$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/875aaf5a-4d4d-3e9f-9542-4861e3bcde5f.roa File: 875aaf5a-4d4d-3e9f-9542-4861e3bcde5f.roa (raw, json) Hash identifier: VZkvqF7IOzGFUa0Egk7sBk1tPan7wO+LFtW6vzfEH6I= Subject key identifier: A2:F0:7B:9F:43:ED:FA:1A:ED:C2:DC:D6:17:EC:88:B2:09:84:88:AD Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CC26B86CF59D26666C980 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/875aaf5a-4d4d-3e9f-9542-4861e3bcde5f.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 59253 IP address blocks: 172.252.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:c2:6b:86:cf:59:d2:66:66:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=48efd0a7-1774-4982-b957-c51944708211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5f:b0:6c:ba:c1:22:22:4f:71:5d:b2:b9:29: ed:4f:68:f2:ab:5a:62:da:3a:ac:dc:69:c2:de:51: c1:97:db:8a:ed:df:46:d5:be:95:64:52:51:69:07: 4e:d7:ff:65:8c:79:65:b2:af:d0:d2:b7:fa:8b:33: b0:c4:67:6b:ff:d3:19:08:fe:f6:e6:9d:d3:db:15: 74:69:d1:4d:09:37:f4:4a:d9:31:52:b4:c2:5e:50: c0:bc:76:bb:59:97:26:91:ed:d2:ca:7f:52:41:b4: 70:c5:08:51:a3:c7:9a:c2:bd:c5:e1:61:62:b7:a0: 12:79:83:65:a4:13:2b:50:f4:10:68:cc:2f:3e:f0: 3e:08:bb:c7:ba:bf:bb:b9:56:51:ae:6a:e1:bd:84: ea:72:0b:3f:62:ec:67:b5:da:83:fc:84:42:5e:47: fb:cb:a6:f8:a0:46:cf:aa:69:71:e0:76:ee:2f:d1: 87:ef:66:71:ca:91:39:02:5f:d6:d2:60:09:87:c0: ed:31:28:9a:39:89:06:23:61:34:9c:bf:73:04:52: df:56:3f:e3:7a:a1:42:5a:86:fd:af:5e:da:eb:3f: f6:08:a9:ef:8e:bb:6d:bf:06:69:b4:d1:1d:97:41: 93:58:d1:84:0e:9c:12:36:9f:88:51:22:73:26:6d: 13:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F0:7B:9F:43:ED:FA:1A:ED:C2:DC:D6:17:EC:88:B2:09:84:88:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/875aaf5a-4d4d-3e9f-9542-4861e3bcde5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c7:ac:59:21:d0:cf:4e:66:87:48:17:05:86:71:a3:af:0d: e1:42:ce:3a:31:c0:d6:66:ba:82:62:6f:e0:4b:92:a6:0c:38: b8:d8:ca:53:32:e4:9b:2c:4b:7c:4e:71:bf:03:3a:0d:db:f2: 8e:9f:a9:b3:50:d0:6b:90:87:eb:5f:b4:f4:84:e0:21:05:d6: 85:9f:41:57:10:21:53:40:ec:04:72:0c:84:48:38:75:a2:5e: 2c:dc:d0:f5:4c:ef:22:40:ce:d6:34:7b:14:4d:56:ca:13:18: 84:1f:24:98:16:66:a4:66:4a:e8:bc:2c:af:5f:01:d9:d4:5f: dc:c4:d6:6f:de:83:5d:9a:06:a4:bc:c8:6c:61:72:8e:40:5d: ed:fc:64:af:23:50:75:7d:a3:de:fc:02:88:70:61:5b:4e:93: 07:cf:77:5a:6c:19:1c:ca:de:cc:60:7b:55:9a:79:dc:14:62: 1a:84:4b:ad:76:a7:b1:5e:dd:81:38:da:c2:42:cb:eb:ac:4e: 00:01:9e:2e:78:1a:6f:85:0f:10:d2:50:d4:69:26:22:9d:86: d0:bc:6d:17:dd:07:bd:d2:5a:35:2a:2b:87:68:61:ae:32:05: 97:90:7f:17:68:a3:82:77:7d:e7:c3:a3:ed:06:da:95:f7:71: d6:59:83:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHMJrhs9Z0mZmyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NDhlZmQwYTctMTc3NC00OTgyLWI5NTctYzUxOTQ0NzA4MjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV+wbLrBIiJPcV2yuSntT2jyq1pi2jqs3GnC 3lHBl9uK7d9G1b6VZFJRaQdO1/9ljHllsq/Q0rf6izOwxGdr/9MZCP725p3T2xV0 adFNCTf0StkxUrTCXlDAvHa7WZcmke3Syn9SQbRwxQhRo8eawr3F4WFit6ASeYNl pBMrUPQQaMwvPvA+CLvHur+7uVZRrmrhvYTqcgs/YuxntdqD/IRCXkf7y6b4oEbP qmlx4HbuL9GH72ZxypE5Al/W0mAJh8DtMSiaOYkGI2E0nL9zBFLfVj/jeqFCWob9 r17a6z/2CKnvjrttvwZptNEdl0GTWNGEDpwSNp+IUSJzJm0TrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLwe59D7foa7cLc1hfsiLIJhIitMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvODc1YWFmNWEtNGQ0ZC0z ZTlmLTk1NDItNDg2MWUzYmNkZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzHrFkh0M9OZodIFwWGcaOvDeFCzjoxwNZmuoJib+BLkqYMOLjYylMy 5JssS3xOcb8DOg3b8o6fqbNQ0GuQh+tftPSE4CEF1oWfQVcQIVNA7ARyDIRIOHWi Xizc0PVM7yJAztY0exRNVsoTGIQfJJgWZqRmSui8LK9fAdnUX9zE1m/eg12aBqS8 yGxhco5AXe38ZK8jUHV9o978AohwYVtOkwfPd1psGRzK3sxge1WaedwUYhqES612 p7Fe3YE42sJCy+usTgABni54Gm+FDxDSUNRpJiKdhtC8bRfdB73SWjUqK4doYa4y BZeQfxdoo4J3fefDo+0G2pX3cdZZg8E= -----END CERTIFICATE-----Generated at Tue Sep 22 10:49:50 2026 by rpki-client