$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5c9026ec-388c-330d-9e02-c7f18c916b03.roa File: 5c9026ec-388c-330d-9e02-c7f18c916b03.roa (raw, json) Hash identifier: KLl4ASsNZaYZ/qvsS8uVuAlviuTO/tmer7jihEjTBMA= Subject key identifier: 2F:4E:4A:2F:49:3C:CE:FD:62:84:D0:FD:C7:B0:FE:9C:06:1D:B2:7F Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CD5A16F71DFC496319450 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5c9026ec-388c-330d-9e02-c7f18c916b03.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 6939 IP address blocks: 172.252.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:d5:a1:6f:71:df:c4:96:31:94:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=638b2fa9-e88f-4f6f-a0a1-f2a32fdc06ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8c:ae:48:f0:00:cd:e6:4d:f4:59:21:c4:49: 7c:c8:a1:e0:bb:20:68:5a:95:9c:77:29:0c:f3:d7: 56:eb:10:87:28:32:60:b3:ed:47:46:34:35:f2:1f: be:ff:6a:5a:f3:df:ba:0d:19:ac:77:9e:72:33:a7: b1:33:69:ad:8f:cd:c7:33:98:95:89:04:58:44:cc: 92:3e:01:5d:94:f6:12:10:97:a2:65:89:0a:19:85: fe:cb:14:4f:84:b1:59:fb:68:b7:a8:e5:95:dc:83: 25:af:af:66:ec:55:dc:ac:45:2f:5c:96:ca:a5:89: a8:8b:49:cf:7c:2e:de:b8:49:05:aa:60:c2:a8:ea: 90:ae:c2:16:74:50:bc:00:58:6c:bf:85:8a:5a:7c: 9c:51:db:80:b5:34:6d:48:ab:8d:a5:48:5a:99:a3: 36:94:a2:b6:e2:91:67:0b:92:25:db:34:49:9f:7e: 30:d7:31:8c:5c:f2:66:ae:77:e7:aa:93:bd:16:68: b0:40:8b:25:74:f1:4b:42:1d:43:be:fe:97:6a:53: dc:96:79:89:2a:8b:35:79:70:20:36:46:0a:8b:5c: f0:47:7f:c7:f7:9a:ac:f0:65:f0:29:11:fa:cb:c2: ae:9d:8b:d3:0e:80:46:2f:12:e7:70:ac:7e:b6:82: 8e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4E:4A:2F:49:3C:CE:FD:62:84:D0:FD:C7:B0:FE:9C:06:1D:B2:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5c9026ec-388c-330d-9e02-c7f18c916b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:de:73:d3:97:ac:87:b7:f0:ca:ab:f3:99:d6:be:be:c5:1c: 2a:0e:df:16:f1:3d:1e:58:02:78:ec:97:cf:91:3e:15:60:84: af:da:51:41:70:e5:2c:0a:ce:df:6b:b7:f1:76:80:ab:aa:c4: 74:74:c7:72:77:75:18:f5:98:9c:08:62:cf:d5:ed:fe:c9:1d: 02:45:4c:57:18:74:51:c3:cf:59:0e:f7:e9:82:21:8b:2f:3d: 05:15:73:31:af:78:68:eb:8c:fe:2a:c1:60:b7:2b:ed:97:4f: 59:18:20:bd:d2:26:a0:a5:06:13:29:ca:5b:e8:ca:14:2b:7d: 53:36:5a:aa:66:d8:c7:01:f0:9a:51:14:ef:b7:fc:b9:9b:b2: 09:a9:24:5c:83:9a:2d:e8:85:9f:b1:4a:e3:5f:35:61:68:d6: 38:60:3b:a6:15:80:5c:e8:20:46:41:05:27:9e:a8:af:b4:95: aa:f3:f2:20:de:2a:f5:f8:fc:bc:fa:90:28:01:c4:9d:20:00: 23:6d:8f:24:1b:35:85:0b:22:76:32:b3:57:08:00:b4:4a:76: 02:d1:69:6a:3d:1c:f3:34:96:53:87:a2:52:99:a6:6c:b1:e3: 9e:3d:9a:12:7d:ab:7b:e0:5d:6a:2f:a7:8b:ab:a1:2b:5d:f2: 2c:21:ed:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHNWhb3HfxJYxlFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NjM4YjJmYTktZTg4Zi00ZjZmLWEwYTEtZjJhMzJmZGMwNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYyuSPAAzeZN9FkhxEl8yKHguyBoWpWcdykM 89dW6xCHKDJgs+1HRjQ18h++/2pa89+6DRmsd55yM6exM2mtj83HM5iViQRYRMyS PgFdlPYSEJeiZYkKGYX+yxRPhLFZ+2i3qOWV3IMlr69m7FXcrEUvXJbKpYmoi0nP fC7euEkFqmDCqOqQrsIWdFC8AFhsv4WKWnycUduAtTRtSKuNpUhamaM2lKK24pFn C5Il2zRJn34w1zGMXPJmrnfnqpO9FmiwQIsldPFLQh1Dvv6XalPclnmJKos1eXAg NkYKi1zwR3/H95qs8GXwKRH6y8KunYvTDoBGLxLncKx+toKOUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9OSi9JPM79YoTQ/cew/pwGHbJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNWM5MDI2ZWMtMzg4Yy0z MzBkLTllMDItYzdmMThjOTE2YjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXec9OXrIe38Mqr85nWvr7FHCoO3xbxPR5YAnjsl8+RPhVghK/aUUFw 5SwKzt9rt/F2gKuqxHR0x3J3dRj1mJwIYs/V7f7JHQJFTFcYdFHDz1kO9+mCIYsv PQUVczGveGjrjP4qwWC3K+2XT1kYIL3SJqClBhMpylvoyhQrfVM2Wqpm2McB8JpR FO+3/LmbsgmpJFyDmi3ohZ+xSuNfNWFo1jhgO6YVgFzoIEZBBSeeqK+0larz8iDe KvX4/Lz6kCgBxJ0gACNtjyQbNYULInYys1cIALRKdgLRaWo9HPM0llOHolKZpmyx 4549mhJ9q3vgXWovp4uroStd8iwh7Tk= -----END CERTIFICATE-----Generated at Tue Sep 22 20:47:59 2026 by rpki-client