$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2d8eccce-d98b-3fd6-aacb-d4f51bf82b10.roa File: 2d8eccce-d98b-3fd6-aacb-d4f51bf82b10.roa (raw, json) Hash identifier: Z9OlpMy9rBcG99kmkzeQhjqwsvG86Qj27RRyxqjq2wM= Subject key identifier: 2A:C0:DF:9B:98:F0:59:73:8E:6A:C4:43:35:EE:B7:59:BE:AA:75:F8 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CB0F66E232AF3C3950D00 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2d8eccce-d98b-3fd6-aacb-d4f51bf82b10.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 398781 IP address blocks: 172.252.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:b0:f6:6e:23:2a:f3:c3:95:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=7e509876-be51-434f-9e77-dc5d9e05f0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3d:f5:06:d7:d8:66:c8:c3:6a:d4:26:5c:87: d2:3e:d1:71:7d:f8:5c:1f:79:7c:40:16:c9:17:47: 39:0f:6f:c9:ab:4e:88:96:f7:91:79:af:f2:d6:84: bb:84:27:8d:7e:e6:fe:1d:f3:0f:ee:40:a5:12:e4: 9f:80:09:ac:ce:4f:11:32:4d:ed:5a:26:d3:71:33: d1:b2:41:05:65:2d:83:be:d8:aa:e0:21:a7:4c:e5: 3a:3c:c8:c4:d1:6e:3a:4b:81:8f:b8:3d:d9:83:b8: d4:b7:bb:d0:6a:64:90:52:81:72:68:72:11:45:15: c8:01:58:5d:87:10:0c:80:9b:d8:51:b7:98:17:05: 82:1f:1c:c7:d9:5d:e5:27:fd:8f:26:21:b1:7c:93: 8c:bc:81:0f:82:45:47:3b:1b:5c:c7:72:04:41:e5: 47:d2:ee:e7:98:ec:09:ae:67:f9:67:4e:2c:51:be: eb:3d:ac:19:21:a9:dd:93:68:10:fc:73:ff:9f:38: 85:c0:cf:90:07:50:0c:03:48:4e:59:79:5c:f1:ac: 11:1f:e9:a7:e2:1b:7c:9d:f3:c3:3e:53:ea:ff:70: 88:c9:a0:4a:ca:7e:39:49:80:b0:24:fe:60:58:df: 02:03:ff:cf:2c:0b:86:1d:01:20:ca:49:5f:05:6d: 1b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C0:DF:9B:98:F0:59:73:8E:6A:C4:43:35:EE:B7:59:BE:AA:75:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2d8eccce-d98b-3fd6-aacb-d4f51bf82b10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7e:60:e8:4b:59:d8:22:30:11:1f:19:fe:93:d5:55:f8:5b: 4a:a6:72:5d:d6:31:b7:28:c5:e4:4d:69:4c:e2:78:8b:98:c9: f1:2d:cc:7f:00:97:ce:a2:e3:96:f3:9a:8d:3a:42:6d:29:50: 05:bc:60:78:e1:d1:06:34:95:c1:ad:a4:5f:c4:77:ed:f7:a9: de:fd:87:d3:ea:40:35:18:68:c9:bb:b9:9c:2a:d0:c4:cb:c4: fd:46:e8:18:c2:3f:b4:e4:55:db:79:45:f0:c7:0c:24:8a:f5: ba:7c:b2:20:74:9a:1c:6d:48:be:40:19:93:7e:5e:65:46:03: ef:37:26:d8:19:c1:fc:e4:36:6e:d0:47:2f:3d:49:60:f4:03: a6:04:cc:64:9f:55:7e:83:ed:e3:39:71:46:2f:8c:9d:57:55: 8b:62:43:bb:f2:99:f8:11:20:b3:19:fa:5a:1e:08:90:38:c6: af:32:ca:bf:5e:ea:8d:b4:60:7d:fe:70:a1:5e:fc:73:be:a2: 82:01:22:35:2a:0f:fa:05:74:d4:31:a0:76:d3:1c:a4:df:aa: 37:79:65:b2:ad:ab:a5:ea:c2:8a:e4:a9:c6:c6:42:5d:6f:7c: 7c:61:11:dc:55:b4:e1:dc:16:cd:4a:47:8e:32:a1:59:de:6e: a2:a8:f0:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHLD2biMq88OVDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk N2U1MDk4NzYtYmU1MS00MzRmLTllNzctZGM1ZDllMDVmMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD31BtfYZsjDatQmXIfSPtFxffhcH3l8QBbJ F0c5D2/Jq06IlveRea/y1oS7hCeNfub+HfMP7kClEuSfgAmszk8RMk3tWibTcTPR skEFZS2Dvtiq4CGnTOU6PMjE0W46S4GPuD3Zg7jUt7vQamSQUoFyaHIRRRXIAVhd hxAMgJvYUbeYFwWCHxzH2V3lJ/2PJiGxfJOMvIEPgkVHOxtcx3IEQeVH0u7nmOwJ rmf5Z04sUb7rPawZIandk2gQ/HP/nziFwM+QB1AMA0hOWXlc8awRH+mn4ht8nfPD PlPq/3CIyaBKyn45SYCwJP5gWN8CA//PLAuGHQEgyklfBW0bwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrA35uY8FlzjmrEQzXut1m+qnX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMmQ4ZWNjY2UtZDk4Yi0z ZmQ2LWFhY2ItZDRmNTFiZjgyYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9+YOhLWdgiMBEfGf6T1VX4W0qmcl3WMbcoxeRNaUzieIuYyfEtzH8A l86i45bzmo06Qm0pUAW8YHjh0QY0lcGtpF/Ed+33qd79h9PqQDUYaMm7uZwq0MTL xP1G6BjCP7TkVdt5RfDHDCSK9bp8siB0mhxtSL5AGZN+XmVGA+83JtgZwfzkNm7Q Ry89SWD0A6YEzGSfVX6D7eM5cUYvjJ1XVYtiQ7vymfgRILMZ+loeCJA4xq8yyr9e 6o20YH3+cKFe/HO+ooIBIjUqD/oFdNQxoHbTHKTfqjd5ZbKtq6XqworkqcbGQl1v fHxhEdxVtOHcFs1KR44yoVnebqKo8AY= -----END CERTIFICATE-----Generated at Wed Sep 23 02:21:05 2026 by rpki-client