$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/679c31d6-08fe-31a6-8ba4-ceeb4a0b0521.roa File: 679c31d6-08fe-31a6-8ba4-ceeb4a0b0521.roa (raw, json) Hash identifier: 3EoSQ2MvmZAnDdL6Om1AnfS4LtVgqCWfCf+AXX0cIas= Subject key identifier: C4:99:68:C2:6E:69:8B:11:48:DE:E4:B5:40:40:34:8A:46:CD:FE:9A Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDD11DC1A9B7B22A14F9280 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/679c31d6-08fe-31a6-8ba4-ceeb4a0b0521.roa Signing time: Tue 07 Apr 2026 16:30:07 +0000 ROA not before: Tue 07 Apr 2026 16:30:07 +0000 ROA not after: Mon 06 Jul 2026 16:30:07 +0000 asID: 398781 IP address blocks: 172.252.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:dd:11:dc:1a:9b:7b:22:a1:4f:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:30:07 2026 GMT Not After : Jul 6 16:30:07 2026 GMT Subject: CN=8352da53-eef8-4b71-8ab6-d94a689b16be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:62:09:3b:fe:65:1f:08:82:a2:0c:a3:65:97: 41:93:96:f1:a7:cd:dd:c5:7f:69:23:cf:39:99:9a: 1e:15:a6:8d:26:26:64:2d:a9:11:1f:c9:80:4d:80: 49:4e:4a:da:8c:ff:24:6b:e2:ef:05:23:f3:ca:a3: 7a:71:25:50:3a:5e:48:6d:10:b3:83:9a:80:a3:07: 80:4e:4c:1f:7e:d8:7f:d6:ba:60:27:e5:d3:d5:02: 10:d7:51:01:e5:0b:8e:e8:1d:c7:f3:ce:a2:35:c7: b7:f2:8b:eb:af:9d:fd:8e:b5:76:9d:53:62:32:39: 61:c2:96:dd:35:76:33:13:d3:3f:ae:d5:9c:a8:9a: 67:2a:0e:9d:8d:cf:6d:f1:31:f0:c3:57:00:c0:f4: 6b:ad:f4:ab:13:f7:f9:e2:43:a9:f6:5a:fe:49:b5: 1a:ec:d2:86:58:b2:df:f2:83:36:df:af:30:b4:d9: 75:ca:8c:61:77:ce:f4:73:13:9c:44:27:88:e7:5a: a1:e3:ad:60:d7:72:16:7b:d1:1b:05:46:f8:6a:f9: b8:7b:ef:fa:06:6b:ed:49:2b:20:7e:53:03:8f:82: 0b:05:13:7d:99:e4:f5:c9:b6:a1:ef:19:e1:29:d5: 75:cc:fa:e1:3e:ac:ea:a3:2a:b6:25:6a:d8:a8:dd: 56:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:99:68:C2:6E:69:8B:11:48:DE:E4:B5:40:40:34:8A:46:CD:FE:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/679c31d6-08fe-31a6-8ba4-ceeb4a0b0521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:31:d0:0f:1c:ab:f2:f8:ad:7a:1e:b8:d4:f2:ab:45:e9:56: a7:1e:a0:d8:66:73:2e:2a:c2:4c:81:43:29:c7:ff:da:03:e5: d9:83:53:26:6c:40:84:24:b3:24:64:18:ab:26:7b:87:f2:c8: 36:4c:8f:ce:57:7a:40:25:86:d7:19:71:34:7c:81:d3:aa:d8: dd:be:ba:ae:1d:a1:ce:a2:aa:80:f4:fc:45:c9:7d:7b:04:d0: 2e:74:c7:3e:b7:6b:9b:8c:65:7a:aa:1f:d5:64:f7:39:ca:5e: ff:d9:07:a5:8a:f4:a7:11:e7:39:3b:0b:c8:9b:c2:10:09:5e: 0a:86:01:25:45:44:75:35:f8:61:1e:4a:b1:d6:c8:f3:9c:5f: 44:d5:61:27:5a:e4:b0:62:8f:be:c8:e3:e6:fb:de:73:56:6b: 3f:f3:99:91:75:7f:ab:04:46:88:99:c0:0f:bf:24:92:ef:de: b6:62:91:14:59:e1:31:ca:31:56:3d:21:80:24:87:c8:d0:f4: 2d:1b:55:f8:73:b8:2c:98:3d:9e:1f:3e:e7:ed:5f:7b:91:bd: ca:8e:68:0d:2c:bb:07:db:89:5c:ee:1a:c6:b8:e9:4e:6f:7f: ec:94:1f:a6:c3:f0:25:b1:63:ed:1a:64:cd:b7:12:78:4e:b1: 05:99:5d:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3RHcGpt7IqFPkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2MzAwN1oXDTI2MDcwNjE2MzAwN1owLzEtMCsGA1UEAxMk ODM1MmRhNTMtZWVmOC00YjcxLThhYjYtZDk0YTY4OWIxNmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWIJO/5lHwiCogyjZZdBk5bxp83dxX9pI885 mZoeFaaNJiZkLakRH8mATYBJTkrajP8ka+LvBSPzyqN6cSVQOl5IbRCzg5qAoweA Tkwffth/1rpgJ+XT1QIQ11EB5QuO6B3H886iNce38ovrr539jrV2nVNiMjlhwpbd NXYzE9M/rtWcqJpnKg6djc9t8THww1cAwPRrrfSrE/f54kOp9lr+SbUa7NKGWLLf 8oM2368wtNl1yoxhd870cxOcRCeI51qh461g13IWe9EbBUb4avm4e+/6BmvtSSsg flMDj4ILBRN9meT1ybah7xnhKdV1zPrhPqzqoyq2JWrYqN1WzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSZaMJuaYsRSN7ktUBANIpGzf6aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNjc5YzMxZDYtMDhmZS0z MWE2LThiYTQtY2VlYjRhMGIwNTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkx0A8cq/L4rXoeuNTyq0XpVqceoNhmcy4qwkyBQynH/9oD5dmDUyZs QIQksyRkGKsme4fyyDZMj85XekAlhtcZcTR8gdOq2N2+uq4doc6iqoD0/EXJfXsE 0C50xz63a5uMZXqqH9Vk9znKXv/ZB6WK9KcR5zk7C8ibwhAJXgqGASVFRHU1+GEe SrHWyPOcX0TVYSda5LBij77I4+b73nNWaz/zmZF1f6sERoiZwA+/JJLv3rZikRRZ 4THKMVY9IYAkh8jQ9C0bVfhzuCyYPZ4fPuftX3uRvcqOaA0suwfbiVzuGsa46U5v f+yUH6bD8CWxY+0aZM23EnhOsQWZXVI= -----END CERTIFICATE-----Generated at Wed Apr 8 01:43:01 2026 by rpki-client