$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/210553e0-2438-32d7-85a5-6d3f74da4350.roa File: 210553e0-2438-32d7-85a5-6d3f74da4350.roa (raw, json) Hash identifier: sXEWvGsnRNvyzT9EsxmqqTw2tkXIpUl8uTlseG2KzAA= Subject key identifier: F4:18:56:76:F2:81:CA:C3:35:EA:C4:B0:94:69:D6:0C:2D:05:F9:6D Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDBE7D43E8C9722F7431780 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/210553e0-2438-32d7-85a5-6d3f74da4350.roa Signing time: Tue 07 Apr 2026 16:27:46 +0000 ROA not before: Tue 07 Apr 2026 16:27:46 +0000 ROA not after: Mon 06 Jul 2026 16:27:46 +0000 asID: 59253 IP address blocks: 104.252.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:db:e7:d4:3e:8c:97:22:f7:43:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:27:46 2026 GMT Not After : Jul 6 16:27:46 2026 GMT Subject: CN=fd847e1e-2ec0-4419-a24d-b0d9f2ce7504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0e:e2:d8:1e:74:2b:f1:e3:69:a6:a2:0e:b6: f8:fd:b2:c8:bd:2b:5d:ae:6f:fb:b8:30:9a:24:62: 98:b4:c6:35:e8:65:45:9f:4e:87:4b:01:24:d3:49: d6:6b:9f:1a:71:cc:f4:f5:7f:ef:e1:ce:73:b9:76: 12:40:67:30:d0:3b:dc:36:77:fe:58:5e:c4:8c:cc: bc:28:86:ab:5b:87:c8:81:00:9b:85:61:6a:76:1a: 12:79:ff:a3:bc:51:3b:47:9c:8f:83:38:2e:02:ba: 75:6d:48:18:9a:cf:1b:61:f8:70:92:c0:8c:47:32: eb:fa:68:98:cd:07:18:9b:c7:50:59:01:5e:d6:1d: 65:68:18:65:9a:18:b5:50:c3:b1:75:b8:48:ae:27: f6:00:e4:38:1a:2e:47:28:d4:6d:eb:e5:ec:a2:23: 47:4f:23:06:dc:c6:d4:d0:41:d6:ce:bc:af:96:d0: 5e:2d:08:0a:1c:91:4d:d5:ee:e3:17:2d:20:d0:29: 15:35:71:84:26:b3:90:65:d7:eb:c9:2b:7b:b7:dc: 25:76:07:22:2a:99:9d:a2:5a:cf:34:e3:56:9b:f8: 1c:1c:be:5a:06:16:9e:44:a2:96:f6:c7:ac:9f:e3: 9c:57:7c:3b:04:d4:57:47:a6:8d:f4:5c:5b:e7:b4: cc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:18:56:76:F2:81:CA:C3:35:EA:C4:B0:94:69:D6:0C:2D:05:F9:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/210553e0-2438-32d7-85a5-6d3f74da4350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.252.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d2:cb:d6:00:82:20:d0:b6:69:48:2d:2d:a4:fa:4c:ca:fc: 49:3a:2e:d6:1d:44:fa:cc:85:a9:cc:ba:4f:5a:fc:0d:11:56: 50:7f:ff:9a:56:41:34:3a:10:e5:a5:a3:8b:f8:d9:09:26:6d: 2c:c9:49:5b:be:ae:ee:ee:69:16:73:57:dd:d2:0d:be:24:3c: 68:e7:de:13:52:fc:a8:e9:68:df:44:de:b5:19:f5:3e:f6:ab: 36:49:a6:2a:2a:f2:fc:6d:e6:a2:21:24:21:2d:93:4a:1f:63: bb:ec:6c:59:18:a3:5a:0e:b7:c5:d2:4b:76:f4:8e:49:a1:64: bb:4a:cf:76:c0:79:58:26:66:73:98:4c:77:2a:f2:5c:33:42: 2c:1b:15:f4:e3:f8:37:b3:8d:04:bb:06:e7:cf:ee:c2:07:7e: 87:36:57:21:94:7f:fb:37:a2:97:da:c8:05:f4:90:6a:cf:b8: 5c:81:08:4e:3f:c0:f4:8c:6b:58:f3:6c:08:70:12:f3:98:e9: 0a:72:a6:cc:2e:6e:ed:76:e7:de:39:d5:24:48:23:0c:e1:7a: 66:d2:04:db:6d:7c:c6:48:bc:2f:4f:ae:fa:4a:32:37:95:9c: b4:75:08:f9:c4:66:25:ad:be:3c:c2:a7:c4:eb:be:af:7e:f0: ba:b8:54:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t2+fUPoyXIvdDF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2Mjc0NloXDTI2MDcwNjE2Mjc0NlowLzEtMCsGA1UEAxMk ZmQ4NDdlMWUtMmVjMC00NDE5LWEyNGQtYjBkOWYyY2U3NTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg7i2B50K/HjaaaiDrb4/bLIvStdrm/7uDCa JGKYtMY16GVFn06HSwEk00nWa58accz09X/v4c5zuXYSQGcw0DvcNnf+WF7EjMy8 KIarW4fIgQCbhWFqdhoSef+jvFE7R5yPgzguArp1bUgYms8bYfhwksCMRzLr+miY zQcYm8dQWQFe1h1laBhlmhi1UMOxdbhIrif2AOQ4Gi5HKNRt6+XsoiNHTyMG3MbU 0EHWzryvltBeLQgKHJFN1e7jFy0g0CkVNXGEJrOQZdfrySt7t9wldgciKpmdolrP NONWm/gcHL5aBhaeRKKW9sesn+OcV3w7BNRXR6aN9Fxb57TMbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQYVnbygcrDNerEsJRp1gwtBfltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMjEwNTUzZTAtMjQzOC0z MmQ3LTg1YTUtNmQzZjc0ZGE0MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPyMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrSy9YAgiDQtmlILS2k+kzK/Ek6LtYdRPrMhanMuk9a/A0RVlB//5pW QTQ6EOWlo4v42QkmbSzJSVu+ru7uaRZzV93SDb4kPGjn3hNS/KjpaN9E3rUZ9T72 qzZJpioq8vxt5qIhJCEtk0ofY7vsbFkYo1oOt8XSS3b0jkmhZLtKz3bAeVgmZnOY THcq8lwzQiwbFfTj+DezjQS7BufP7sIHfoc2VyGUf/s3opfayAX0kGrPuFyBCE4/ wPSMa1jzbAhwEvOY6Qpypswubu1259451SRIIwzhembSBNttfMZIvC9PrvpKMjeV nLR1CPnEZiWtvjzCp8Trvq9+8Lq4VMo= -----END CERTIFICATE-----Generated at Wed Apr 8 01:44:02 2026 by rpki-client