$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b1f53ea0-4a28-3fd0-b880-90a8160a1438.roa File: b1f53ea0-4a28-3fd0-b880-90a8160a1438.roa (raw, json) Hash identifier: 8NPYdxECJvQnZ140uR6aZs/CXqnN5oeI19P9B7+b1CE= Subject key identifier: 27:E4:85:45:06:21:F6:EE:61:55:1B:EC:63:5A:3B:13:C4:CA:C2:61 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CDE77A50D9F94C2894980 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b1f53ea0-4a28-3fd0-b880-90a8160a1438.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 18779 IP address blocks: 172.252.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:de:77:a5:0d:9f:94:c2:89:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=b057a809-484a-4e2c-b7aa-e38f221b8432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5a:be:6f:b5:f5:c1:db:07:59:92:32:db:ab: d5:a1:d1:e8:f8:a0:b3:cf:2d:6b:1e:50:c7:07:7b: b1:52:d7:5a:02:e7:c8:80:ce:02:1a:f3:bc:02:d0: 48:39:ed:90:a3:2f:2f:db:4a:4d:57:8a:e7:13:b3: a8:d5:1e:44:a8:ad:85:eb:15:ad:eb:42:4b:91:71: cb:58:e1:81:a3:99:3b:4f:92:08:45:0d:f9:8b:72: 3f:50:70:90:5e:fd:2e:78:e8:ae:60:54:52:c7:27: 9e:b4:f7:ad:59:f2:7d:bc:68:27:b3:dd:d1:14:8a: e7:70:bf:7b:b7:50:a4:a0:5f:82:ce:31:5a:e9:f6: 37:56:3c:ae:04:00:d4:05:96:a2:0d:0a:13:1c:f5: e6:46:05:35:eb:85:55:12:40:43:b9:ed:30:ce:22: bd:ba:a5:ed:86:48:a2:73:d7:92:cc:1e:45:7e:f0: 6c:da:78:bb:d2:ef:49:13:d1:30:b1:bb:67:59:9a: ed:b6:43:b6:25:4b:30:e0:e0:35:f0:37:ae:be:30: ce:3a:36:79:7b:94:0d:3b:74:d7:8f:77:21:df:cf: a1:1d:a9:74:ea:92:37:66:6c:2e:d1:b4:bc:34:7c: 2f:cf:7b:df:a7:e5:ab:dc:28:82:ee:10:4a:b4:0c: c4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E4:85:45:06:21:F6:EE:61:55:1B:EC:63:5A:3B:13:C4:CA:C2:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b1f53ea0-4a28-3fd0-b880-90a8160a1438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d5:48:62:dc:5f:5b:ee:47:7f:d2:d2:1f:3b:de:50:13:29: dd:8e:af:03:a6:3e:63:f7:ff:c0:5a:09:9b:c5:72:c9:e8:5f: 35:d0:1a:da:34:22:78:8c:8a:cd:24:f4:8c:6b:b7:ba:b2:7d: 96:fb:e4:c7:79:2d:b4:6b:9d:42:94:07:2d:ee:3e:b9:67:2d: 41:0d:ad:1c:c1:2c:8b:73:8f:54:cf:45:1e:8b:37:43:75:1e: 7c:66:b9:37:20:1c:07:35:1f:7b:28:e1:ee:bf:61:30:30:63: fc:11:f6:2e:14:4f:74:0f:43:9e:24:79:0b:ec:7f:da:af:e3: 95:99:9e:30:a1:2e:23:dc:4e:7a:88:27:ef:f8:fa:6e:cc:c1: 2b:6c:20:d6:9b:c4:60:af:70:33:18:21:73:e6:5b:1b:d1:0b: bb:10:b5:d8:f0:d2:0c:9e:c1:3e:0b:da:a5:4b:42:b5:af:13: e3:15:21:c9:9f:db:d6:5e:33:98:4c:ad:ca:6d:64:35:bf:93: 05:d1:57:d3:27:5e:30:cd:ad:26:2a:21:a9:8c:a3:ca:7c:fc: 13:46:0f:8f:bc:19:2d:79:36:24:03:e3:b3:c3:5c:f4:65:4f: f8:cd:4f:71:55:0e:d6:f8:d4:2d:1e:fa:10:f0:42:6a:1a:96: 68:09:f6:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHN53pQ2flMKJSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk YjA1N2E4MDktNDg0YS00ZTJjLWI3YWEtZTM4ZjIyMWI4NDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Fq+b7X1wdsHWZIy26vVodHo+KCzzy1rHlDH B3uxUtdaAufIgM4CGvO8AtBIOe2Qoy8v20pNV4rnE7Oo1R5EqK2F6xWt60JLkXHL WOGBo5k7T5IIRQ35i3I/UHCQXv0ueOiuYFRSxyeetPetWfJ9vGgns93RFIrncL97 t1CkoF+CzjFa6fY3VjyuBADUBZaiDQoTHPXmRgU164VVEkBDue0wziK9uqXthkii c9eSzB5FfvBs2ni70u9JE9EwsbtnWZrttkO2JUsw4OA18DeuvjDOOjZ5e5QNO3TX j3ch38+hHal06pI3Zmwu0bS8NHwvz3vfp+Wr3CiC7hBKtAzERQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfkhUUGIfbuYVUb7GNaOxPEysJhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYjFmNTNlYTAtNGEyOC0z ZmQwLWI4ODAtOTBhODE2MGExNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrVSGLcX1vuR3/S0h873lATKd2OrwOmPmP3/8BaCZvFcsnoXzXQGto0 IniMis0k9Ixrt7qyfZb75Md5LbRrnUKUBy3uPrlnLUENrRzBLItzj1TPRR6LN0N1 HnxmuTcgHAc1H3so4e6/YTAwY/wR9i4UT3QPQ54keQvsf9qv45WZnjChLiPcTnqI J+/4+m7MwStsINabxGCvcDMYIXPmWxvRC7sQtdjw0gyewT4L2qVLQrWvE+MVIcmf 29ZeM5hMrcptZDW/kwXRV9MnXjDNrSYqIamMo8p8/BNGD4+8GS15NiQD47PDXPRl T/jNT3FVDtb41C0e+hDwQmoalmgJ9qw= -----END CERTIFICATE-----Generated at Sat Sep 26 17:35:15 2026 by rpki-client