$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/66b941fd-9488-3289-b7a7-01d0f71c24a2.roa File: 66b941fd-9488-3289-b7a7-01d0f71c24a2.roa (raw, json) Hash identifier: 4O2CeLvBTNjVoAXcXHODcQBDDPBqCmfySv+k2PVKArY= Subject key identifier: C6:4E:5D:F1:F2:25:79:1F:5A:B4:DD:D8:D1:06:8F:BA:64:3E:CD:88 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CCD2992A4CC6531E1FF00 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/66b941fd-9488-3289-b7a7-01d0f71c24a2.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 9009 IP address blocks: 104.253.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:cd:29:92:a4:cc:65:31:e1:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=847d7cc3-d20e-4026-a2c5-a0a718cd5f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:61:bb:09:4e:65:f6:f0:a4:bf:1b:d1:95: bf:07:ec:e7:87:6b:4a:67:ca:f4:d0:d9:c5:26:b7: e2:d2:2b:2d:eb:84:84:e4:f2:bf:6f:b7:dc:ba:24: e0:82:d1:0f:78:2a:4e:f4:bd:f4:98:70:7e:97:39: 1e:99:d1:23:c7:52:aa:49:43:ca:d8:33:c0:fb:5e: 1e:68:9d:a9:30:4a:36:3d:1e:b5:f5:44:06:67:2b: a9:f6:7e:25:df:67:cf:e3:49:07:61:7d:36:e3:35: f6:39:5f:81:45:58:e5:32:ce:d0:85:5a:21:07:73: 11:36:5d:82:70:94:db:0e:75:55:d0:d6:8c:06:fd: 8f:f2:d8:5d:95:61:e3:9a:07:00:9e:7b:ef:5f:5c: 26:84:04:46:b5:7d:14:3f:ec:d9:ec:d7:48:cc:ac: cb:63:7e:19:f8:8d:02:a9:c9:69:4f:8f:eb:62:1c: 37:b3:88:fe:46:17:72:4a:cb:66:67:3d:4c:61:39: 02:19:9f:3f:fd:c3:1b:e2:9a:8b:f4:9f:06:4f:8c: 06:4c:0e:2d:c5:15:0e:0f:03:03:53:bc:aa:27:a6: 6a:6f:17:67:71:a1:f9:b2:8c:f4:6c:99:8a:11:96: cc:fe:fe:18:f5:e7:20:f6:dc:32:d1:dc:65:42:80: 48:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4E:5D:F1:F2:25:79:1F:5A:B4:DD:D8:D1:06:8F:BA:64:3E:CD:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/66b941fd-9488-3289-b7a7-01d0f71c24a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.253.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c1:ef:71:4f:61:37:df:3a:89:b9:a5:f9:6f:37:b7:c9:d2: 98:be:5a:87:f4:c1:fe:e8:d9:aa:30:28:e5:fe:80:3b:65:a4: 6e:24:bc:72:16:c1:d6:04:bd:64:73:83:53:91:cc:87:96:78: 6a:f7:36:31:c9:22:38:ec:87:90:72:3f:25:dc:42:1c:a3:f2: 78:ef:69:8c:97:75:00:d1:4a:35:e0:f2:b0:0c:b1:a9:0a:a6: 49:68:6b:ab:70:98:3a:40:5d:fe:42:6b:f2:5e:99:0f:ca:72: 73:8c:19:c5:c4:d4:15:40:88:ce:91:ed:04:c7:47:d3:07:54: ce:cb:f6:06:77:68:b1:3b:4d:87:94:b4:f1:23:6e:21:8e:99: 50:72:74:28:55:c5:9d:c0:2c:d6:32:99:75:6d:e9:9b:43:50: fc:0f:3e:57:ee:e7:c1:45:9a:b0:3a:78:0d:e2:70:65:c2:28: 82:e3:d4:3c:9b:6a:5c:de:e5:e0:bb:b6:a0:6d:44:ff:16:50: e2:80:f0:7d:0f:2f:b9:60:12:92:b2:77:8c:9f:70:fa:c0:f8: c3:b2:59:76:f7:8b:bc:1c:ad:1e:18:c9:1b:fb:34:37:30:a0: dc:67:70:7c:7d:fa:a1:5a:7c:fe:74:66:32:af:e5:cc:f4:97: 10:ff:87:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHM0pkqTMZTHh/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ODQ3ZDdjYzMtZDIwZS00MDI2LWEyYzUtYTBhNzE4Y2Q1ZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwethuwlOZfbwpL8b0ZW/B+znh2tKZ8r00NnF Jrfi0ist64SE5PK/b7fcuiTggtEPeCpO9L30mHB+lzkemdEjx1KqSUPK2DPA+14e aJ2pMEo2PR619UQGZyup9n4l32fP40kHYX024zX2OV+BRVjlMs7QhVohB3MRNl2C cJTbDnVV0NaMBv2P8thdlWHjmgcAnnvvX1wmhARGtX0UP+zZ7NdIzKzLY34Z+I0C qclpT4/rYhw3s4j+RhdySstmZz1MYTkCGZ8//cMb4pqL9J8GT4wGTA4txRUODwMD U7yqJ6ZqbxdncaH5soz0bJmKEZbM/v4Y9ecg9twy0dxlQoBInwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZOXfHyJXkfWrTd2NEGj7pkPs2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNjZiOTQxZmQtOTQ4OC0z Mjg5LWI3YTctMDFkMGY3MWMyNGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXB73FPYTffOom5pflvN7fJ0pi+Wof0wf7o2aowKOX+gDtlpG4kvHIW wdYEvWRzg1ORzIeWeGr3NjHJIjjsh5ByPyXcQhyj8njvaYyXdQDRSjXg8rAMsakK pkloa6twmDpAXf5Ca/JemQ/KcnOMGcXE1BVAiM6R7QTHR9MHVM7L9gZ3aLE7TYeU tPEjbiGOmVBydChVxZ3ALNYymXVt6ZtDUPwPPlfu58FFmrA6eA3icGXCKILj1Dyb alze5eC7tqBtRP8WUOKA8H0PL7lgEpKyd4yfcPrA+MOyWXb3i7wcrR4YyRv7NDcw oNxncHx9+qFafP50ZjKv5cz0lxD/h88= -----END CERTIFICATE-----Generated at Sun Sep 20 18:51:21 2026 by rpki-client