$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/afcab7cf-1ebf-31b0-b765-510dc1e7955e.roa File: afcab7cf-1ebf-31b0-b765-510dc1e7955e.roa (raw, json) Hash identifier: 6E0a4wZkM0qNvWkMs5KFdkei8iId3GbpC309STk5RoA= Subject key identifier: 3E:7F:B2:D0:F7:2F:22:0F:8C:09:84:01:25:23:CE:11:0A:D5:8A:CE Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EA7976471AAFF24D399EC7480 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/afcab7cf-1ebf-31b0-b765-510dc1e7955e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3561 IP address blocks: 172.252.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:64:71:aa:ff:24:d3:99:ec:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8d67c0a9-45cd-4be1-963b-a238ffc4b083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f7:f2:a6:64:59:a1:13:91:fd:89:aa:f7:9c: a9:6b:41:9d:95:f4:c6:c7:fa:c4:1d:bb:c1:b4:2f: 25:4e:ac:92:a6:82:47:18:1e:58:3a:fa:f3:6d:e3: 8d:28:09:97:c2:64:3f:3b:d8:a4:22:b9:51:a9:9e: 07:56:03:36:ab:9a:f4:9e:09:1e:b4:c2:a7:2b:92: a3:22:50:09:b9:2c:c9:32:ce:9c:15:ea:dd:37:65: 8c:41:cc:69:35:3c:a4:a2:74:10:f2:15:ad:2a:37: 81:dd:a3:38:d3:e0:a4:83:13:1a:5a:1e:29:0f:fd: 81:25:9e:ac:f8:0b:e8:93:95:88:b4:6c:44:9b:2b: 63:97:bc:7a:79:21:c7:7f:ce:0e:93:36:01:46:fc: 9f:57:f1:46:ed:24:83:61:5e:48:af:df:97:77:24: e7:10:de:e1:dc:ac:e5:36:b4:05:4a:9b:4b:43:c3: 89:e5:6c:80:1b:ad:3c:82:5d:08:b2:3a:ef:90:3d: 13:1a:11:ec:df:00:2f:6d:35:0b:21:99:55:6e:9f: 81:b2:f1:e3:cf:80:4e:f0:9d:98:6d:67:a7:3a:92: e0:0e:8a:d1:86:04:64:c5:ae:4d:21:70:8b:27:59: 7a:3e:f9:56:8c:08:f5:11:f1:63:99:18:be:69:3a: 30:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7F:B2:D0:F7:2F:22:0F:8C:09:84:01:25:23:CE:11:0A:D5:8A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/afcab7cf-1ebf-31b0-b765-510dc1e7955e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:07:d8:4e:77:c5:39:0f:8c:37:4e:0f:35:dd:9f:12:73:ce: 7f:18:28:b4:96:ea:5c:77:1f:86:16:82:b3:e9:ad:46:d4:a5: db:18:be:49:d1:f8:59:7b:0d:78:c6:5c:e2:82:55:5f:45:a6: bc:f8:4c:22:2a:1a:ed:a4:32:8c:ac:fb:9e:1c:3b:e1:d4:0f: 83:6f:c7:b1:62:0a:97:0b:d2:62:89:57:66:15:7d:cc:6b:01: e9:1b:53:fa:25:f7:5b:75:1a:99:9f:e3:c6:18:b3:9f:55:16: bd:c6:0e:dd:12:01:f8:bb:3f:19:93:2a:d6:e0:23:bd:fd:f4: f3:57:15:05:2e:10:70:02:a8:10:24:a7:1c:9f:6b:e0:3d:c8: 34:99:c4:8b:0e:9c:a7:97:3d:3f:14:da:7a:0e:bf:07:aa:80: 56:0c:58:d2:68:6c:1c:46:19:ec:c9:da:5f:98:a5:86:9b:ab: 40:1d:3f:ef:05:a5:a2:45:49:79:a7:eb:a0:f6:12:0f:2f:8b: 23:15:81:84:20:07:1d:15:b6:ae:a7:31:fa:a3:67:a1:59:e8: a3:5c:0a:43:17:99:b7:ca:26:1a:08:8f:a9:b5:90:fe:bb:62: 79:30:74:79:31:ac:48:bd:de:30:db:a9:09:67:f2:e1:1d:87: 00:49:af:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl2Rxqv8k05nsdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGQ2N2MwYTktNDVjZC00YmUxLTk2M2ItYTIzOGZmYzRiMDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApffypmRZoROR/Ymq95ypa0GdlfTGx/rEHbvB tC8lTqySpoJHGB5YOvrzbeONKAmXwmQ/O9ikIrlRqZ4HVgM2q5r0ngketMKnK5Kj IlAJuSzJMs6cFerdN2WMQcxpNTykonQQ8hWtKjeB3aM40+CkgxMaWh4pD/2BJZ6s +Avok5WItGxEmytjl7x6eSHHf84OkzYBRvyfV/FG7SSDYV5Ir9+XdyTnEN7h3Kzl NrQFSptLQ8OJ5WyAG608gl0IsjrvkD0TGhHs3wAvbTULIZlVbp+BsvHjz4BO8J2Y bWenOpLgDorRhgRkxa5NIXCLJ1l6PvlWjAj1EfFjmRi+aTow6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5/stD3LyIPjAmEASUjzhEK1YrOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYWZjYWI3Y2YtMWViZi0z MWIwLWI3NjUtNTEwZGMxZTc5NTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0H2E53xTkPjDdODzXdnxJzzn8YKLSW6lx3H4YWgrPprUbUpdsYvknR +Fl7DXjGXOKCVV9Fprz4TCIqGu2kMoys+54cO+HUD4Nvx7FiCpcL0mKJV2YVfcxr AekbU/ol91t1Gpmf48YYs59VFr3GDt0SAfi7PxmTKtbgI7399PNXFQUuEHACqBAk pxyfa+A9yDSZxIsOnKeXPT8U2noOvweqgFYMWNJobBxGGezJ2l+YpYabq0AdP+8F paJFSXmn66D2Eg8viyMVgYQgBx0Vtq6nMfqjZ6FZ6KNcCkMXmbfKJhoIj6m1kP67 YnkwdHkxrEi93jDbqQln8uEdhwBJryw= -----END CERTIFICATE-----Generated at Wed Jul 29 15:34:08 2026 by rpki-client