$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9c2d970c-1621-3bcd-ab79-6f8e2e61e391.roa File: 9c2d970c-1621-3bcd-ab79-6f8e2e61e391.roa (raw, json) Hash identifier: l9ooTvkV5nFGThqm8+IA/wlI4D5oU9fsSo/RmuJIW3U= Subject key identifier: F8:4B:A3:38:AF:E0:16:ED:D0:00:34:DD:8C:25:4D:04:CB:1D:35:5F Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CD7C2C8F401BCF0EBA158 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9c2d970c-1621-3bcd-ab79-6f8e2e61e391.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 174 IP address blocks: 172.252.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:d7:c2:c8:f4:01:bc:f0:eb:a1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=27c7788e-c281-42a4-8c2b-92e2e95ed037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:c8:ad:25:13:7a:e7:4b:ba:54:71:4c:53: 1f:d3:fe:e5:2c:e0:2e:5c:a7:8f:d2:3d:62:3f:95: 6c:5c:da:4c:07:fd:10:4a:e7:28:a1:3a:20:88:8c: 4f:4b:e3:8b:26:ac:df:1b:00:4a:86:29:d9:b4:8a: 56:56:af:78:f5:b5:24:ff:b4:e7:e3:af:5a:51:34: fc:c0:64:d4:c0:d7:c7:40:30:e9:fe:8f:b3:27:00: 70:24:c6:9c:31:b6:4f:c8:d6:37:bd:88:b4:15:8b: 37:b0:67:8a:93:61:52:9f:40:f2:7f:e2:21:c3:52: ca:21:1a:80:b8:68:71:ea:dc:0b:b1:d8:aa:ca:66: 08:6f:00:2b:51:68:af:46:6f:57:85:4a:04:4f:a7: 20:a2:dc:98:30:a1:59:90:1e:ff:09:b9:db:37:d2: 4d:88:54:b5:69:e8:94:51:02:58:12:37:8c:a2:56: e2:42:08:e5:fd:42:6f:8a:1c:76:ab:74:01:83:b0: 07:05:72:b0:24:3a:3f:2d:b5:b2:5f:8e:51:49:e0: aa:46:33:fe:32:77:c3:d9:e9:3a:37:4d:77:93:0f: 97:22:cb:f7:9c:ea:00:67:f1:3e:c1:2f:73:28:b6: 7c:81:62:15:75:f1:8a:d0:af:72:6f:88:9f:65:7b: 0e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4B:A3:38:AF:E0:16:ED:D0:00:34:DD:8C:25:4D:04:CB:1D:35:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9c2d970c-1621-3bcd-ab79-6f8e2e61e391.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:68:aa:54:00:4c:20:8e:b3:d8:8b:1e:a5:45:0a:dd:20:e8: 4c:98:2c:b7:7e:73:bd:64:86:43:7a:b6:ba:49:46:04:83:5d: b4:0f:59:98:b5:a4:18:a8:5d:56:0c:fe:59:0e:44:05:03:f2: 05:73:66:43:e5:d3:20:7d:f9:6e:75:7a:8b:96:a9:11:da:c1: f7:be:87:5f:1e:aa:d3:9c:75:9b:fd:93:8d:7a:7f:c9:fe:ac: 16:16:58:19:fc:57:66:92:81:64:1e:54:ee:dc:46:27:ca:61: 96:99:5d:05:05:d5:48:b1:9e:93:eb:38:67:b6:99:6d:e4:1f: 88:e4:bf:1d:9c:7e:12:b4:fe:a9:73:c4:20:e2:7c:a6:a4:81: e5:9a:90:30:c7:85:62:f6:2c:be:32:aa:bd:31:88:37:60:69: b9:f8:ad:ff:4e:68:db:03:d4:27:2e:56:13:42:33:c4:c1:4a: fd:8c:ab:83:13:3c:75:f4:f1:2d:2a:bd:89:38:7b:e8:ac:7d: 35:a9:ca:7d:cf:c6:b9:b0:e2:f2:d1:4b:af:5c:69:57:a9:4f: 17:fd:b9:f7:62:2c:82:55:11:6b:d2:70:b3:4d:01:ee:e7:b0: 10:a1:06:c9:b8:62:3e:31:40:95:df:c6:67:1a:88:d8:a9:02: 65:8a:0b:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHNfCyPQBvPDroVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MjdjNzc4OGUtYzI4MS00MmE0LThjMmItOTJlMmU5NWVkMDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsLIrSUTeudLulRxTFMf0/7lLOAuXKeP0j1i P5VsXNpMB/0QSucooTogiIxPS+OLJqzfGwBKhinZtIpWVq949bUk/7Tn469aUTT8 wGTUwNfHQDDp/o+zJwBwJMacMbZPyNY3vYi0FYs3sGeKk2FSn0Dyf+Ihw1LKIRqA uGhx6twLsdiqymYIbwArUWivRm9XhUoET6cgotyYMKFZkB7/CbnbN9JNiFS1aeiU UQJYEjeMolbiQgjl/UJvihx2q3QBg7AHBXKwJDo/LbWyX45RSeCqRjP+MnfD2ek6 N013kw+XIsv3nOoAZ/E+wS9zKLZ8gWIVdfGK0K9yb4ifZXsOmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhLoziv4Bbt0AA03YwlTQTLHTVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvOWMyZDk3MGMtMTYyMS0z YmNkLWFiNzktNmY4ZTJlNjFlMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5oqlQATCCOs9iLHqVFCt0g6EyYLLd+c71khkN6trpJRgSDXbQPWZi1 pBioXVYM/lkORAUD8gVzZkPl0yB9+W51eouWqRHawfe+h18eqtOcdZv9k416f8n+ rBYWWBn8V2aSgWQeVO7cRifKYZaZXQUF1UixnpPrOGe2mW3kH4jkvx2cfhK0/qlz xCDifKakgeWakDDHhWL2LL4yqr0xiDdgabn4rf9OaNsD1CcuVhNCM8TBSv2Mq4MT PHX08S0qvYk4e+isfTWpyn3Pxrmw4vLRS69caVepTxf9ufdiLIJVEWvScLNNAe7n sBChBsm4Yj4xQJXfxmcaiNipAmWKC7w= -----END CERTIFICATE-----Generated at Fri Sep 25 00:19:17 2026 by rpki-client