$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ba4926f6-8ac7-3579-a81c-2e60f568657d.roa File: ba4926f6-8ac7-3579-a81c-2e60f568657d.roa (raw, json) Hash identifier: 13DZPGC8rc0eULgFFLHK5mYOEyN4HDUazWi3e4wCZ1c= Subject key identifier: 44:27:91:29:D0:34:C3:F6:FB:AB:8A:97:C3:78:29:EE:25:41:AC:1A Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CDC63D499E5C03EA2C940 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ba4926f6-8ac7-3579-a81c-2e60f568657d.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 10557 IP address blocks: 104.253.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:dc:63:d4:99:e5:c0:3e:a2:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=7b9a61d6-7c65-4228-95db-739381b8b77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:7a:a5:32:c3:f6:f6:1c:fe:b4:96:c1:7f: 1e:56:1c:73:3a:4a:3c:af:f6:28:e2:98:b8:26:3f: 25:8a:3b:2f:a3:d8:f3:cf:bd:b6:3c:e9:a3:0e:cf: 89:6e:d3:f2:02:9a:ec:fa:ae:38:1d:50:11:9b:42: 83:4a:c0:00:c8:60:f5:6c:08:72:03:5b:fd:d3:97: 17:bc:6d:fa:05:47:06:7e:f6:0a:c8:4c:7e:3d:0e: 1b:54:c8:d0:23:c0:7d:45:0e:a2:c8:44:59:19:d3: b9:93:80:6b:49:8d:db:71:a5:55:e6:80:4e:ce:3b: f9:a0:c7:81:5c:65:0a:eb:53:7a:fb:47:db:62:e8: 9d:0f:31:43:35:17:73:f8:a2:ba:ad:d9:f5:d0:f0: bc:ec:94:2e:a7:26:b2:4f:ba:60:7d:e4:14:8d:4a: a8:06:4f:77:8f:13:af:98:15:b2:dd:be:f6:4f:25: a3:40:e8:17:9a:96:9f:8c:3a:2b:17:08:1e:50:d2: aa:c9:e2:83:3c:ee:7c:43:bc:98:19:68:8c:20:1a: fb:84:38:49:06:8e:94:7e:e1:4c:12:d8:aa:25:dd: 4b:73:24:72:31:34:c0:49:b6:a8:ab:2c:1c:de:74: b4:5c:90:f9:3f:71:ad:91:36:be:93:ac:cc:ea:ca: 72:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:27:91:29:D0:34:C3:F6:FB:AB:8A:97:C3:78:29:EE:25:41:AC:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ba4926f6-8ac7-3579-a81c-2e60f568657d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.253.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d3:b4:72:24:c0:f2:d5:ec:c4:23:d0:ba:d2:dd:1f:8d:30: 8d:22:9f:06:1e:10:b0:b6:0a:b0:2b:d1:49:a3:39:18:93:42: b9:c9:4d:9e:64:78:7f:f6:5a:d2:25:7c:1b:08:bf:db:23:88: 86:35:ad:12:d5:8a:9a:cf:0d:45:0e:10:b8:11:b4:9c:6c:38: 98:9f:c2:92:69:22:b6:5a:93:dd:e7:4c:6d:9f:9c:e8:05:bb: 85:c0:65:1f:2e:6c:1b:b5:8b:67:2f:97:72:cd:27:9c:ab:ba: ee:27:dc:1e:78:38:79:d3:39:84:a2:c7:f7:99:d4:54:1d:62: a1:8c:f0:44:6d:bc:5b:f8:9d:25:c1:12:9e:c4:b4:4b:ba:d9: 3f:ab:a5:b7:65:f6:35:51:53:cc:ca:d8:6c:59:b3:0a:45:68: 37:a3:0b:00:da:cf:f3:82:02:a2:88:5b:05:ae:43:19:0c:cc: b2:18:96:3f:dc:e6:3c:6a:13:25:13:95:b8:f8:0d:67:ba:74: f8:1a:30:a8:76:f6:ce:ed:e3:31:b6:b3:1b:16:28:f4:53:7b: 14:42:9e:db:28:05:1d:c9:f7:65:1d:93:ad:0a:6b:8c:c0:ad: 26:e1:d1:d1:46:8d:d3:5c:a8:17:a8:e8:52:ce:41:a8:e8:61: 2c:92:28:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHNxj1JnlwD6iyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk N2I5YTYxZDYtN2M2NS00MjI4LTk1ZGItNzM5MzgxYjhiNzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSx6pTLD9vYc/rSWwX8eVhxzOko8r/Yo4pi4 Jj8lijsvo9jzz722POmjDs+JbtPyAprs+q44HVARm0KDSsAAyGD1bAhyA1v905cX vG36BUcGfvYKyEx+PQ4bVMjQI8B9RQ6iyERZGdO5k4BrSY3bcaVV5oBOzjv5oMeB XGUK61N6+0fbYuidDzFDNRdz+KK6rdn10PC87JQupyayT7pgfeQUjUqoBk93jxOv mBWy3b72TyWjQOgXmpafjDorFwgeUNKqyeKDPO58Q7yYGWiMIBr7hDhJBo6UfuFM EtiqJd1LcyRyMTTASbaoqywc3nS0XJD5P3GtkTa+k6zM6spySwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQnkSnQNMP2+6uKl8N4Ke4lQawaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYmE0OTI2ZjYtOGFjNy0z NTc5LWE4MWMtMmU2MGY1Njg2NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP0qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnTtHIkwPLV7MQj0LrS3R+NMI0inwYeELC2CrAr0UmjORiTQrnJTZ5k eH/2WtIlfBsIv9sjiIY1rRLViprPDUUOELgRtJxsOJifwpJpIrZak93nTG2fnOgF u4XAZR8ubBu1i2cvl3LNJ5yruu4n3B54OHnTOYSix/eZ1FQdYqGM8ERtvFv4nSXB Ep7EtEu62T+rpbdl9jVRU8zK2GxZswpFaDejCwDaz/OCAqKIWwWuQxkMzLIYlj/c 5jxqEyUTlbj4DWe6dPgaMKh29s7t4zG2sxsWKPRTexRCntsoBR3J92Udk60Ka4zA rSbh0dFGjdNcqBeo6FLOQajoYSySKNc= -----END CERTIFICATE-----Generated at Sun Oct 4 01:32:39 2026 by rpki-client