$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fd70da80-bd87-3ee7-bd81-4f0de8dafaff.roa File: fd70da80-bd87-3ee7-bd81-4f0de8dafaff.roa (raw, json) Hash identifier: WkYUfRBt/5zvJl+9e0b30b2zUDY0DBSqTWbENbiYL0g= Subject key identifier: 77:7E:0D:44:44:E1:5A:6A:D0:4D:95:88:64:4D:DE:10:BB:B6:5A:9F Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584EF01CB0B4D92F89070C3E5180 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fd70da80-bd87-3ee7-bd81-4f0de8dafaff.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 174 IP address blocks: 172.252.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:b0:b4:d9:2f:89:07:0c:3e:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=71821038-74e5-4fc5-8731-fc81127aba9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:01:65:84:4d:fa:6c:56:80:93:4c:1e:8c:cb: 96:45:6b:5e:89:c4:f3:9e:e4:4a:ce:80:7a:32:99: 79:c6:37:db:6a:79:5e:1d:3f:91:4c:e7:00:c0:e9: 28:36:b1:ef:3a:67:38:31:fe:95:ec:49:44:30:b8: 95:cf:39:3e:cb:e2:b7:54:30:e3:93:73:90:4d:7e: 2f:97:4a:34:dd:74:44:a4:b3:a1:83:2b:84:1d:14: 86:49:03:be:01:4e:67:d9:3d:64:93:db:89:98:20: 4f:6c:72:ab:d3:56:9f:a9:93:09:d7:1c:ae:7d:ae: fa:fa:cf:81:56:79:58:ff:4b:ac:a2:01:2b:28:53: c0:68:d2:dd:c1:da:3b:b4:e4:45:ca:73:86:ae:87: 97:f5:d5:ab:4b:71:f0:ee:6e:de:b1:50:9a:3d:01: 8f:2c:c2:97:fc:59:10:f3:fc:3b:93:01:35:a8:9b: b2:d3:29:bd:d6:9b:45:e4:f5:5d:ae:b2:f3:df:2c: ad:cd:32:bc:07:a9:78:41:ea:35:41:a4:60:d6:e3: f1:da:1f:d4:98:5f:e1:c7:10:c8:c1:67:63:58:f4: bb:21:3d:eb:aa:fc:71:d9:ed:1b:d2:29:62:42:98: c5:9e:0c:7b:0a:3c:5d:cc:46:88:70:5c:de:85:f3: 8c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7E:0D:44:44:E1:5A:6A:D0:4D:95:88:64:4D:DE:10:BB:B6:5A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fd70da80-bd87-3ee7-bd81-4f0de8dafaff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e6:7e:ed:fa:56:22:3f:59:f6:ec:72:53:cd:71:46:ad:67: 32:38:7c:03:f2:e3:4b:22:1d:0b:f0:3d:62:93:0d:8e:a5:cf: db:14:a9:cd:93:58:95:08:f5:b1:03:f4:3c:87:98:b9:6e:6d: 96:44:41:e6:b6:44:1b:8c:9f:f7:ac:7d:92:c5:c7:23:08:d7: 7e:6e:c0:33:0c:6b:8a:c6:78:c8:95:8e:c3:b2:21:d2:4c:06: 2f:21:8c:f7:9b:40:36:89:95:f6:08:b6:c5:ed:cc:9d:df:cb: 11:a0:2e:59:2a:7e:75:7f:4b:86:ac:e4:2b:25:05:c6:8e:62: 6d:67:11:f8:9a:4d:fd:e9:3b:b1:e0:59:06:65:56:07:8d:61: 05:b0:27:40:f5:4e:21:cc:eb:ec:32:4b:fc:d5:c4:be:0e:bb: c4:9f:9c:33:69:73:ed:f0:2b:e6:b5:71:a1:62:f2:00:0c:eb: 88:7f:5f:5e:a5:02:14:22:72:0c:05:bb:c9:6f:d9:8f:e2:ad: 96:5c:9b:ab:fe:f7:f8:1e:f6:a7:59:29:7c:be:96:78:ca:57: 69:b8:40:67:d5:0d:f4:8b:c5:64:58:5c:65:b0:35:49:64:9d: 68:da:75:f9:5c:53:e0:f6:d4:4c:b2:82:dc:31:5a:13:ad:5b: fb:b6:09:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHLC02S+JBww+UYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NzE4MjEwMzgtNzRlNS00ZmM1LTg3MzEtZmM4MTEyN2FiYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gFlhE36bFaAk0wejMuWRWteicTznuRKzoB6 Mpl5xjfbanleHT+RTOcAwOkoNrHvOmc4Mf6V7ElEMLiVzzk+y+K3VDDjk3OQTX4v l0o03XREpLOhgyuEHRSGSQO+AU5n2T1kk9uJmCBPbHKr01afqZMJ1xyufa76+s+B VnlY/0usogErKFPAaNLdwdo7tORFynOGroeX9dWrS3Hw7m7esVCaPQGPLMKX/FkQ 8/w7kwE1qJuy0ym91ptF5PVdrrLz3yytzTK8B6l4Qeo1QaRg1uPx2h/UmF/hxxDI wWdjWPS7IT3rqvxx2e0b0iliQpjFngx7CjxdzEaIcFzehfOMNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHd+DURE4Vpq0E2ViGRN3hC7tlqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvZmQ3MGRhODAtYmQ4Ny0z ZWU3LWJkODEtNGYwZGU4ZGFmYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfmfu36ViI/WfbsclPNcUatZzI4fAPy40siHQvwPWKTDY6lz9sUqc2T WJUI9bED9DyHmLlubZZEQea2RBuMn/esfZLFxyMI135uwDMMa4rGeMiVjsOyIdJM Bi8hjPebQDaJlfYItsXtzJ3fyxGgLlkqfnV/S4as5CslBcaOYm1nEfiaTf3pO7Hg WQZlVgeNYQWwJ0D1TiHM6+wyS/zVxL4Ou8SfnDNpc+3wK+a1caFi8gAM64h/X16l AhQicgwFu8lv2Y/irZZcm6v+9/ge9qdZKXy+lnjKV2m4QGfVDfSLxWRYXGWwNUlk nWjadflcU+D21EyygtwxWhOtW/u2Cdw= -----END CERTIFICATE-----Generated at Wed Sep 23 21:41:57 2026 by rpki-client