$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dde36f0e-66ba-380e-8b75-a75d2704d027.roa File: dde36f0e-66ba-380e-8b75-a75d2704d027.roa (raw, json) Hash identifier: Fcka+pyPopWdhcWpM7lSI2fpjNbv1BBP7/pQOfXkWjQ= Subject key identifier: FA:4B:A8:27:AF:B5:E2:33:4D:B7:DC:E7:70:FB:5A:C4:1A:26:04:14 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CD8116B2D08B3545F1F80 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dde36f0e-66ba-380e-8b75-a75d2704d027.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 9009 IP address blocks: 104.253.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:d8:11:6b:2d:08:b3:54:5f:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=cbc1703e-80ac-4791-ae17-860e27fd5ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:66:77:d4:b5:de:f6:21:5e:f9:67:be:6c: 1d:d9:fe:94:66:b3:ad:cb:d3:67:e1:66:ae:e5:f2: e9:9a:cb:38:63:e3:38:31:c0:30:c3:60:a5:05:d6: 67:1c:f9:b8:11:47:af:66:50:18:3b:ef:1c:e7:5e: 40:b6:50:82:f3:4e:d1:de:80:93:38:60:a9:83:d3: 40:04:78:61:64:79:2b:91:03:06:a1:86:f0:93:a6: 23:bc:d6:ca:fc:87:c0:17:3b:f1:6f:d0:20:66:78: 04:3c:f4:e9:e3:95:b1:b6:a4:30:d6:ea:cc:1a:ab: fe:6e:c6:53:6c:ad:f7:7c:fe:32:b7:a4:64:85:a8: 5e:c9:77:03:f3:46:f0:9f:be:0a:06:85:37:6f:ef: 2d:9d:84:14:dc:6b:4f:69:70:24:65:c8:b6:ac:c6: ab:12:36:13:99:7c:b2:40:ac:c7:ec:f3:c7:5e:1e: 0d:96:a9:62:4c:85:6c:75:3d:ad:c3:69:f4:85:c5: 64:da:6c:90:d3:7a:1f:17:d1:b6:13:8a:55:bb:32: e5:85:02:44:52:14:95:27:6e:53:a7:67:a2:b8:ef: 72:6c:d0:b5:79:32:58:05:93:3f:94:8d:7f:ad:ff: ec:27:85:99:78:4e:88:90:4b:2f:14:42:25:86:b9: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4B:A8:27:AF:B5:E2:33:4D:B7:DC:E7:70:FB:5A:C4:1A:26:04:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dde36f0e-66ba-380e-8b75-a75d2704d027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.253.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:3b:c2:3c:af:39:b2:f2:17:25:7d:3e:b1:66:05:88:11:ec: a4:13:29:32:a4:10:df:6f:fe:a8:a9:d5:e9:f8:5d:02:f3:65: b6:18:45:20:6d:3e:f6:04:06:50:94:86:34:2c:ec:56:a0:ac: 24:bd:6a:a0:91:d8:6f:4e:5f:3f:af:28:54:27:09:35:9d:8c: f6:bc:d5:ed:5b:1d:75:42:18:01:86:2b:56:54:76:48:45:b7: 54:34:84:48:97:97:0b:27:44:33:72:af:5b:c3:70:cb:3b:06: 29:95:8b:43:3e:fd:2c:7a:ec:d0:7c:2d:a0:00:e9:1c:c1:0e: ce:ce:05:e2:31:01:0b:a6:e1:ae:29:e1:a5:67:e7:59:0a:43: 6a:eb:1d:24:3d:84:6b:fa:fb:6e:77:b6:d2:2c:05:7b:db:ad: 5a:e6:1e:db:b0:f7:f0:92:03:a3:c5:dd:00:3a:5d:f2:63:49: d6:2f:55:40:ca:05:a8:65:6c:a1:f2:6b:56:1c:38:f9:6e:4c: e1:5c:e8:0a:4e:88:f0:30:58:d6:dd:83:81:91:85:f9:8d:3c: f0:0e:e7:16:a4:48:2c:d5:94:70:3f:67:95:df:db:ea:f7:4e: 43:f3:12:cd:19:22:65:ad:02:77:96:4c:ae:81:5e:f8:7b:2f: b4:49:bd:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHNgRay0Is1RfH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk Y2JjMTcwM2UtODBhYy00NzkxLWFlMTctODYwZTI3ZmQ1ZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+dmd9S13vYhXvlnvmwd2f6UZrOty9Nn4Wau 5fLpmss4Y+M4McAww2ClBdZnHPm4EUevZlAYO+8c515AtlCC807R3oCTOGCpg9NA BHhhZHkrkQMGoYbwk6YjvNbK/IfAFzvxb9AgZngEPPTp45WxtqQw1urMGqv+bsZT bK33fP4yt6RkhaheyXcD80bwn74KBoU3b+8tnYQU3GtPaXAkZci2rMarEjYTmXyy QKzH7PPHXh4NlqliTIVsdT2tw2n0hcVk2myQ03ofF9G2E4pVuzLlhQJEUhSVJ25T p2eiuO9ybNC1eTJYBZM/lI1/rf/sJ4WZeE6IkEsvFEIlhrlvNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpLqCevteIzTbfc53D7WsQaJgQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvZGRlMzZmMGUtNjZiYS0z ODBlLThiNzUtYTc1ZDI3MDRkMDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo7wjyvObLyFyV9PrFmBYgR7KQTKTKkEN9v/qip1en4XQLzZbYYRSBt PvYEBlCUhjQs7FagrCS9aqCR2G9OXz+vKFQnCTWdjPa81e1bHXVCGAGGK1ZUdkhF t1Q0hEiXlwsnRDNyr1vDcMs7BimVi0M+/Sx67NB8LaAA6RzBDs7OBeIxAQum4a4p 4aVn51kKQ2rrHSQ9hGv6+253ttIsBXvbrVrmHtuw9/CSA6PF3QA6XfJjSdYvVUDK BahlbKHya1YcOPluTOFc6ApOiPAwWNbdg4GRhfmNPPAO5xakSCzVlHA/Z5Xf2+r3 TkPzEs0ZImWtAneWTK6BXvh7L7RJvQ8= -----END CERTIFICATE-----Generated at Tue Sep 22 09:40:45 2026 by rpki-client