$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dd37d8b9-869b-37b3-9767-f8b602a1114e.roa File: dd37d8b9-869b-37b3-9767-f8b602a1114e.roa (raw, json) Hash identifier: R8alLD29cw7NAZheib72eV/2rOUm96JvIxNNuc7Ytp0= Subject key identifier: C4:47:37:B4:EA:00:97:DC:16:E7:EB:4A:D8:3D:0A:86:58:67:54:7B Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EA797627A0AF27C51E7D90180 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dd37d8b9-869b-37b3-9767-f8b602a1114e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3561 IP address blocks: 104.253.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:62:7a:0a:f2:7c:51:e7:d9:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f5db261b-e541-4b7b-8089-f63b99dbd1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0e:6f:02:ab:70:bf:ef:a3:59:6b:8c:b0:58: 46:cb:58:e0:55:5d:7b:16:9d:71:ff:64:ee:86:33: 2e:80:c1:c9:4b:f9:7a:e1:43:74:a1:61:9c:34:b5: be:b1:41:35:1f:aa:d8:31:e1:6d:92:b7:e8:24:bc: 0d:6e:df:f0:1d:f1:bb:ff:26:51:6b:4a:4d:45:35: 35:3b:3a:7b:1d:6a:f8:d0:b9:a6:37:77:cb:e7:4b: 54:45:83:8d:02:ec:65:7b:28:2b:41:b9:3f:dd:71: 24:29:dd:c7:e6:aa:de:79:ba:20:7e:fe:8b:5f:34: d3:2c:dd:6b:a0:dc:d5:75:53:af:bd:7d:55:cd:9f: af:11:07:c9:da:23:ff:1a:83:77:41:ef:3b:ca:24: 9f:f9:18:4b:f4:6e:01:d2:1d:99:d7:3e:34:c5:4a: 67:4b:6e:23:9a:62:aa:f7:f6:d7:11:ab:c6:b1:4f: d6:33:5e:13:1b:db:da:22:a5:f0:8c:2b:bc:fe:30: 1c:47:91:0f:70:c2:ba:8d:32:26:fb:ea:e3:fd:c5: 30:7c:d8:3d:60:a7:f6:cc:08:2d:59:df:d8:46:ea: 9a:76:5b:f5:e8:65:50:88:7b:bd:5a:3a:5c:dd:96: 86:09:66:0c:46:40:2d:a1:f6:51:0e:cc:34:43:cf: 96:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:47:37:B4:EA:00:97:DC:16:E7:EB:4A:D8:3D:0A:86:58:67:54:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dd37d8b9-869b-37b3-9767-f8b602a1114e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.253.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e3:1a:53:cd:eb:b3:e9:dc:c0:11:46:3e:c6:11:78:eb:31: 81:e1:cd:8a:ac:f6:17:c4:8a:47:31:65:53:3e:d6:8e:e0:5c: 76:eb:e0:57:cf:0f:33:52:c3:b9:60:41:d3:f1:b6:06:c3:69: 89:0a:13:ff:93:28:f1:3a:38:78:eb:ce:cb:b8:2e:8c:e6:1f: 6e:85:a2:cc:a8:6c:4e:d5:81:10:d8:3f:61:f3:d0:e8:0d:b4: 10:0d:0c:dd:a9:3d:e1:f1:ca:07:04:68:49:7d:fd:15:ad:f0: ff:6f:61:e6:e6:dd:3a:6b:60:e1:9c:ac:0c:73:4e:2d:5e:9a: af:86:02:07:a9:b5:19:06:3d:e5:c9:9b:f4:1f:ee:19:b1:a6: d2:00:9b:f5:c9:75:9f:10:af:81:72:c2:ef:91:eb:ce:93:d8: 8e:bc:8e:38:c9:df:a7:8d:1a:e3:9c:c4:97:68:d9:cf:e5:05: da:e8:2f:a6:55:9f:8f:0a:ce:e0:f2:41:7b:37:d1:11:f7:1e: d8:bc:b6:bf:ca:0b:46:bf:cf:f6:7e:93:aa:69:8b:5a:3e:e1: 6c:38:0b:9c:2b:4d:88:f8:3f:0d:63:9c:bd:93:bd:e0:9e:f1: d7:90:a9:4f:18:61:be:71:c2:22:f4:2f:5d:04:37:0a:fc:47: d5:53:2c:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl2J6CvJ8UefZAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjVkYjI2MWItZTU0MS00YjdiLTgwODktZjYzYjk5ZGJkMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ5vAqtwv++jWWuMsFhGy1jgVV17Fp1x/2Tu hjMugMHJS/l64UN0oWGcNLW+sUE1H6rYMeFtkrfoJLwNbt/wHfG7/yZRa0pNRTU1 Ozp7HWr40LmmN3fL50tURYONAuxleygrQbk/3XEkKd3H5qreebogfv6LXzTTLN1r oNzVdVOvvX1VzZ+vEQfJ2iP/GoN3Qe87yiSf+RhL9G4B0h2Z1z40xUpnS24jmmKq 9/bXEavGsU/WM14TG9vaIqXwjCu8/jAcR5EPcMK6jTIm++rj/cUwfNg9YKf2zAgt Wd/YRuqadlv16GVQiHu9Wjpc3ZaGCWYMRkAtofZRDsw0Q8+WiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRHN7TqAJfcFufrStg9CoZYZ1R7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvZGQzN2Q4YjktODY5Yi0z N2IzLTk3NjctZjhiNjAyYTExMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzjGlPN67Pp3MARRj7GEXjrMYHhzYqs9hfEikcxZVM+1o7gXHbr4FfP DzNSw7lgQdPxtgbDaYkKE/+TKPE6OHjrzsu4LozmH26FosyobE7VgRDYP2Hz0OgN tBANDN2pPeHxygcEaEl9/RWt8P9vYebm3TprYOGcrAxzTi1emq+GAgeptRkGPeXJ m/Qf7hmxptIAm/XJdZ8Qr4Fywu+R686T2I68jjjJ36eNGuOcxJdo2c/lBdroL6ZV n48KzuDyQXs30RH3Hti8tr/KC0a/z/Z+k6ppi1o+4Ww4C5wrTYj4Pw1jnL2TveCe 8deQqU8YYb5xwiL0L10ENwr8R9VTLIM= -----END CERTIFICATE-----Generated at Wed Jul 29 15:37:13 2026 by rpki-client