$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/68fb3154-896d-32c2-889e-0390b4e7e0fa.roa File: 68fb3154-896d-32c2-889e-0390b4e7e0fa.roa (raw, json) Hash identifier: xORwr3FrbIN4rqdQ0dSOisJDlDhl1YF+MHXW4lIwZBE= Subject key identifier: B4:8D:E2:B9:E8:69:DC:20:6B:F8:83:FC:A7:FC:C2:9C:B9:93:C8:BB Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CE4A1284B3F0B49209780 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/68fb3154-896d-32c2-889e-0390b4e7e0fa.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 18779 IP address blocks: 45.38.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:e4:a1:28:4b:3f:0b:49:20:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=d372199a-57b4-4db1-82dd-28846fc82069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a4:15:54:7f:d1:30:1b:2b:df:79:88:71:f6: 2f:30:8d:64:c3:0d:cf:63:7a:69:e0:61:fe:7c:4e: a5:31:c6:52:ee:b6:12:91:4a:14:04:d1:f4:64:bc: df:84:52:9f:43:fa:28:c2:f7:6e:f8:e3:29:c5:93: 58:82:5a:92:e7:66:eb:6f:c1:19:b4:3b:74:e2:38: 50:61:17:a4:dd:62:46:1d:32:e8:eb:b5:34:d3:6f: e4:6b:08:c8:c2:56:75:87:4c:0b:ad:39:8e:73:7c: 59:5c:83:3e:32:4e:00:d3:21:38:01:d2:61:f4:d0: 06:b2:96:90:c8:9d:cd:ca:4d:fa:4f:61:25:0f:36: aa:d4:67:83:15:d3:b3:7c:ab:44:c8:d6:f7:37:aa: 0d:7b:b1:ba:f0:fd:4d:c3:1b:99:68:7e:f3:3a:bf: b9:00:c8:00:0d:e6:42:9c:d5:69:d2:18:f4:7f:e1: 36:d0:5e:bd:96:f2:23:e0:14:a8:bf:55:56:a0:e6: 7c:1b:88:dd:72:89:7d:c4:7e:78:dc:b6:65:bc:d0: 6c:f8:14:45:c7:db:c1:b0:d9:f2:b4:11:63:7a:44: a1:1c:67:5b:42:65:1a:5f:42:32:a3:1f:65:19:7f: 24:d9:9a:8f:bb:9e:7e:58:6f:d7:46:8d:49:de:6b: 34:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8D:E2:B9:E8:69:DC:20:6B:F8:83:FC:A7:FC:C2:9C:B9:93:C8:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/68fb3154-896d-32c2-889e-0390b4e7e0fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 45.38.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f7:9b:d2:ad:07:20:bb:fa:b7:51:42:3a:28:97:81:f0:7b: f7:f6:dd:f3:fa:ec:86:85:9c:cb:3e:e3:86:9f:22:06:d7:bb: 07:44:f1:c8:29:ea:d1:ec:99:30:ea:d9:8e:92:94:5f:8c:aa: 39:0c:e4:8c:8f:eb:9d:41:99:0b:d3:1e:a8:f2:81:77:e5:53: 8d:e5:23:51:d3:64:e5:4c:05:66:53:dd:35:a1:80:b3:23:8c: bb:02:99:70:6d:c7:34:c5:0a:0e:b1:46:5c:76:20:b3:b4:d2: d1:02:84:07:d4:cb:d9:71:6b:2e:5d:e8:e2:ec:c1:c4:3f:0b: a2:03:a5:a4:a4:c1:20:75:bf:65:d7:35:81:ab:53:d3:04:15: 1d:f5:1a:c4:eb:ae:96:f8:71:ab:ab:f6:89:a4:44:7e:97:6f: 7f:56:5d:c3:46:7a:00:08:f9:76:b7:fb:4e:28:6d:dc:62:3f: 03:7e:41:55:e6:c1:f2:e6:00:a3:2d:28:02:92:dc:ad:47:3f: ce:fa:a4:87:9a:1d:7c:48:e9:ef:f7:ad:8d:eb:cf:4c:60:2c: c2:f0:e3:80:65:6d:10:03:13:03:c0:1f:fc:01:d3:52:bc:43: 21:3c:de:5b:56:1e:41:f0:c0:bf:70:63:eb:0c:12:4f:73:d4: 12:69:cc:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHOShKEs/C0kgl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZDM3MjE5OWEtNTdiNC00ZGIxLTgyZGQtMjg4NDZmYzgyMDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKQVVH/RMBsr33mIcfYvMI1kww3PY3pp4GH+ fE6lMcZS7rYSkUoUBNH0ZLzfhFKfQ/oowvdu+OMpxZNYglqS52brb8EZtDt04jhQ YRek3WJGHTLo67U002/kawjIwlZ1h0wLrTmOc3xZXIM+Mk4A0yE4AdJh9NAGspaQ yJ3Nyk36T2ElDzaq1GeDFdOzfKtEyNb3N6oNe7G68P1NwxuZaH7zOr+5AMgADeZC nNVp0hj0f+E20F69lvIj4BSov1VWoOZ8G4jdcol9xH543LZlvNBs+BRFx9vBsNny tBFjekShHGdbQmUaX0Iyox9lGX8k2ZqPu55+WG/XRo1J3ms0UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSN4rnoadwga/iD/Kf8wpy5k8i7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNjhmYjMxNTQtODk2ZC0z MmMyLTg4OWUtMDM5MGI0ZTdlMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSb+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb3m9KtByC7+rdRQjool4Hwe/f23fP67IaFnMs+44afIgbXuwdE8cgp 6tHsmTDq2Y6SlF+MqjkM5IyP651BmQvTHqjygXflU43lI1HTZOVMBWZT3TWhgLMj jLsCmXBtxzTFCg6xRlx2ILO00tEChAfUy9lxay5d6OLswcQ/C6IDpaSkwSB1v2XX NYGrU9MEFR31GsTrrpb4caur9omkRH6Xb39WXcNGegAI+Xa3+04obdxiPwN+QVXm wfLmAKMtKAKS3K1HP876pIeaHXxI6e/3rY3rz0xgLMLw44BlbRADEwPAH/wB01K8 QyE83ltWHkHwwL9wY+sMEk9z1BJpzOg= -----END CERTIFICATE-----Generated at Tue Sep 22 21:49:42 2026 by rpki-client