$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0fa4f0f8-5f1f-3fb5-9a3f-a2d4ddc5ca02.roa File: 0fa4f0f8-5f1f-3fb5-9a3f-a2d4ddc5ca02.roa (raw, json) Hash identifier: ZEumI70JaLJDEvStXFByWhSo8m8X/EP0U55o2X40foQ= Subject key identifier: EA:5D:57:E7:FB:BD:D1:04:73:56:47:45:45:F1:1C:F7:6A:F3:6D:71 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CA860BCE6A0AC9EE49D40 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0fa4f0f8-5f1f-3fb5-9a3f-a2d4ddc5ca02.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 18779 IP address blocks: 172.252.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:a8:60:bc:e6:a0:ac:9e:e4:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=d76a6db1-d8cd-4b8f-aef9-e5aad472a2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:34:cc:f2:45:d0:94:1e:77:47:ba:e8:ce: 07:39:cd:8c:27:61:70:bd:fb:0a:a7:42:0a:48:f0: bc:5b:c9:c0:85:7f:56:17:97:18:a0:f0:6d:ba:43: 5e:2e:e7:4a:1d:36:4c:3a:a1:4c:ad:66:6f:8c:93: f9:33:1d:bc:b5:d5:81:83:80:c2:43:17:45:04:6a: ed:ad:b3:f7:eb:a9:77:98:eb:04:04:bf:0c:ab:f9: 1c:51:f0:3e:a7:71:a7:6f:39:d1:1c:5d:1f:8d:ad: d3:63:89:01:e8:c6:85:43:63:67:22:13:dc:c6:43: c9:d8:02:ad:0e:63:f0:fe:2b:8b:2a:d0:0c:d8:09: 63:11:4e:4e:47:06:ab:d5:58:e0:1e:34:10:51:37: 94:bd:09:82:c5:a0:6e:a5:47:e1:c0:2b:8a:b8:0d: 12:ce:25:fb:40:0b:69:a6:0e:f3:32:d1:45:2e:f5: a7:9f:0c:98:23:79:e0:c1:2a:40:7c:91:e4:b1:d5: 8a:9b:33:4d:24:ae:84:15:33:b5:76:f0:da:7c:f9: 10:b5:1b:a4:24:a1:ed:f1:fd:42:66:f9:f3:92:c2: 4b:5b:40:75:91:64:b4:6b:a8:8a:e3:f4:c4:c7:4b: ee:3d:d4:46:a6:7a:32:32:b5:9e:fc:6a:12:b3:5d: 5e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5D:57:E7:FB:BD:D1:04:73:56:47:45:45:F1:1C:F7:6A:F3:6D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0fa4f0f8-5f1f-3fb5-9a3f-a2d4ddc5ca02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:18:f2:4e:81:65:73:eb:06:f6:c3:29:78:80:95:f0:f7:e5: aa:19:10:da:1b:4f:3e:e0:bb:80:fe:e9:c5:32:43:df:5d:99: 83:67:79:57:41:3d:e9:0e:60:3a:e6:de:50:6f:a5:d7:90:1c: 3f:3b:5e:ba:79:60:f5:11:dc:5b:d5:56:81:e8:92:8a:82:f6: be:84:3e:a1:fa:6b:5e:c9:e4:7e:61:f8:37:8b:82:47:b2:02: 5f:f9:78:ee:05:4b:be:58:3c:4b:a5:49:76:d8:80:a5:2f:55: 52:67:14:47:86:a4:27:b9:9c:66:73:52:a7:7d:b2:fe:40:db: 09:91:f7:9f:87:ac:d6:ed:c7:83:e3:a0:5a:b3:10:81:15:99: ca:09:06:0d:56:01:77:40:80:5a:1e:58:fc:74:2a:f4:b7:2b: 2e:35:66:83:4a:4c:b8:dd:4d:bf:7c:2b:4c:ed:e1:04:7f:d2: 6c:20:32:ca:9c:20:bd:47:71:35:28:a8:e8:2d:38:7d:9f:d1: d7:59:e5:70:a5:2c:43:e0:7e:a9:a5:fe:3a:21:f9:8b:c6:9d: 90:c7:44:40:97:b8:29:8f:2f:24:44:36:8f:ef:dc:e4:54:86: ad:95:fc:e3:77:0b:42:fe:80:28:d1:79:fc:49:06:e0:48:4d: d5:59:ea:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHKhgvOagrJ7knUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZDc2YTZkYjEtZDhjZC00YjhmLWFlZjktZTVhYWQ0NzJhMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKE0zPJF0JQed0e66M4HOc2MJ2FwvfsKp0IK SPC8W8nAhX9WF5cYoPBtukNeLudKHTZMOqFMrWZvjJP5Mx28tdWBg4DCQxdFBGrt rbP366l3mOsEBL8Mq/kcUfA+p3GnbznRHF0fja3TY4kB6MaFQ2NnIhPcxkPJ2AKt DmPw/iuLKtAM2AljEU5ORwar1VjgHjQQUTeUvQmCxaBupUfhwCuKuA0SziX7QAtp pg7zMtFFLvWnnwyYI3ngwSpAfJHksdWKmzNNJK6EFTO1dvDafPkQtRukJKHt8f1C ZvnzksJLW0B1kWS0a6iK4/TEx0vuPdRGpnoyMrWe/GoSs11ebwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpdV+f7vdEEc1ZHRUXxHPdq821xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMGZhNGYwZjgtNWYxZi0z ZmI1LTlhM2YtYTJkNGRkYzVjYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcY8k6BZXPrBvbDKXiAlfD35aoZENobTz7gu4D+6cUyQ99dmYNneVdB PekOYDrm3lBvpdeQHD87Xrp5YPUR3FvVVoHokoqC9r6EPqH6a17J5H5h+DeLgkey Al/5eO4FS75YPEulSXbYgKUvVVJnFEeGpCe5nGZzUqd9sv5A2wmR95+HrNbtx4Pj oFqzEIEVmcoJBg1WAXdAgFoeWPx0KvS3Ky41ZoNKTLjdTb98K0zt4QR/0mwgMsqc IL1HcTUoqOgtOH2f0ddZ5XClLEPgfqml/joh+YvGnZDHRECXuCmPLyRENo/v3ORU hq2V/ON3C0L+gCjRefxJBuBITdVZ6sQ= -----END CERTIFICATE-----Generated at Tue Sep 22 18:34:55 2026 by rpki-client