0d:28:20:10:c3:57:b5:05:fa:5c:47: 88:92:52:25:5b:b2:fe:29:5c:71:4e:92:f8:4c:c3: fc:ca:8d:a3:8b:61:9a:65:1b:bf:f8:9c:2c:a1:da: be:f8:5c:71:9e:4b:66:e3:ab:b5:12:9d:35:0a:2d: c8:be:1f:ba:9a:f9:a0:5f:2d:e1:ab:6a:cc:6f:35: 3a:60:67:a3:bd:e0:ca:5d:1b:43:ba:1e:60:0a:5e: b7:55:2d:f0:d8:89:56:a7:fb:41:0b:6c:6e:a8:23: a5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BE:28:4F:2E:C5:0A:DB:F6:3E:DD:51:2B:8A:3C:65:61:42:D9:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a494a71d-0000-3cac-b7fd-5f5c30c7e7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.253.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c9:d7:db:0a:2b:87:de:aa:08:7e:60:5b:fa:96:63:de:21: f6:19:44:22:90:c1:e4:b2:83:de:b4:2c:0d:fd:90:57:24:e0: 65:7c:c2:cf:21:c1:03:4b:3c:69:0d:8f:7d:ca:b0:16:ee:c7: 68:99:91:d5:43:0d:c3:af:84:63:8e:95:ea:45:d5:00:fb:8e: b4:62:09:31:a0:14:90:fb:54:d9:28:e2:0d:f9:24:07:b9:3c: 33:6b:c8:0d:95:fc:04:bd:24:77:f9:99:19:f2:f0:09:23:46: f6:e0:44:f1:40:28:f7:54:95:d0:22:99:d0:83:8b:2f:41:12: fa:e3:ce:81:84:e6:0e:04:c0:25:2f:6e:ef:65:00:8f:16:c7: fe:20:82:9c:e7:3c:a9:dc:9e:5b:5a:46:87:08:2b:0c:42:ac: e1:6c:c7:7c:74:6c:42:0e:a7:7e:16:7d:f8:f9:14:ff:50:17: fa:f7:8b:ea:ac:bd:ab:b0:d0:14:4e:98:4c:7b:28:87:d4:bd: e8:03:ef:3b:cf:27:5c:1c:14:73:12:2f:89:27:5e:cc:0c:dc: 8a:9b:ae:57:5a:41:c1:5b:c6:12:2f:ad:99:52:2c:8a:79:ca: 17:72:ae:38:99:38:a2:d4:4c:9f:7c:45:7a:f5:b0:37:a3:e4: 6d:cb:11:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkWMXhFCoYHu3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk NGJlYTcyMGYtMDk0My00NDhlLWFiZjYtZGRlYjRkOWExMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVPwyrqEG2KgrZ16g0GAqNaU7pF1H34F7AqR YMlXjc3uGyCkc3wUIU9jzOacTMxe/a8xcCnxYMm83XGYfdwocqc/Q1zoMcso0+sa HF5WcxHGB0OaAVBYsgwAucJOUJCv3yInIKPCBEUXf2Lx/17EBEB68AxHaCXWdxrl 9QWFJKhjYs+P4iKlC2vpZ8KpF1aMb40NLvyIPvKNDSggEMNXtQX6XEeIklIlW7L+ KVxxTpL4TMP8yo2ji2GaZRu/+Jwsodq++Fxxnktm46u1Ep01Ci3Ivh+6mvmgXy3h q2rMbzU6YGejveDKXRtDuh5gCl63VS3w2IlWp/tBC2xuqCOlvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC+KE8uxQrb9j7dUSuKPGVhQtkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYTQ5NGE3MWQtMDAwMC0z Y2FjLWI3ZmQtNWY1YzMwYzdlN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvJ19sKK4feqgh+YFv6lmPeIfYZRCKQweSyg960LA39kFck4GV8ws8h wQNLPGkNj33KsBbux2iZkdVDDcOvhGOOlepF1QD7jrRiCTGgFJD7VNko4g35JAe5 PDNryA2V/AS9JHf5mRny8AkjRvbgRPFAKPdUldAimdCDiy9BEvrjzoGE5g4EwCUv bu9lAI8Wx/4ggpznPKncnltaRocIKwxCrOFsx3x0bEIOp34Wffj5FP9QF/r3i+qs vauw0BROmEx7KIfUvegD7zvPJ1wcFHMSL4knXswM3IqbrldaQcFbxhIvrZlSLIp5 yhdyrjiZOKLUTJ98RXr1sDej5G3LEfY= -----END CERTIFICATE-----Generated at Sun Sep 27 07:09:45 2026 by rpki-client