$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8ab967d8-f7b9-39c8-835c-f7d2d7a100fb.roa File: 8ab967d8-f7b9-39c8-835c-f7d2d7a100fb.roa (raw, json) Hash identifier: Z47brN0yi3w8hzwv6Rxvj9YYDv5EuGqk3p6ZaDfOf68= Subject key identifier: E1:4A:2F:C9:CB:61:A7:56:F7:7B:88:89:7B:6A:18:31:B4:BC:F3:70 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDCFEAC18E7FB6162C0DC80 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8ab967d8-f7b9-39c8-835c-f7d2d7a100fb.roa Signing time: Tue 07 Apr 2026 16:29:58 +0000 ROA not before: Tue 07 Apr 2026 16:29:58 +0000 ROA not after: Mon 06 Jul 2026 16:29:58 +0000 asID: 18779 IP address blocks: 172.252.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:dc:fe:ac:18:e7:fb:61:62:c0:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:29:58 2026 GMT Not After : Jul 6 16:29:58 2026 GMT Subject: CN=86d2fcb6-0eda-4de5-a2d3-ee44b86a2101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:c3:ba:18:e0:a1:32:69:9b:db:58:32:ee: 48:7a:c7:e2:ac:2b:b9:03:5b:0c:98:7d:88:db:e9: 8d:dd:c6:bf:ec:3f:a1:bc:c7:ce:bd:65:19:04:55: 67:b6:b2:93:7c:46:62:d3:4e:ca:72:ed:b6:f9:6d: f7:3c:41:b4:ad:77:0c:30:05:ff:d8:35:4b:25:50: 9f:81:b5:c9:72:b9:a9:38:92:31:f5:da:37:7b:33: ff:15:4b:e8:85:70:d9:00:35:24:ac:c9:3b:ab:fc: d8:20:50:2e:00:70:8c:8b:0e:4f:1f:73:28:16:8e: 17:bd:b8:65:0d:76:23:4d:2a:7c:c1:2a:ef:10:15: bd:48:63:9e:37:02:0c:71:d4:6f:66:cc:e0:e0:46: fe:16:5f:46:95:2a:73:fb:45:1c:4e:c8:cf:02:08: 1d:62:2d:e8:cc:42:1d:9a:38:c7:57:f9:09:33:d4: 6f:99:c2:47:b2:fa:74:76:b4:db:7b:52:c6:1e:ac: 0a:9d:12:03:7b:8f:5f:65:a8:c2:fd:b6:d5:48:50: d1:04:6d:11:28:3b:32:dc:a7:9e:66:30:18:2b:2f: f5:4f:de:d4:75:d5:40:10:91:a0:dc:29:13:bd:3e: 87:2a:b4:f7:e2:c4:f6:6b:29:46:2a:5e:ab:b8:94: 64:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4A:2F:C9:CB:61:A7:56:F7:7B:88:89:7B:6A:18:31:B4:BC:F3:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8ab967d8-f7b9-39c8-835c-f7d2d7a100fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:37:f4:36:78:e1:87:28:fe:d1:d7:36:3c:13:b2:96:0c:06: 06:81:51:2b:98:72:69:b8:ca:1e:9a:10:16:86:0b:ba:f1:ab: 6f:7b:48:ef:86:17:4e:6f:05:79:2c:93:40:3e:8f:c5:63:08: e6:fc:81:2b:ae:32:af:06:08:60:22:b9:9c:70:c0:4e:27:41: 55:17:57:98:ad:74:68:1b:8d:fb:3a:be:a0:d9:6d:81:f6:e5: ff:fe:cd:6d:4c:9d:d7:55:72:7e:60:74:3b:36:c9:10:e5:e0: ad:dc:c3:76:6b:49:fc:4d:da:0f:92:ed:fb:e4:86:f2:10:10: 6c:72:9c:39:59:a6:38:b5:e3:9c:e8:d3:7f:09:34:16:a8:27: cb:f5:ad:59:53:76:a3:63:c0:d2:b9:74:58:91:c9:e3:2e:37: 92:f1:34:89:23:0c:a5:ff:2b:98:00:bd:f4:21:84:06:75:12: 01:a9:10:9c:53:36:f9:33:17:b7:1c:79:89:4d:6d:ce:d2:2f: 41:d8:fa:77:55:8b:7c:e7:48:9e:cb:e0:5b:f7:68:d2:11:dc: 5f:87:a6:f7:52:11:9a:4c:6c:54:c2:cf:a4:81:f2:76:be:45: 90:0a:40:1f:38:c6:0d:01:91:73:9e:28:d9:58:29:ed:eb:4a: a9:4f:73:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3P6sGOf7YWLA3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2Mjk1OFoXDTI2MDcwNjE2Mjk1OFowLzEtMCsGA1UEAxMk ODZkMmZjYjYtMGVkYS00ZGU1LWEyZDMtZWU0NGI4NmEyMTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxzDuhjgoTJpm9tYMu5IesfirCu5A1sMmH2I 2+mN3ca/7D+hvMfOvWUZBFVntrKTfEZi007Kcu22+W33PEG0rXcMMAX/2DVLJVCf gbXJcrmpOJIx9do3ezP/FUvohXDZADUkrMk7q/zYIFAuAHCMiw5PH3MoFo4Xvbhl DXYjTSp8wSrvEBW9SGOeNwIMcdRvZszg4Eb+Fl9GlSpz+0UcTsjPAggdYi3ozEId mjjHV/kJM9RvmcJHsvp0drTbe1LGHqwKnRIDe49fZajC/bbVSFDRBG0RKDsy3Kee ZjAYKy/1T97UddVAEJGg3CkTvT6HKrT34sT2aylGKl6ruJRk6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFKL8nLYadW93uIiXtqGDG0vPNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvOGFiOTY3ZDgtZjdiOS0z OWM4LTgzNWMtZjdkMmQ3YTEwMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ39DZ44Yco/tHXNjwTspYMBgaBUSuYcmm4yh6aEBaGC7rxq297SO+G F05vBXksk0A+j8VjCOb8gSuuMq8GCGAiuZxwwE4nQVUXV5itdGgbjfs6vqDZbYH2 5f/+zW1MnddVcn5gdDs2yRDl4K3cw3ZrSfxN2g+S7fvkhvIQEGxynDlZpji145zo 038JNBaoJ8v1rVlTdqNjwNK5dFiRyeMuN5LxNIkjDKX/K5gAvfQhhAZ1EgGpEJxT NvkzF7cceYlNbc7SL0HY+ndVi3znSJ7L4Fv3aNIR3F+HpvdSEZpMbFTCz6SB8na+ RZAKQB84xg0BkXOeKNlYKe3rSqlPc5g= -----END CERTIFICATE-----Generated at Wed Apr 8 01:44:10 2026 by rpki-client