$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/60a28b13-6db0-3782-bd6a-3ba5b6fe3060.roa File: 60a28b13-6db0-3782-bd6a-3ba5b6fe3060.roa (raw, json) Hash identifier: RUKhKFtVm+G/KpO7n6TlmffS0qr3T2BXXoemGinGxts= Subject key identifier: 0E:DD:92:17:80:EE:CA:2F:9F:D1:C3:1C:3D:96:3A:16:40:39:AC:CC Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDCFDF111C5C6C5852557E0 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/60a28b13-6db0-3782-bd6a-3ba5b6fe3060.roa Signing time: Tue 07 Apr 2026 16:29:57 +0000 ROA not before: Tue 07 Apr 2026 16:29:57 +0000 ROA not after: Mon 06 Jul 2026 16:29:57 +0000 asID: 400536 IP address blocks: 172.252.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:dc:fd:f1:11:c5:c6:c5:85:25:57:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:29:57 2026 GMT Not After : Jul 6 16:29:57 2026 GMT Subject: CN=b8dc7565-8550-4035-a48a-72955dd85876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:21:9e:d2:49:93:08:ac:26:e5:c5:25:fc:ee: 35:aa:4b:f2:71:67:ca:45:21:2b:69:a2:16:7c:fc: 4e:ff:80:db:80:b4:c5:5a:a9:dd:62:88:0c:4f:81: 16:5d:b6:4b:8e:a2:cf:7d:37:95:82:fb:0a:e7:82: 21:a8:77:ff:5a:c6:4a:f9:e8:72:64:d0:0a:c3:2a: 26:25:40:bb:3b:77:41:21:58:26:e0:34:df:93:90: eb:24:08:e4:46:41:8e:4a:a3:d5:4a:31:cc:42:fa: 46:72:e3:14:3f:47:b1:db:be:92:49:c1:18:70:14: 8d:55:82:e0:ad:4f:44:08:b0:90:a4:11:51:7b:3c: 47:c6:48:39:b2:97:9c:61:d0:df:fd:bf:dd:dc:84: 7c:44:02:09:11:be:88:ba:b9:62:15:e4:4a:bb:e0: 1f:ac:95:e8:80:b1:cc:b8:d2:a0:24:fa:3c:85:9d: ac:d1:d8:5a:1b:1b:53:7e:32:0c:ae:e7:66:bc:81: 0e:5f:01:68:1b:0f:47:d7:5c:54:74:b7:ba:6d:c1: 85:d1:bd:0b:96:7f:1b:ac:32:9d:a7:f5:e9:d7:ac: ed:c5:a8:2a:83:62:f0:5d:a7:6c:f6:6d:b4:4f:ed: 3f:07:54:ae:05:be:72:4a:2d:27:c2:96:2a:aa:c8: 2b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DD:92:17:80:EE:CA:2F:9F:D1:C3:1C:3D:96:3A:16:40:39:AC:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/60a28b13-6db0-3782-bd6a-3ba5b6fe3060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b3:3a:c5:16:57:4a:18:b2:a7:fa:00:39:69:0c:b3:7a:91: f9:4a:99:f8:ee:22:a8:8c:1d:eb:37:f9:62:5d:f4:f8:e2:07: 0a:85:74:d0:06:fd:2f:c7:6c:1d:d2:8c:a2:00:b4:2e:4a:37: 4d:67:34:25:3d:bf:44:bc:ed:4c:7d:f8:4e:ee:53:a7:bf:68: cb:6f:a9:e4:da:c0:0f:ff:fc:d5:53:52:9f:78:3c:20:2f:48: 97:08:1b:0d:a8:63:cf:5d:ee:ba:8b:52:d4:b7:77:d9:5a:10: f0:58:db:b5:88:33:bc:08:60:99:30:5c:e3:31:c9:54:35:8f: 06:a6:96:c5:8c:f6:5e:c9:e2:6a:05:63:04:19:83:c5:21:01: 9e:6f:34:c9:7f:a2:07:7e:34:15:2a:96:c7:84:6c:97:48:59: e4:ff:73:25:46:4b:d6:51:f2:8b:c9:a5:3c:41:a3:4c:40:98: 0b:74:4d:96:58:2e:d9:9f:18:58:f5:68:1b:ac:8d:07:6d:dd: 4a:44:1b:8b:ac:41:7d:6a:c2:63:a3:0d:74:ea:84:ec:e5:b7: 27:a5:64:6d:61:f4:ab:90:41:79:e6:3c:ae:46:1b:0e:09:6a: 5c:f2:a8:aa:d8:02:bb:20:f1:2f:34:6a:4f:6d:f1:1d:aa:9d: 9d:71:b0:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3P3xEcXGxYUlV+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2Mjk1N1oXDTI2MDcwNjE2Mjk1N1owLzEtMCsGA1UEAxMk YjhkYzc1NjUtODU1MC00MDM1LWE0OGEtNzI5NTVkZDg1ODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCGe0kmTCKwm5cUl/O41qkvycWfKRSEraaIW fPxO/4DbgLTFWqndYogMT4EWXbZLjqLPfTeVgvsK54IhqHf/WsZK+ehyZNAKwyom JUC7O3dBIVgm4DTfk5DrJAjkRkGOSqPVSjHMQvpGcuMUP0ex276SScEYcBSNVYLg rU9ECLCQpBFRezxHxkg5specYdDf/b/d3IR8RAIJEb6IurliFeRKu+AfrJXogLHM uNKgJPo8hZ2s0dhaGxtTfjIMrudmvIEOXwFoGw9H11xUdLe6bcGF0b0Lln8brDKd p/Xp16ztxagqg2LwXads9m20T+0/B1SuBb5ySi0nwpYqqsgrsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7dkheA7sovn9HDHD2WOhZAOazMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNjBhMjhiMTMtNmRiMC0z NzgyLWJkNmEtM2JhNWI2ZmUzMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOzOsUWV0oYsqf6ADlpDLN6kflKmfjuIqiMHes3+WJd9PjiBwqFdNAG /S/HbB3SjKIAtC5KN01nNCU9v0S87Ux9+E7uU6e/aMtvqeTawA///NVTUp94PCAv SJcIGw2oY89d7rqLUtS3d9laEPBY27WIM7wIYJkwXOMxyVQ1jwamlsWM9l7J4moF YwQZg8UhAZ5vNMl/ogd+NBUqlseEbJdIWeT/cyVGS9ZR8ovJpTxBo0xAmAt0TZZY LtmfGFj1aBusjQdt3UpEG4usQX1qwmOjDXTqhOzltyelZG1h9KuQQXnmPK5GGw4J alzyqKrYArsg8S80ak9t8R2qnZ1xsBA= -----END CERTIFICATE-----Generated at Wed Apr 8 01:42:37 2026 by rpki-client