$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/68e8e202-8ff5-3de5-85e7-f6894acbbabd.roa File: 68e8e202-8ff5-3de5-85e7-f6894acbbabd.roa (raw, json) Hash identifier: oONlDkrGXS1/lgBx2AL22p2WmxrOK6mMF3y569GTozE= Subject key identifier: 15:EA:F2:59:94:CC:B9:E5:00:F4:BD:C0:54:35:4D:64:6E:CE:BE:83 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CC6E721FF00F8FB4860C0 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/68e8e202-8ff5-3de5-85e7-f6894acbbabd.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 9009 IP address blocks: 172.252.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:c6:e7:21:ff:00:f8:fb:48:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=e39d3a8b-5802-4d46-8585-09601ac5a29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:e9:91:81:5f:dd:80:e8:9f:44:89:f0:8e: 9d:47:dc:35:3c:8e:54:cb:5b:fd:7e:cd:cd:04:f7: 66:e2:09:8a:49:27:f5:38:36:89:c0:67:18:a1:69: 88:ee:0d:87:c8:46:28:9e:c7:58:9a:c0:2a:eb:15: a9:d2:4f:7a:a2:b9:4f:4e:c8:69:ec:5a:8f:94:41: 9f:1d:14:3d:03:93:85:30:86:7b:28:91:a7:6e:0b: 85:b2:98:5e:1b:bd:d5:49:7d:79:de:3e:39:9e:9d: 72:a0:6d:d1:62:1d:55:15:c8:1e:e4:55:80:9f:40: a4:88:5f:ac:2a:78:a7:ae:02:c4:be:d3:cc:d7:42: cd:ec:87:17:a0:79:fc:2a:23:64:f2:fe:b8:8a:a8: f8:6e:11:f2:9e:a3:2d:f3:39:9c:6a:0a:fe:33:07: de:e2:5d:b3:5a:56:0d:a0:34:ab:1b:79:7a:fc:c1: 57:e0:67:7a:74:b9:39:45:98:0c:74:29:15:9a:ad: ce:34:d0:0f:f6:2a:b4:c8:91:29:ef:b6:0e:2a:f7: 65:81:3d:e4:ed:36:7c:3c:e9:b7:69:ca:d2:6e:75: 1d:ce:ed:13:0c:97:2f:84:3b:9f:b1:f1:71:8b:d6: 73:47:da:c7:78:16:00:53:d5:c8:ac:46:d1:0d:3b: b3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EA:F2:59:94:CC:B9:E5:00:F4:BD:C0:54:35:4D:64:6E:CE:BE:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/68e8e202-8ff5-3de5-85e7-f6894acbbabd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:73:02:83:57:d4:dd:b0:48:15:d9:62:22:bf:0b:86:bc:ce: 40:e3:f9:08:70:40:6d:42:3c:09:ec:a8:12:63:bb:74:c1:4e: 97:c9:09:f8:2a:6b:7f:bb:22:19:c4:d5:01:e9:f9:f0:32:96: 5b:0b:3a:6b:ee:92:ee:73:bf:b1:dd:dd:92:1e:0e:f3:11:7a: 03:43:31:c3:55:8a:a5:38:c8:7a:25:fb:89:e8:6c:b6:0f:5a: af:09:10:2a:6a:46:6b:a1:24:c2:9a:40:50:42:9e:0e:f0:4e: a1:de:a7:6a:15:85:a6:44:c3:97:c4:ae:9c:c1:3e:b6:f3:71: 72:cc:3f:6e:de:dc:b6:60:82:d8:21:45:6b:25:c0:2b:1d:12: 48:e9:be:33:98:c9:c4:bb:01:2e:d5:c9:b8:13:b4:ab:32:fe: 83:28:ad:60:6c:27:4d:d7:e2:cd:84:28:f6:6d:b9:01:3c:81: cc:37:8f:ac:47:50:ab:01:86:56:a4:65:7f:7d:23:39:1f:9b: b6:38:d4:d7:fb:05:76:7d:2d:9a:55:e8:c5:65:35:d6:bb:48: 7d:08:ea:58:f6:ed:aa:0e:2e:c9:15:35:36:26:26:64:43:69: 94:4d:fc:7b:79:b1:81:84:39:7e:6b:36:49:b8:cb:89:95:5f: 84:d4:48:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHMbnIf8A+PtIYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZTM5ZDNhOGItNTgwMi00ZDQ2LTg1ODUtMDk2MDFhYzVhMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiLpkYFf3YDon0SJ8I6dR9w1PI5Uy1v9fs3N BPdm4gmKSSf1ODaJwGcYoWmI7g2HyEYonsdYmsAq6xWp0k96orlPTshp7FqPlEGf HRQ9A5OFMIZ7KJGnbguFspheG73VSX153j45np1yoG3RYh1VFcge5FWAn0CkiF+s KninrgLEvtPM10LN7IcXoHn8KiNk8v64iqj4bhHynqMt8zmcagr+Mwfe4l2zWlYN oDSrG3l6/MFX4Gd6dLk5RZgMdCkVmq3ONNAP9iq0yJEp77YOKvdlgT3k7TZ8POm3 acrSbnUdzu0TDJcvhDufsfFxi9ZzR9rHeBYAU9XIrEbRDTuzZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXq8lmUzLnlAPS9wFQ1TWRuzr6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNjhlOGUyMDItOGZmNS0z ZGU1LTg1ZTctZjY4OTRhY2JiYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANzAoNX1N2wSBXZYiK/C4a8zkDj+QhwQG1CPAnsqBJju3TBTpfJCfgq a3+7IhnE1QHp+fAyllsLOmvuku5zv7Hd3ZIeDvMRegNDMcNViqU4yHol+4nobLYP Wq8JECpqRmuhJMKaQFBCng7wTqHep2oVhaZEw5fErpzBPrbzcXLMP27e3LZggtgh RWslwCsdEkjpvjOYycS7AS7VybgTtKsy/oMorWBsJ03X4s2EKPZtuQE8gcw3j6xH UKsBhlakZX99Izkfm7Y41Nf7BXZ9LZpV6MVlNda7SH0I6lj27aoOLskVNTYmJmRD aZRN/Ht5sYGEOX5rNkm4y4mVX4TUSLs= -----END CERTIFICATE-----Generated at Sun Sep 27 04:50:54 2026 by rpki-client