$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8a5b41df-180e-3be9-aae9-2a5dd5b84b3c.roa File: 8a5b41df-180e-3be9-aae9-2a5dd5b84b3c.roa (raw, json) Hash identifier: mlYjnepcUko3uVPQM6UfMLFr5jMf+E2i2SMU2YwGG00= Subject key identifier: 67:C2:74:8A:E5:DA:79:4D:D8:D3:1C:1C:DB:8B:FB:11:F2:A5:94:01 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DD9F3AE72021979BD46E4E0 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8a5b41df-180e-3be9-aae9-2a5dd5b84b3c.roa Signing time: Tue 07 Apr 2026 16:23:50 +0000 ROA not before: Tue 07 Apr 2026 16:23:50 +0000 ROA not after: Mon 06 Jul 2026 16:23:50 +0000 asID: 211273 IP address blocks: 45.38.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:d9:f3:ae:72:02:19:79:bd:46:e4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:23:50 2026 GMT Not After : Jul 6 16:23:50 2026 GMT Subject: CN=97a86889-c91e-42ee-b629-eb8d6e9d7db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:22:95:84:03:f6:aa:59:64:2b:ff:b6:39:00: 22:14:71:16:dd:37:b5:b3:e0:ed:db:e1:c6:05:60: 48:a9:b0:69:fc:9e:05:95:9e:f6:cb:5b:ef:f3:29: 1b:9e:60:48:cc:66:21:07:f3:04:c8:9b:ba:7f:7c: e2:24:1c:61:e2:a4:ac:f0:ca:7d:f9:4d:c2:9d:52: cc:d9:ee:8c:ae:00:8c:b2:0e:e0:d2:a3:db:12:74: 9d:b7:40:0b:3e:f2:2c:9a:fa:39:76:c4:07:49:ce: 4d:01:8d:db:53:89:93:dd:a8:01:9d:3b:ae:ff:1f: 13:09:a3:54:1b:90:5f:cb:c6:7e:72:f8:65:84:bf: 1e:22:97:d3:ba:08:1c:45:42:ac:10:81:c2:7d:6e: 36:99:5b:68:60:f0:08:db:e2:d8:3d:d0:c8:d5:da: 6b:9a:86:89:7c:0b:7c:eb:b4:d2:26:9a:8a:59:9d: a4:43:2e:c2:47:b8:76:53:39:50:d1:b2:c7:9f:1d: 26:1d:4d:02:da:3b:98:2c:e7:dc:a1:b6:2a:ca:44: a2:44:c2:82:86:cd:75:be:f1:98:00:58:4e:61:2e: 0f:45:f1:4a:4b:be:9d:c1:05:71:c4:b5:71:51:94: 82:ab:47:59:47:1f:be:28:f7:b5:c0:69:7f:ab:52: 19:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C2:74:8A:E5:DA:79:4D:D8:D3:1C:1C:DB:8B:FB:11:F2:A5:94:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8a5b41df-180e-3be9-aae9-2a5dd5b84b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 45.38.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ed:91:34:f6:ef:4f:ad:9f:cc:69:94:77:88:c0:87:fc:71: 85:8f:b6:3c:94:c9:ab:9c:ba:09:73:6f:9d:de:94:71:40:fb: e8:10:98:e8:ec:3e:16:e3:17:f8:9f:8f:ac:f7:2d:41:a3:e5: d2:da:9e:e9:6e:3f:b7:ec:9c:42:a2:b8:36:be:d1:a6:84:3e: 03:9b:73:f9:13:e0:a2:f6:61:21:08:f1:b5:ce:17:ad:45:69: 60:d6:57:1f:04:b9:e3:eb:06:49:1f:41:e7:08:f6:e5:0a:97: 29:ee:4b:31:9a:ea:98:80:c2:94:aa:1c:9b:2a:68:72:40:e5: 99:25:ec:62:d0:c8:fd:cb:b9:bd:e7:1a:5a:aa:62:cc:59:ec: 66:88:3b:7b:e8:08:a8:86:47:e6:6b:b0:e4:69:bb:ef:42:0e: 32:ef:87:16:10:51:8c:e4:b5:af:ae:41:f5:04:23:21:88:31: d8:d6:f7:03:31:d7:fc:31:8f:27:cd:da:88:fa:13:1e:79:94: c7:6e:19:80:b5:78:82:1e:75:79:f0:a3:80:33:5f:bc:92:96: 26:17:4d:08:5a:2e:1a:89:cf:e0:35:17:04:cc:5f:b2:df:38: 11:f2:4d:e4:bc:8e:c8:cb:15:d8:a9:ea:5d:bc:0c:9b:61:55: 6a:c1:19:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t2fOucgIZeb1G5OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2MjM1MFoXDTI2MDcwNjE2MjM1MFowLzEtMCsGA1UEAxMk OTdhODY4ODktYzkxZS00MmVlLWI2MjktZWI4ZDZlOWQ3ZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiKVhAP2qllkK/+2OQAiFHEW3Te1s+Dt2+HG BWBIqbBp/J4FlZ72y1vv8ykbnmBIzGYhB/MEyJu6f3ziJBxh4qSs8Mp9+U3CnVLM 2e6MrgCMsg7g0qPbEnSdt0ALPvIsmvo5dsQHSc5NAY3bU4mT3agBnTuu/x8TCaNU G5Bfy8Z+cvhlhL8eIpfTuggcRUKsEIHCfW42mVtoYPAI2+LYPdDI1dprmoaJfAt8 67TSJpqKWZ2kQy7CR7h2UzlQ0bLHnx0mHU0C2juYLOfcobYqykSiRMKChs11vvGY AFhOYS4PRfFKS76dwQVxxLVxUZSCq0dZRx++KPe1wGl/q1IZgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfCdIrl2nlN2NMcHNuL+xHypZQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvOGE1YjQxZGYtMTgwZS0z YmU5LWFhZTktMmE1ZGQ1Yjg0YjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILtkTT270+tn8xplHeIwIf8cYWPtjyUyaucuglzb53elHFA++gQmOjs PhbjF/ifj6z3LUGj5dLanuluP7fsnEKiuDa+0aaEPgObc/kT4KL2YSEI8bXOF61F aWDWVx8EuePrBkkfQecI9uUKlynuSzGa6piAwpSqHJsqaHJA5Zkl7GLQyP3Lub3n GlqqYsxZ7GaIO3voCKiGR+ZrsORpu+9CDjLvhxYQUYzkta+uQfUEIyGIMdjW9wMx 1/wxjyfN2oj6Ex55lMduGYC1eIIedXnwo4AzX7ySliYXTQhaLhqJz+A1FwTMX7Lf OBHyTeS8jsjLFdip6l28DJthVWrBGQo= -----END CERTIFICATE-----Generated at Wed Apr 8 01:39:22 2026 by rpki-client