$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a6d2baf2-6ba6-3fad-a1fb-dea16e96f51d.roa File: a6d2baf2-6ba6-3fad-a1fb-dea16e96f51d.roa (raw, json) Hash identifier: ri8hukWIb3vMaSq0oqtCRE+Cqco0ybyZdwLBa8prLs0= Subject key identifier: 5E:0C:4C:11:90:26:EC:59:BB:11:8B:FB:D2:EA:00:E8:40:2C:08:AC Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584F4972CF0C55879B1A6EE2E8E0 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a6d2baf2-6ba6-3fad-a1fb-dea16e96f51d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 212238 IP address blocks: 104.253.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:cf:0c:55:87:9b:1a:6e:e2:e8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=24beb05e-59ea-4e4a-96fc-2b1d3930fb88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7c:d7:c2:e3:6a:54:dd:3b:ac:a3:32:b4:2c: 2b:bd:80:ba:a5:b0:2f:41:39:30:7d:d6:05:3b:99: 43:ef:79:25:e3:fc:2d:92:c8:1f:7a:31:5c:fe:19: 6c:39:8e:c7:6a:f1:92:35:f4:2e:d6:bf:e6:23:51: 44:3d:19:3f:18:41:59:ad:db:f6:df:16:79:36:fc: 36:74:46:ce:55:31:e5:86:b4:4e:00:7b:3e:bc:28: 67:10:c4:86:a8:08:56:16:63:80:d7:c5:df:20:6e: 0c:04:dd:ce:39:9c:b1:c4:d5:2d:97:e3:46:4a:c1: 0a:f0:58:e6:25:a6:92:56:1d:70:fc:65:a9:35:6f: 9a:3d:52:78:2f:a5:b9:45:88:a9:3c:50:89:77:3a: b1:39:40:30:b4:9f:1b:d7:ac:7f:74:e6:01:40:e7: 83:3a:86:4f:fb:d8:3b:f4:0d:e3:97:f8:75:08:61: cc:bd:86:3c:3a:66:b5:bd:db:2e:29:68:1c:9c:4b: 24:49:c3:2f:1e:06:3e:1d:15:5b:ee:58:02:2d:2a: 94:e3:09:97:97:a5:48:9c:57:7d:3f:a1:9f:05:af: be:6f:b9:08:59:8e:9b:7f:79:73:50:80:5d:fa:6a: 80:fc:f9:42:af:25:a2:f1:2c:df:4c:55:38:84:bf: 5f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0C:4C:11:90:26:EC:59:BB:11:8B:FB:D2:EA:00:E8:40:2C:08:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a6d2baf2-6ba6-3fad-a1fb-dea16e96f51d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.253.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:17:ae:4b:d4:6a:cd:f2:40:1f:1c:3b:46:a2:0e:1f:46:56: 9d:ba:59:cf:23:fc:b6:ce:cd:a5:f2:8a:0d:09:16:42:35:bd: 77:4b:55:ca:9c:89:11:15:56:35:67:81:b5:e1:f3:52:14:79: de:82:9d:3f:1f:2d:1c:a8:f0:11:dd:cb:17:a8:f9:03:2a:7c: 4b:92:99:99:7b:06:4a:be:c8:3f:cd:52:dd:db:f1:93:33:d4: 52:9e:3c:e0:29:df:42:69:a7:e5:f0:b0:e1:12:b1:36:10:1e: bd:78:94:1b:9e:a8:7a:0f:7f:1a:8d:6c:21:d1:76:93:cd:bd: cb:ae:15:d8:c2:50:49:dc:5b:e8:62:ee:db:e2:59:9e:b6:36: 2c:4b:3b:22:a3:03:be:02:dc:cd:0e:e9:e9:96:05:9c:25:c2: af:00:f8:0b:33:cf:7b:fd:d6:b8:d0:dc:33:29:b7:aa:34:57: de:fd:da:16:55:71:13:91:67:87:39:ec:4b:48:45:aa:11:87: 28:3d:60:dd:66:81:67:32:42:ff:f3:04:d4:61:e7:86:2a:99: 03:5b:ae:a8:b8:a4:61:b7:0c:97:db:12:33:24:fc:3c:c0:23: e5:d7:93:af:85:43:b5:dd:79:fe:e6:81:a5:b4:07:8b:09:bf: 73:23:b4:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcs8MVYebGm7i6OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjRiZWIwNWUtNTllYS00ZTRhLTk2ZmMtMmIxZDM5MzBmYjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HzXwuNqVN07rKMytCwrvYC6pbAvQTkwfdYF O5lD73kl4/wtksgfejFc/hlsOY7HavGSNfQu1r/mI1FEPRk/GEFZrdv23xZ5Nvw2 dEbOVTHlhrROAHs+vChnEMSGqAhWFmOA18XfIG4MBN3OOZyxxNUtl+NGSsEK8Fjm JaaSVh1w/GWpNW+aPVJ4L6W5RYipPFCJdzqxOUAwtJ8b16x/dOYBQOeDOoZP+9g7 9A3jl/h1CGHMvYY8Oma1vdsuKWgcnEskScMvHgY+HRVb7lgCLSqU4wmXl6VInFd9 P6GfBa++b7kIWY6bf3lzUIBd+mqA/PlCryWi8SzfTFU4hL9fowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4MTBGQJuxZuxGL+9LqAOhALAisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYTZkMmJhZjItNmJhNi0z ZmFkLWExZmItZGVhMTZlOTZmNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0XrkvUas3yQB8cO0aiDh9GVp26Wc8j/LbOzaXyig0JFkI1vXdLVcqc iREVVjVngbXh81IUed6CnT8fLRyo8BHdyxeo+QMqfEuSmZl7Bkq+yD/NUt3b8ZMz 1FKePOAp30Jpp+XwsOESsTYQHr14lBueqHoPfxqNbCHRdpPNvcuuFdjCUEncW+hi 7tviWZ62NixLOyKjA74C3M0O6emWBZwlwq8A+Aszz3v91rjQ3DMpt6o0V9792hZV cRORZ4c57EtIRaoRhyg9YN1mgWcyQv/zBNRh54YqmQNbrqi4pGG3DJfbEjMk/DzA I+XXk6+FQ7Xdef7mgaW0B4sJv3MjtGc= -----END CERTIFICATE-----Generated at Fri Sep 25 23:41:26 2026 by rpki-client