$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0fa10283-6ee6-3644-8222-e4346d0c8c76.roa File: 0fa10283-6ee6-3644-8222-e4346d0c8c76.roa (raw, json) Hash identifier: BOyPY3N6l0ZHNYsgzmiLv0V7XRYJM8AbAW4aWUI3az4= Subject key identifier: F5:96:30:22:43:F0:B0:7D:F4:04:B4:3D:A6:BA:BB:6E:A3:E7:AF:EC Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CB365E096AC681DAC9B80 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0fa10283-6ee6-3644-8222-e4346d0c8c76.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 104.253.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:b3:65:e0:96:ac:68:1d:ac:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=9a467107-a07d-476f-9bd5-61a8542121bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:0c:30:b0:ad:0b:4c:ca:57:ea:21:b0:f3: 48:fb:cc:47:04:90:19:e5:ed:57:ff:44:6d:5d:39: 76:35:6e:13:7b:4f:d8:5e:30:be:0d:09:05:96:de: f2:67:0c:7d:0a:42:28:e1:f6:4f:fb:9c:49:41:90: cc:b3:27:f9:c2:3c:e6:91:00:c1:58:16:de:55:77: cf:79:4d:95:5e:d7:f3:1f:40:c1:0a:36:80:39:dd: 35:63:78:54:bc:e9:4c:38:4c:5d:13:bf:ec:ba:b6: 98:a0:9f:06:07:ff:fc:b5:76:82:7e:20:cb:28:a7: d9:1b:c1:9b:fe:e4:2b:9d:34:f6:9a:58:80:6f:d8: e9:b5:46:72:56:0f:39:44:e9:0b:89:eb:9f:1d:be: c3:e6:86:30:46:00:c6:62:cb:db:ef:fe:54:ed:54: 57:14:99:34:be:fd:cf:0d:f9:46:ba:91:be:43:90: cc:68:8b:c5:ea:39:e2:f7:37:42:86:88:f6:d2:bb: 07:e7:2b:08:69:37:54:a5:1a:90:9e:b8:e8:4f:db: 47:b8:d8:a8:20:3f:ee:ab:be:4d:ea:30:40:5d:40: 3d:bc:fd:c7:d6:8b:ca:d7:d7:a8:bc:63:af:e5:90: 80:42:23:0d:ac:b5:97:c5:19:d4:8e:ed:08:47:9e: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:96:30:22:43:F0:B0:7D:F4:04:B4:3D:A6:BA:BB:6E:A3:E7:AF:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0fa10283-6ee6-3644-8222-e4346d0c8c76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.253.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:6a:f5:de:45:8a:34:3e:6a:46:3f:97:c8:b0:f4:d8:7a:06: ab:3f:30:07:c0:bc:60:4a:8f:d8:29:de:db:6b:23:78:e2:8b: 02:c6:7a:89:14:ad:03:3b:14:44:47:57:0d:a6:76:89:5d:48: 47:58:3f:61:3b:62:9b:55:31:83:c4:da:3c:9e:5d:31:80:50: 41:3f:82:8a:a5:2d:fc:f0:bf:2d:8a:4b:3e:fd:3f:f0:37:4a: a9:99:7e:71:54:46:25:0b:9a:d2:04:f6:36:6f:9c:de:ff:c5: ad:a7:b5:32:61:9d:f0:e0:de:7d:54:bd:6f:5a:66:d8:96:6c: 86:7b:74:cc:6c:02:84:bc:1c:78:fd:ac:db:ef:6f:8b:a8:4f: 65:70:02:80:22:98:62:30:aa:d6:63:ee:ed:fe:fa:c0:09:27: 7f:bd:e6:49:05:eb:c6:20:33:04:26:b8:3e:13:1e:75:38:3c: 36:53:66:13:16:ae:dc:16:94:dc:93:81:59:16:60:47:84:8d: 38:e9:8a:8c:c8:66:62:55:16:a9:05:09:15:6d:fb:52:5f:2d: d1:1f:80:ea:df:ae:8b:1c:4c:52:c8:cf:e3:44:19:6b:63:b1: 64:54:34:57:d7:4c:2d:f7:11:9e:8c:cb:9d:49:8e:f2:27:4e: f7:6a:0e:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHLNl4JasaB2sm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk OWE0NjcxMDctYTA3ZC00NzZmLTliZDUtNjFhODU0MjEyMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GYMMLCtC0zKV+ohsPNI+8xHBJAZ5e1X/0Rt XTl2NW4Te0/YXjC+DQkFlt7yZwx9CkIo4fZP+5xJQZDMsyf5wjzmkQDBWBbeVXfP eU2VXtfzH0DBCjaAOd01Y3hUvOlMOExdE7/suraYoJ8GB//8tXaCfiDLKKfZG8Gb /uQrnTT2mliAb9jptUZyVg85ROkLieufHb7D5oYwRgDGYsvb7/5U7VRXFJk0vv3P DflGupG+Q5DMaIvF6jni9zdChoj20rsH5ysIaTdUpRqQnrjoT9tHuNioID/uq75N 6jBAXUA9vP3H1ovK19eovGOv5ZCAQiMNrLWXxRnUju0IR57HMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWWMCJD8LB99AS0Paa6u26j56/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMGZhMTAyODMtNmVlNi0z NjQ0LTgyMjItZTQzNDZkMGM4Yzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlq9d5FijQ+akY/l8iw9Nh6Bqs/MAfAvGBKj9gp3ttrI3jiiwLGeokU rQM7FERHVw2mdoldSEdYP2E7YptVMYPE2jyeXTGAUEE/goqlLfzwvy2KSz79P/A3 SqmZfnFURiULmtIE9jZvnN7/xa2ntTJhnfDg3n1UvW9aZtiWbIZ7dMxsAoS8HHj9 rNvvb4uoT2VwAoAimGIwqtZj7u3++sAJJ3+95kkF68YgMwQmuD4THnU4PDZTZhMW rtwWlNyTgVkWYEeEjTjpiozIZmJVFqkFCRVt+1JfLdEfgOrfroscTFLIz+NEGWtj sWRUNFfXTC33EZ6My51JjvInTvdqDk8= -----END CERTIFICATE-----Generated at Mon Sep 21 14:58:28 2026 by rpki-client