$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bb36344c-d254-367e-a2be-2bead9670b5b.roa File: bb36344c-d254-367e-a2be-2bead9670b5b.roa (raw, json) Hash identifier: NA8+kgNWhUgKm8dRakKzPPaG87cvNlYuWtMzBEzCdf8= Subject key identifier: 3B:CF:44:BD:0C:FF:AD:2C:8A:93:73:DD:BB:3C:0C:D3:0E:7C:58:57 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CA7E2FF8E910F9E627680 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bb36344c-d254-367e-a2be-2bead9670b5b.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 400944 IP address blocks: 104.253.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:a7:e2:ff:8e:91:0f:9e:62:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=6c84a136-5ee7-4b3b-b53e-a9689e720487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:01:68:64:91:71:42:6e:09:56:1c:bb:9a:56: 38:5c:d5:2c:e0:f3:f6:50:c5:0b:3e:15:30:a6:8d: bf:96:f3:6d:5c:27:e5:c8:37:1a:7d:87:29:2a:b5: af:58:7a:e3:a7:db:0d:73:3f:33:d0:62:43:a4:ac: a7:a1:03:d0:34:7d:7b:c6:36:4a:64:05:f1:81:13: 66:85:5c:96:5c:62:7e:25:61:13:5d:65:4e:ec:f6: d2:7d:f8:95:ac:ba:c0:8b:fd:97:15:70:34:c6:99: 13:66:f8:99:15:8a:7e:4c:64:c5:09:59:78:f9:bb: 70:06:cb:f0:ed:5a:cf:86:48:04:a7:ae:2e:84:97: dc:58:a2:3d:79:64:8c:11:f5:2b:12:15:9e:ba:c1: c6:7a:5c:2b:46:cd:55:cb:2e:af:b1:c6:0d:18:bf: c1:da:44:b6:c7:d1:84:8a:22:a8:8e:07:82:b3:30: 69:a2:1b:cd:32:ca:2b:d9:17:7a:4e:78:5b:ff:f8: b1:1f:a9:bf:03:b1:d5:a1:ca:86:39:b1:98:78:86: f7:6e:cf:2b:2a:b7:b8:4f:d3:bd:a4:a0:c3:bd:9d: 68:43:8e:71:e0:98:94:e6:8e:47:0a:34:e3:fa:79: 0c:39:41:05:b0:f5:d4:fa:2f:40:d5:79:88:f5:1e: fa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CF:44:BD:0C:FF:AD:2C:8A:93:73:DD:BB:3C:0C:D3:0E:7C:58:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bb36344c-d254-367e-a2be-2bead9670b5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.253.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:44:ab:b5:6b:75:c5:7c:94:5e:b9:cd:48:de:5b:41:3c:fb: 69:0d:20:d3:8c:a5:9f:10:73:49:30:8d:79:0d:5c:3d:e9:d4: 49:7d:a6:9c:00:0c:94:2b:8e:18:a7:6d:91:38:bb:ee:6f:7b: 80:22:50:fa:cf:a9:a4:f5:47:47:ad:d2:90:9d:04:94:88:06: 5a:93:c7:f0:83:6c:9b:46:cf:d0:36:c9:65:02:9d:f2:97:c6: 43:6a:96:3f:60:0e:b4:ba:b7:d5:31:f9:5c:8f:10:ec:2f:91: 71:ae:e0:a7:47:3a:8b:5c:1a:21:42:c6:d2:b2:cd:43:75:0a: 17:b3:86:ad:f5:a0:82:22:1e:02:19:db:18:cd:d2:bc:fc:22: 39:ab:0e:b7:54:26:da:6b:78:f4:7d:fd:27:b4:1f:fe:dd:2a: 85:4e:12:29:b1:ac:39:74:1c:be:34:eb:9e:8c:3c:0c:85:0b: d5:94:d6:83:8d:45:da:d1:8e:15:87:5d:34:6b:be:4b:0b:87: e6:03:0d:16:05:6d:a3:c8:c6:73:9b:42:1b:5c:2f:f9:4a:22: fb:22:a3:ea:ac:6f:de:c7:89:49:be:e2:35:c5:33:49:7c:41: c9:96:2d:1c:aa:3b:93:61:f6:2a:56:c8:a9:61:86:d0:a4:c7: 7e:08:92:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHKfi/46RD55idoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NmM4NGExMzYtNWVlNy00YjNiLWI1M2UtYTk2ODllNzIwNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwFoZJFxQm4JVhy7mlY4XNUs4PP2UMULPhUw po2/lvNtXCflyDcafYcpKrWvWHrjp9sNcz8z0GJDpKynoQPQNH17xjZKZAXxgRNm hVyWXGJ+JWETXWVO7PbSffiVrLrAi/2XFXA0xpkTZviZFYp+TGTFCVl4+btwBsvw 7VrPhkgEp64uhJfcWKI9eWSMEfUrEhWeusHGelwrRs1Vyy6vscYNGL/B2kS2x9GE iiKojgeCszBpohvNMsor2Rd6Tnhb//ixH6m/A7HVocqGObGYeIb3bs8rKre4T9O9 pKDDvZ1oQ45x4JiU5o5HCjTj+nkMOUEFsPXU+i9A1XmI9R76KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvPRL0M/60sipNz3bs8DNMOfFhXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYmIzNjM0NGMtZDI1NC0z NjdlLWEyYmUtMmJlYWQ5NjcwYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlEq7VrdcV8lF65zUjeW0E8+2kNINOMpZ8Qc0kwjXkNXD3p1El9ppwA DJQrjhinbZE4u+5ve4AiUPrPqaT1R0et0pCdBJSIBlqTx/CDbJtGz9A2yWUCnfKX xkNqlj9gDrS6t9Ux+VyPEOwvkXGu4KdHOotcGiFCxtKyzUN1Chezhq31oIIiHgIZ 2xjN0rz8IjmrDrdUJtprePR9/Se0H/7dKoVOEimxrDl0HL40656MPAyFC9WU1oON RdrRjhWHXTRrvksLh+YDDRYFbaPIxnObQhtcL/lKIvsio+qsb97HiUm+4jXFM0l8 QcmWLRyqO5Nh9ipWyKlhhtCkx34IkgA= -----END CERTIFICATE-----Generated at Tue Sep 22 03:27:53 2026 by rpki-client