$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0fa4f0f8-5f1f-3fb5-9a3f-a2d4ddc5ca02.roa File: 0fa4f0f8-5f1f-3fb5-9a3f-a2d4ddc5ca02.roa (raw, json) Hash identifier: T8GC6A1epyuGbtHTDiSJzarRKCJR/8xoZOyjRqPcBOs= Subject key identifier: A8:A0:B2:80:F7:E6:A2:55:38:D1:B0:B4:62:BB:08:F3:32:4C:62:F1 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDD3BFC9F4DA8BBCA204720 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0fa4f0f8-5f1f-3fb5-9a3f-a2d4ddc5ca02.roa Signing time: Tue 07 Apr 2026 16:30:27 +0000 ROA not before: Tue 07 Apr 2026 16:30:27 +0000 ROA not after: Mon 06 Jul 2026 16:30:27 +0000 asID: 18779 IP address blocks: 172.252.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:dd:3b:fc:9f:4d:a8:bb:ca:20:47:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:30:27 2026 GMT Not After : Jul 6 16:30:27 2026 GMT Subject: CN=340a137a-8bc9-46d6-a629-dc97658daef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:7e:da:57:56:fd:d7:3a:b5:4e:70:ae:68: ad:b5:12:1b:60:af:06:f6:5c:f6:e7:b7:be:87:38: c2:d7:db:7c:db:f7:d7:c3:c4:7f:76:9b:d9:2d:22: ba:ce:47:a9:58:1f:b9:03:3a:9e:ce:10:33:c3:a6: 88:1f:63:a2:bf:96:f6:bd:2e:74:d0:bb:fb:de:2a: 91:94:77:4d:ec:82:7e:ef:b7:5b:58:d3:b0:1a:4f: 52:ec:ee:c1:19:28:55:7a:b5:4f:e1:38:5a:e9:32: d7:e3:43:13:40:2a:dd:57:84:36:f5:9d:49:64:41: 54:6d:3c:35:38:17:04:a0:3c:70:e3:20:39:7a:e8: c8:64:5a:1d:30:28:d5:da:81:e9:2c:45:da:3d:fb: 96:8d:0e:78:13:dc:86:42:2e:4d:6e:50:45:98:7e: 0b:1a:84:7d:b7:db:0d:6a:ce:b7:04:60:9a:76:87: 24:35:31:9f:bd:23:db:73:07:9f:83:69:9d:db:ac: e8:b6:3c:66:96:00:2a:f1:1d:71:65:15:15:12:18: 66:e5:eb:20:49:b4:e2:3a:49:26:cf:b0:9c:41:77: 20:63:aa:e4:3a:5d:ba:ee:ce:78:ce:4f:e4:19:43: 1e:4c:81:64:d5:7b:95:54:ae:5e:31:00:82:03:32: b4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A0:B2:80:F7:E6:A2:55:38:D1:B0:B4:62:BB:08:F3:32:4C:62:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0fa4f0f8-5f1f-3fb5-9a3f-a2d4ddc5ca02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:8b:a0:66:a4:9f:13:25:0e:2c:ae:01:b6:04:10:3b:69:59: f5:cc:25:58:cd:b0:ad:f3:a2:8d:ed:28:15:71:6b:b5:d0:d6: 1c:d5:88:b0:ec:52:70:e9:80:da:77:af:e2:e2:bd:14:55:fb: bc:f1:02:25:68:dc:f8:0d:4e:ec:c6:4d:2a:30:cf:48:ff:a7: dd:3a:c9:69:aa:d4:2a:5c:57:f8:e1:7b:ee:31:53:2f:96:0c: 88:02:79:20:47:aa:33:5b:a1:e7:36:6e:0b:10:14:02:b1:20: fb:93:1c:c4:0a:e7:fb:53:1a:6d:9b:81:09:b9:32:b3:23:3b: 50:7e:eb:4b:31:2d:15:95:24:bf:cd:07:08:f5:0d:ec:6a:21: 7d:32:19:48:9f:10:d4:b5:b8:78:f8:fb:da:6f:56:18:ce:4c: 7f:77:fa:36:3a:fb:74:98:9a:38:24:a5:13:b0:6f:72:7a:c2: 1b:a2:bb:f9:cc:ec:e9:99:55:1a:a4:6c:04:3c:5c:fd:64:f0: 9e:73:80:43:36:cd:b5:71:79:89:fb:be:2f:00:4c:e6:2f:6a: 41:0a:16:df:4e:c2:4d:98:16:ef:d0:bb:6c:28:bb:35:11:59: 90:0e:00:9d:5e:ad:f4:ec:ee:94:2c:ad:57:37:57:e1:18:e1: 05:00:81:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3Tv8n02ou8ogRyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2MzAyN1oXDTI2MDcwNjE2MzAyN1owLzEtMCsGA1UEAxMk MzQwYTEzN2EtOGJjOS00NmQ2LWE2MjktZGM5NzY1OGRhZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSF+2ldW/dc6tU5wrmittRIbYK8G9lz257e+ hzjC19t82/fXw8R/dpvZLSK6zkepWB+5AzqezhAzw6aIH2Oiv5b2vS500Lv73iqR lHdN7IJ+77dbWNOwGk9S7O7BGShVerVP4Tha6TLX40MTQCrdV4Q29Z1JZEFUbTw1 OBcEoDxw4yA5eujIZFodMCjV2oHpLEXaPfuWjQ54E9yGQi5NblBFmH4LGoR9t9sN as63BGCadockNTGfvSPbcwefg2md26zotjxmlgAq8R1xZRUVEhhm5esgSbTiOkkm z7CcQXcgY6rkOl267s54zk/kGUMeTIFk1XuVVK5eMQCCAzK0kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKigsoD35qJVONGwtGK7CPMyTGLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMGZhNGYwZjgtNWYxZi0z ZmI1LTlhM2YtYTJkNGRkYzVjYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKLoGaknxMlDiyuAbYEEDtpWfXMJVjNsK3zoo3tKBVxa7XQ1hzViLDs UnDpgNp3r+LivRRV+7zxAiVo3PgNTuzGTSowz0j/p906yWmq1CpcV/jhe+4xUy+W DIgCeSBHqjNboec2bgsQFAKxIPuTHMQK5/tTGm2bgQm5MrMjO1B+60sxLRWVJL/N Bwj1DexqIX0yGUifENS1uHj4+9pvVhjOTH93+jY6+3SYmjgkpROwb3J6whuiu/nM 7OmZVRqkbAQ8XP1k8J5zgEM2zbVxeYn7vi8ATOYvakEKFt9Owk2YFu/Qu2wouzUR WZAOAJ1erfTs7pQsrVc3V+EY4QUAgYE= -----END CERTIFICATE-----Generated at Wed Apr 8 01:39:10 2026 by rpki-client