$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/28d54990-c6cf-3d13-9c9f-7b76e1e877fd.roa File: 28d54990-c6cf-3d13-9c9f-7b76e1e877fd.roa (raw, json) Hash identifier: bTzgFJLG+f9CjSv2g/nYMexqCgHk+t+nwWi0skhWmXU= Subject key identifier: 30:58:8A:8E:92:8A:5B:31:B9:68:0D:AD:92:BC:CD:E2:1B:04:5E:D0 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CCC2FB04922A6C20E5380 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/28d54990-c6cf-3d13-9c9f-7b76e1e877fd.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 398781 IP address blocks: 172.252.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:cc:2f:b0:49:22:a6:c2:0e:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=a345e502-2e40-49a6-9841-54e96982f690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:64:ce:7f:42:ac:87:35:5b:16:e0:71:20:3a: fe:e2:ed:a7:ad:8b:21:0f:4a:1f:68:f7:34:2b:c0: 95:ad:e8:87:50:cb:30:dd:2c:5f:c9:f5:c5:81:1d: b2:d1:22:46:b9:53:b7:cf:90:00:dd:31:7f:20:5a: fa:79:6d:16:00:18:1e:2e:77:37:05:05:d4:67:fd: 96:62:a0:e5:df:18:c5:82:38:23:47:a8:b9:37:a3: 6f:f8:b3:a7:19:87:46:b5:85:0b:97:ed:07:fd:b0: a8:5f:ec:59:47:30:bb:6b:a7:5e:f0:56:a9:ca:94: c9:be:6f:d3:8e:2c:2e:65:ae:83:da:13:c6:9e:51: a4:5a:fa:10:59:c8:dd:56:29:74:98:fe:9e:27:78: 90:69:ea:74:43:1f:84:22:01:e2:32:ed:c5:e1:c1: 00:45:5a:39:01:99:6a:33:7d:72:26:05:b9:dd:ab: bc:27:dc:e7:06:8a:b2:12:f3:5a:ff:e6:e3:4d:e3: 1e:92:48:cc:42:b9:88:42:0d:87:3c:14:f0:d3:96: de:0c:31:9b:7d:68:96:71:2b:f3:52:6d:e8:41:79: c7:bb:87:10:56:ea:e5:65:3c:b6:2f:35:4e:95:b8: 04:d9:35:0b:0e:b4:a2:c3:e7:b7:2b:ab:de:bc:60: 09:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:58:8A:8E:92:8A:5B:31:B9:68:0D:AD:92:BC:CD:E2:1B:04:5E:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/28d54990-c6cf-3d13-9c9f-7b76e1e877fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:bc:c0:af:b4:fa:2f:d1:aa:b9:de:14:6c:59:01:21:05:a1: ed:c5:20:1a:e2:76:90:fb:f3:0d:e6:cb:95:26:23:bf:4e:ec: 31:bc:79:7f:e1:ba:80:ac:11:e5:20:df:9f:8b:63:87:36:b3: 1b:78:38:31:ea:67:4b:28:ad:06:99:9d:ff:2c:35:b0:e2:a4: 85:b7:2b:13:d3:a8:ab:af:84:5a:e5:eb:26:71:04:54:ae:5c: 8e:5f:0d:b6:84:a3:9a:3d:60:97:bf:19:90:b6:be:75:d6:72: a3:d0:05:97:0c:32:9b:31:ef:9e:71:2b:f9:bf:79:4b:3c:ba: 32:a0:a6:3b:70:58:e4:88:0a:65:ba:14:90:ec:62:29:bc:01: 22:4e:0e:13:be:e3:20:00:b0:cf:98:9b:3c:94:38:bd:41:59: 23:1d:ac:5b:54:e2:f4:f5:1c:45:7c:50:48:20:74:48:14:d4: 03:ad:2f:d8:7f:f6:1d:87:8f:10:02:4b:95:74:73:1e:d5:95: 1d:c4:07:76:63:c9:15:21:3d:9b:8a:a1:4a:c0:24:25:b3:79: 39:38:96:10:47:31:e5:c9:95:19:d3:ac:f5:47:23:4a:d8:8a: 10:e8:a4:b7:72:6c:8a:9a:f3:16:4a:f1:6d:64:f1:1d:a5:71: a6:54:4a:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHMwvsEkipsIOU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk YTM0NWU1MDItMmU0MC00OWE2LTk4NDEtNTRlOTY5ODJmNjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWTOf0KshzVbFuBxIDr+4u2nrYshD0ofaPc0 K8CVreiHUMsw3SxfyfXFgR2y0SJGuVO3z5AA3TF/IFr6eW0WABgeLnc3BQXUZ/2W YqDl3xjFgjgjR6i5N6Nv+LOnGYdGtYULl+0H/bCoX+xZRzC7a6de8FapypTJvm/T jiwuZa6D2hPGnlGkWvoQWcjdVil0mP6eJ3iQaep0Qx+EIgHiMu3F4cEARVo5AZlq M31yJgW53au8J9znBoqyEvNa/+bjTeMekkjMQrmIQg2HPBTw05beDDGbfWiWcSvz Um3oQXnHu4cQVurlZTy2LzVOlbgE2TULDrSiw+e3K6vevGAJRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBYio6SilsxuWgNrZK8zeIbBF7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMjhkNTQ5OTAtYzZjZi0z ZDEzLTljOWYtN2I3NmUxZTg3N2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi8wK+0+i/RqrneFGxZASEFoe3FIBridpD78w3my5UmI79O7DG8eX/h uoCsEeUg35+LY4c2sxt4ODHqZ0sorQaZnf8sNbDipIW3KxPTqKuvhFrl6yZxBFSu XI5fDbaEo5o9YJe/GZC2vnXWcqPQBZcMMpsx755xK/m/eUs8ujKgpjtwWOSICmW6 FJDsYim8ASJODhO+4yAAsM+YmzyUOL1BWSMdrFtU4vT1HEV8UEggdEgU1AOtL9h/ 9h2HjxACS5V0cx7VlR3EB3ZjyRUhPZuKoUrAJCWzeTk4lhBHMeXJlRnTrPVHI0rY ihDopLdybIqa8xZK8W1k8R2lcaZUSuc= -----END CERTIFICATE-----Generated at Tue Sep 22 22:19:13 2026 by rpki-client