$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/401ebddc-7b72-3811-832f-5285ae01cffe.roa File: 401ebddc-7b72-3811-832f-5285ae01cffe.roa (raw, json) Hash identifier: 9s/0upeUq90jZZziRrtnAacdxyFvnCRNKmqA+FGH7uM= Subject key identifier: 81:77:67:8A:EE:4E:0B:BD:CD:9D:C4:F3:2E:B6:77:27:59:42:7E:DB Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDD4F073A8F02850BA8FB00 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/401ebddc-7b72-3811-832f-5285ae01cffe.roa Signing time: Tue 07 Apr 2026 16:30:36 +0000 ROA not before: Tue 07 Apr 2026 16:30:36 +0000 ROA not after: Mon 06 Jul 2026 16:30:36 +0000 asID: 398781 IP address blocks: 172.252.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:dd:4f:07:3a:8f:02:85:0b:a8:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:30:36 2026 GMT Not After : Jul 6 16:30:36 2026 GMT Subject: CN=2d2c96d5-ded4-420e-99f7-a4ac7b26277e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:4a:22:67:bf:9c:f4:0b:75:3d:01:dd:f8: 40:1c:fa:74:b2:c8:ab:18:a6:3a:5d:ae:85:ca:a6: 45:84:6d:39:2e:7b:90:c1:93:b8:8a:b8:9f:ca:27: fb:d2:93:d5:fa:c3:2c:09:f9:dd:51:90:10:e5:83: 57:31:1d:a5:a6:c7:9b:71:3a:5a:08:d6:10:ea:f3: 63:6b:9a:35:dc:86:32:a6:4c:a9:78:99:c8:27:77: 20:f6:5d:1f:e5:d1:ca:1d:76:b1:86:36:37:01:19: cc:d3:80:d1:c7:85:0a:70:9f:cb:85:3d:da:7a:da: 84:b4:3c:a0:fc:54:23:e4:ed:f7:2c:00:11:0d:75: 97:aa:2a:5a:da:b1:7a:ee:fa:9c:0b:f8:a3:6a:10: 22:2a:0f:17:bd:29:37:96:58:22:55:d5:f1:ee:e6: 14:ce:dd:c4:8e:2f:9e:ae:52:a7:75:74:90:11:ba: 20:94:8d:58:d1:52:69:3e:51:5d:62:ff:b6:13:98: 8f:fd:bf:99:76:49:51:12:79:0b:a9:15:87:0a:91: d2:6e:71:7c:78:ac:83:41:1e:b3:32:f5:22:cc:cf: b3:b3:ae:15:b2:96:8d:7a:fb:76:e9:08:54:34:41: 54:4b:17:fb:8b:90:1b:11:86:6e:6f:d7:5e:85:fe: 1f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:77:67:8A:EE:4E:0B:BD:CD:9D:C4:F3:2E:B6:77:27:59:42:7E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/401ebddc-7b72-3811-832f-5285ae01cffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ed:7a:ec:e1:65:2d:2f:89:e7:4d:33:e4:92:ab:e5:ea:be: 90:77:b9:cf:ac:9f:bf:da:ae:b8:47:39:25:6e:4b:55:27:da: 91:8b:3e:a8:27:aa:42:23:76:78:45:75:37:d5:b6:d8:96:22: ab:c5:10:ef:f8:53:a9:87:2b:2b:fe:64:ea:ae:42:26:62:5c: 73:4c:a4:7d:3a:2f:bb:a4:31:b3:dc:81:7e:8a:f5:61:c0:a6: 8b:45:0e:79:53:97:e2:29:55:14:9a:74:3c:e1:59:80:6b:c3: a9:a0:c6:ff:7f:f7:c9:d8:63:f3:ff:1b:8b:d7:3a:c7:2f:d5: 6e:53:35:8a:01:b5:df:f7:30:ec:e1:f0:5e:7a:39:7d:d2:ad: c5:e7:fe:9a:06:e7:0c:45:a1:f7:4b:e5:ed:27:8c:c6:29:38: 5f:8a:65:28:3f:f8:96:7f:a5:af:da:bf:a8:8d:6b:24:0e:e1: aa:9f:1b:cd:2e:2e:9f:32:2a:9d:dc:e9:ac:6f:09:c9:b0:c6: 0c:c8:54:6c:f9:cd:c1:8a:23:28:0d:15:71:f3:ac:5c:cd:62: 6a:df:3a:fd:c8:9f:35:6f:d0:e9:39:5e:8f:40:77:a2:d4:bf: 4e:31:7c:43:d5:00:89:d7:61:87:7c:96:48:52:df:4c:15:5a: 37:96:d1:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3U8HOo8ChQuo+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2MzAzNloXDTI2MDcwNjE2MzAzNlowLzEtMCsGA1UEAxMk MmQyYzk2ZDUtZGVkNC00MjBlLTk5ZjctYTRhYzdiMjYyNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc9KIme/nPQLdT0B3fhAHPp0ssirGKY6Xa6F yqZFhG05LnuQwZO4irifyif70pPV+sMsCfndUZAQ5YNXMR2lpsebcTpaCNYQ6vNj a5o13IYypkypeJnIJ3cg9l0f5dHKHXaxhjY3ARnM04DRx4UKcJ/LhT3aetqEtDyg /FQj5O33LAARDXWXqipa2rF67vqcC/ijahAiKg8XvSk3llgiVdXx7uYUzt3Eji+e rlKndXSQEboglI1Y0VJpPlFdYv+2E5iP/b+ZdklREnkLqRWHCpHSbnF8eKyDQR6z MvUizM+zs64VspaNevt26QhUNEFUSxf7i5AbEYZub9dehf4fswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIF3Z4ruTgu9zZ3E8y62dydZQn7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNDAxZWJkZGMtN2I3Mi0z ODExLTgzMmYtNTI4NWFlMDFjZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHteuzhZS0viedNM+SSq+XqvpB3uc+sn7/arrhHOSVuS1Un2pGLPqgn qkIjdnhFdTfVttiWIqvFEO/4U6mHKyv+ZOquQiZiXHNMpH06L7ukMbPcgX6K9WHA potFDnlTl+IpVRSadDzhWYBrw6mgxv9/98nYY/P/G4vXOscv1W5TNYoBtd/3MOzh 8F56OX3SrcXn/poG5wxFofdL5e0njMYpOF+KZSg/+JZ/pa/av6iNayQO4aqfG80u Lp8yKp3c6axvCcmwxgzIVGz5zcGKIygNFXHzrFzNYmrfOv3InzVv0Ok5Xo9Ad6LU v04xfEPVAInXYYd8lkhS30wVWjeW0YI= -----END CERTIFICATE-----Generated at Wed Apr 8 01:42:19 2026 by rpki-client