$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5a47a516-2124-36ef-a6f7-41448e8c1331.roa File: 5a47a516-2124-36ef-a6f7-41448e8c1331.roa (raw, json) Hash identifier: pV21fZ+RDL2EXqlTnda44kh3kLb7aa8d8pVxTXV2YRE= Subject key identifier: E0:24:F1:2C:76:3C:8C:B7:84:88:A7:BB:1C:C4:B5:3D:3F:36:A4:5E Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDC5338E47DAC230129F180 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5a47a516-2124-36ef-a6f7-41448e8c1331.roa Signing time: Tue 07 Apr 2026 16:28:37 +0000 ROA not before: Tue 07 Apr 2026 16:28:37 +0000 ROA not after: Mon 06 Jul 2026 16:28:37 +0000 asID: 201106 IP address blocks: 104.253.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:dc:53:38:e4:7d:ac:23:01:29:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:28:37 2026 GMT Not After : Jul 6 16:28:37 2026 GMT Subject: CN=c1aa0296-82ce-4208-9492-f4af7d14efa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:27:2f:d5:12:02:a5:f7:d6:27:67:d9:b0:42: a4:2a:2b:26:b2:8a:7c:e5:20:e5:d7:a1:9c:c9:08: 84:f6:ad:e3:20:52:7c:d5:24:4f:1a:e4:29:1e:fa: 60:95:4a:ef:7a:35:66:f4:60:6d:a0:a3:10:9f:16: 60:1c:8e:47:d3:9a:96:a7:65:d6:d4:07:9b:f5:c1: 37:42:34:74:0a:a8:40:15:bb:7e:d8:95:70:67:cb: 09:4d:f8:18:f5:53:dc:41:0d:4e:df:27:cb:cf:74: 4d:18:81:69:86:08:6b:be:21:36:7e:86:fc:14:12: 2f:fb:ea:ee:cc:df:60:13:3d:e4:cc:13:a3:c7:7e: 45:c8:dc:73:f6:3b:50:da:83:8c:6a:92:45:36:4c: 43:42:59:17:4c:e2:bd:04:15:ca:43:37:2b:5d:f5: 23:7f:db:0b:af:35:f2:a7:f6:0b:ca:4d:ae:e2:c2: 65:c9:e0:3c:3e:80:4f:54:f1:64:20:39:97:31:f7: 6b:af:d2:6a:34:23:63:d7:20:d6:e1:74:7d:10:3b: 82:6d:6b:de:48:e2:1d:2d:c8:2d:17:a9:eb:01:27: dd:b2:43:e9:60:6b:28:41:d5:cf:a5:b9:e9:68:10: ee:53:6e:42:84:b7:20:3e:b6:d5:75:42:0e:05:e7: 82:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:24:F1:2C:76:3C:8C:B7:84:88:A7:BB:1C:C4:B5:3D:3F:36:A4:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5a47a516-2124-36ef-a6f7-41448e8c1331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.253.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:51:a8:30:43:ba:9d:9d:cc:67:05:52:f7:18:09:00:75:62: e3:5a:3b:10:6f:cf:88:61:8d:45:0e:89:f7:33:4f:3b:1e:a3: f6:b2:89:29:b2:ef:18:40:09:b8:42:8e:88:da:30:fa:32:5f: ca:36:e5:03:5e:b3:33:89:39:fd:d6:0a:b4:66:67:86:d6:b8: a8:e0:36:16:03:55:e1:d4:c2:05:86:b1:3f:4b:6a:27:9e:da: 0f:7f:4a:28:bf:b1:a4:2b:be:3d:75:fe:fe:02:fa:a8:07:e8: d9:6a:27:f3:6e:dd:75:ec:cc:2a:a5:42:1a:97:d3:12:3c:82: c1:31:ab:4c:67:d7:1f:54:a4:2d:2e:fe:96:14:c6:00:5a:84: 1f:ec:2b:bc:99:06:d8:68:64:7a:e7:3b:98:79:46:7f:22:eb: 04:1e:4a:18:89:89:8a:64:c2:ba:d0:5d:75:e4:f9:07:8e:00: 9b:2d:08:fa:f1:6c:58:8e:7b:0a:9e:79:01:bc:b9:9f:14:7d: 78:bd:7e:ac:87:91:dc:1b:e1:d9:e3:87:fd:bb:f4:62:58:6e: 9e:b5:cf:c6:d1:e5:c7:f7:0d:b6:9b:bc:3f:e5:cc:63:d2:b1: 19:1c:a7:a7:4f:05:15:dd:bc:c2:ff:24:fc:be:29:3e:d3:f1: 6d:69:be:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3FM45H2sIwEp8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2MjgzN1oXDTI2MDcwNjE2MjgzN1owLzEtMCsGA1UEAxMk YzFhYTAyOTYtODJjZS00MjA4LTk0OTItZjRhZjdkMTRlZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1icv1RICpffWJ2fZsEKkKismsop85SDl16Gc yQiE9q3jIFJ81SRPGuQpHvpglUrvejVm9GBtoKMQnxZgHI5H05qWp2XW1Aeb9cE3 QjR0CqhAFbt+2JVwZ8sJTfgY9VPcQQ1O3yfLz3RNGIFphghrviE2fob8FBIv++ru zN9gEz3kzBOjx35FyNxz9jtQ2oOMapJFNkxDQlkXTOK9BBXKQzcrXfUjf9sLrzXy p/YLyk2u4sJlyeA8PoBPVPFkIDmXMfdrr9JqNCNj1yDW4XR9EDuCbWveSOIdLcgt F6nrASfdskPpYGsoQdXPpbnpaBDuU25ChLcgPrbVdUIOBeeCMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAk8Sx2PIy3hIinuxzEtT0/NqReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNWE0N2E1MTYtMjEyNC0z NmVmLWE2ZjctNDE0NDhlOGMxMzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlRqDBDup2dzGcFUvcYCQB1YuNaOxBvz4hhjUUOifczTzseo/ayiSmy 7xhACbhCjojaMPoyX8o25QNeszOJOf3WCrRmZ4bWuKjgNhYDVeHUwgWGsT9Laiee 2g9/Sii/saQrvj11/v4C+qgH6NlqJ/Nu3XXszCqlQhqX0xI8gsExq0xn1x9UpC0u /pYUxgBahB/sK7yZBthoZHrnO5h5Rn8i6wQeShiJiYpkwrrQXXXk+QeOAJstCPrx bFiOewqeeQG8uZ8UfXi9fqyHkdwb4dnjh/279GJYbp61z8bR5cf3DbabvD/lzGPS sRkcp6dPBRXdvML/JPy+KT7T8W1pvjo= -----END CERTIFICATE-----Generated at Wed Apr 8 01:44:00 2026 by rpki-client