$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cff98f74-2413-3255-9aa9-80886c24b1e4.roa File: cff98f74-2413-3255-9aa9-80886c24b1e4.roa (raw, json) Hash identifier: I1AOearBVZ0V7gBdGHsoL3UJSg4KrSV6bpfkwNvbVUM= Subject key identifier: 20:D3:52:09:A1:54:EB:FD:28:6E:F5:2C:48:2D:0A:44:62:45:49:36 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584F1E3991F60609C03647EC2990 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cff98f74-2413-3255-9aa9-80886c24b1e4.roa Signing time: Wed 09 Sep 2026 13:25:42 +0000 ROA not before: Wed 09 Sep 2026 13:25:42 +0000 ROA not after: Tue 08 Dec 2026 14:25:42 +0000 asID: 2497 IP address blocks: 45.39.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:39:91:f6:06:09:c0:36:47:ec:29:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Sep 9 13:25:42 2026 GMT Not After : Dec 8 14:25:42 2026 GMT Subject: CN=23bec01a-18ab-443f-9feb-576748de9b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d6:fc:18:b7:10:c0:ba:8e:89:64:a7:65:b8: c2:2c:16:69:87:22:ff:40:40:4f:bd:d0:bd:ae:48: cb:ce:90:7a:be:32:44:d2:84:30:b3:07:7d:72:10: 5a:0b:97:95:e5:10:58:01:f7:a4:14:8e:e6:83:e1: 10:0c:38:13:dc:67:1b:48:71:7b:40:5b:e6:8d:f7: b1:7b:1e:40:8a:8a:bd:77:52:5d:4c:62:e9:69:be: 72:be:27:e0:7f:ac:8f:e3:64:7d:6a:97:ff:fc:d1: 99:aa:73:18:5b:e7:73:79:22:58:c7:00:6d:70:a7: 07:9f:4e:75:c3:25:d7:19:da:f2:0c:df:2e:34:68: b1:d0:ac:58:66:85:ed:d2:06:eb:37:5b:5e:1c:f7: f1:96:5f:00:7b:91:45:5b:22:bf:6c:a1:7f:a0:3c: 71:e3:52:73:cf:39:df:91:56:90:eb:b6:c4:0d:33: 08:b1:a4:48:65:5c:d4:ec:fe:76:1c:a5:58:f5:a0: 94:94:1c:95:9d:5d:5d:44:f4:b8:4a:ca:07:de:01: 87:fe:a0:af:5f:14:b3:34:82:32:85:38:f7:a0:3b: 99:d4:2c:51:e4:c6:22:b0:89:5f:49:b9:89:3f:f1: 36:f1:17:6c:97:88:b7:56:80:a1:11:4a:15:07:e2: 37:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D3:52:09:A1:54:EB:FD:28:6E:F5:2C:48:2D:0A:44:62:45:49:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cff98f74-2413-3255-9aa9-80886c24b1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 45.39.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c4:d5:3e:c0:c1:9d:f8:90:2b:d7:ad:c9:1a:45:dd:9c:cd: 1d:00:23:17:a9:ea:cb:3e:45:31:76:e1:be:cc:e2:cf:f4:b3: 81:47:26:fc:88:ef:7f:0e:84:08:db:e5:e8:93:57:7c:76:37: cf:f4:0a:70:89:12:a9:10:26:2b:06:eb:f4:c4:5f:9c:58:b2: 25:5d:8c:f1:2c:d0:11:bc:b0:39:7a:a7:a1:05:af:21:53:04: 88:3c:1e:10:30:42:fd:15:96:a7:63:ed:f3:32:ef:e0:77:65: da:ee:94:99:84:8d:bd:ca:4c:a5:1b:07:31:02:5e:92:c0:98: 2d:65:88:0c:7b:5f:3e:7f:69:d9:f1:9a:86:eb:a2:9b:f0:3d: ee:e4:37:cc:c6:b7:ce:c6:5d:8c:49:02:1a:47:2a:81:65:80: db:a8:d5:d4:6c:93:63:88:ff:56:76:c5:88:ad:b9:44:e7:c7: b7:ee:8c:9f:57:3a:f3:fc:ed:2b:9f:dd:9f:cd:50:68:03:31: 88:d3:ac:95:a9:ad:36:98:cb:78:eb:89:53:ac:2b:1a:82:9e: 31:24:d4:17:3e:ba:8b:93:c1:dd:d4:3b:67:30:9e:37:8e:35: 9b:ef:8b:a0:68:d3:d7:c0:37:e0:da:ca:86:a1:1d:20:1a:71: 33:d8:64:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eOZH2BgnANkfsKZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDkwOTEzMjU0MloXDTI2MTIwODE0MjU0MlowLzEtMCsGA1UEAxMk MjNiZWMwMWEtMThhYi00NDNmLTlmZWItNTc2NzQ4ZGU5YjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNb8GLcQwLqOiWSnZbjCLBZphyL/QEBPvdC9 rkjLzpB6vjJE0oQwswd9chBaC5eV5RBYAfekFI7mg+EQDDgT3GcbSHF7QFvmjfex ex5Aioq9d1JdTGLpab5yvifgf6yP42R9apf//NGZqnMYW+dzeSJYxwBtcKcHn051 wyXXGdryDN8uNGix0KxYZoXt0gbrN1teHPfxll8Ae5FFWyK/bKF/oDxx41Jzzznf kVaQ67bEDTMIsaRIZVzU7P52HKVY9aCUlByVnV1dRPS4SsoH3gGH/qCvXxSzNIIy hTj3oDuZ1CxR5MYisIlfSbmJP/E28Rdsl4i3VoChEUoVB+I3ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDTUgmhVOv9KG71LEgtCkRiRUk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvY2ZmOThmNzQtMjQxMy0z MjU1LTlhYTktODA4ODZjMjRiMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSdmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLE1T7AwZ34kCvXrckaRd2czR0AIxep6ss+RTF24b7M4s/0s4FHJvyI 738OhAjb5eiTV3x2N8/0CnCJEqkQJisG6/TEX5xYsiVdjPEs0BG8sDl6p6EFryFT BIg8HhAwQv0Vlqdj7fMy7+B3ZdrulJmEjb3KTKUbBzECXpLAmC1liAx7Xz5/adnx mobropvwPe7kN8zGt87GXYxJAhpHKoFlgNuo1dRsk2OI/1Z2xYituUTnx7fujJ9X OvP87Suf3Z/NUGgDMYjTrJWprTaYy3jriVOsKxqCnjEk1Bc+uouTwd3UO2cwnjeO NZvvi6Bo09fAN+DayoahHSAacTPYZMY= -----END CERTIFICATE-----Generated at Tue Sep 22 11:19:24 2026 by rpki-client