$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a0efed29-4007-3b87-abdb-00a78b4c9166.roa File: a0efed29-4007-3b87-abdb-00a78b4c9166.roa (raw, json) Hash identifier: dPdLhU3Ckb5YYkQhy0f+ccbraZ0C7U09JMvOftiSPyA= Subject key identifier: AE:29:E5:35:B9:40:B2:F1:7C:9E:8A:3F:18:C8:B3:6B:C3:7D:3B:54 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDB159EF79D1AB3A41EE500 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a0efed29-4007-3b87-abdb-00a78b4c9166.roa Signing time: Tue 07 Apr 2026 16:26:07 +0000 ROA not before: Tue 07 Apr 2026 16:26:07 +0000 ROA not after: Mon 06 Jul 2026 16:26:07 +0000 asID: 5650 IP address blocks: 45.39.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:db:15:9e:f7:9d:1a:b3:a4:1e:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:26:07 2026 GMT Not After : Jul 6 16:26:07 2026 GMT Subject: CN=d13f5e4c-7039-42ad-ab5b-750a9e95e876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fe:56:35:af:f1:a8:4d:55:58:14:4d:17:39: c9:c0:bf:5d:2a:68:00:b7:51:1b:41:20:bc:37:4a: 96:e6:08:b5:d1:c8:b2:c0:55:24:4f:0f:e8:98:5b: 03:0c:65:05:da:2b:8b:39:67:0d:4a:c0:fc:f4:49: 6d:1f:06:a4:ab:95:4b:a3:08:d7:51:73:3f:1e:6c: 8e:73:b7:b5:66:6f:8d:9d:27:53:27:3c:48:5f:06: 66:06:42:3b:9a:e1:1b:ae:0f:05:82:16:44:9b:5b: e1:9d:a1:1f:d8:1a:d1:c7:2f:76:19:52:c4:e5:0e: 16:06:16:cf:a2:8d:7c:d4:47:c0:2a:2f:9c:b7:f2: de:dc:30:bb:1b:23:b1:98:3a:05:4b:2b:20:a6:04: dd:6d:8a:90:98:ef:f8:0c:5b:6b:ff:16:5d:dd:1e: 92:4f:78:50:52:10:05:61:1e:ff:1a:0d:6f:a7:fd: cd:33:03:c7:d0:c2:ed:0e:49:fe:71:56:26:5f:4a: fb:08:0b:18:8a:8f:c0:32:b4:54:0a:e2:08:77:8b: a4:93:e6:0a:61:24:5a:66:d4:1a:98:6e:6b:2a:71: bd:76:e3:e9:46:6f:c4:95:90:69:a0:93:ec:c0:59: ec:c2:8b:ec:01:9f:c3:80:27:a8:39:21:e9:24:b8: 80:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:29:E5:35:B9:40:B2:F1:7C:9E:8A:3F:18:C8:B3:6B:C3:7D:3B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a0efed29-4007-3b87-abdb-00a78b4c9166.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 45.39.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:90:c7:bf:dd:b1:29:ad:47:49:56:48:a3:f7:54:90:2a:ef: f4:9d:79:cc:6b:23:00:e4:44:a0:70:dd:28:37:ef:a6:c4:ef: 35:7a:4b:09:f5:08:61:50:22:6d:34:12:36:f9:d1:ee:a2:d1: ed:6c:25:ee:99:f1:d0:39:da:e7:4e:d1:55:49:0f:20:36:44: 66:fa:9f:07:34:79:f8:e8:41:76:2e:f5:75:2c:52:6b:07:8d: 77:0e:d0:39:5d:9d:2a:9e:52:d1:e0:2d:12:2d:81:a7:89:de: b3:6b:0f:7d:83:1b:0a:ef:30:8d:71:c3:93:5e:d3:e5:67:5f: c0:6d:33:66:a5:bf:83:6a:bf:1d:4c:53:05:92:11:0f:23:87: 72:a7:e9:00:b0:ee:8e:e1:76:55:a2:c7:e6:0e:ae:51:61:04: 27:93:64:ce:2e:93:5c:fd:33:46:ce:09:63:64:5e:9e:13:fa: 67:0d:37:29:f9:bc:e9:49:23:fe:68:74:12:fb:ea:6e:a0:6f: c4:8e:2c:18:17:57:aa:d1:37:28:15:d6:d8:44:2b:1b:13:36: 44:6f:55:95:f3:c1:22:a0:8a:64:cc:5a:a1:bb:31:38:1b:85: 02:b9:1c:a0:a3:8b:eb:d4:bb:44:9a:a2:77:1c:69:33:d2:41: ee:20:33:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t2xWe950as6Qe5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2MjYwN1oXDTI2MDcwNjE2MjYwN1owLzEtMCsGA1UEAxMk ZDEzZjVlNGMtNzAzOS00MmFkLWFiNWItNzUwYTllOTVlODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP5WNa/xqE1VWBRNFznJwL9dKmgAt1EbQSC8 N0qW5gi10ciywFUkTw/omFsDDGUF2iuLOWcNSsD89EltHwakq5VLowjXUXM/HmyO c7e1Zm+NnSdTJzxIXwZmBkI7muEbrg8FghZEm1vhnaEf2BrRxy92GVLE5Q4WBhbP oo181EfAKi+ct/Le3DC7GyOxmDoFSysgpgTdbYqQmO/4DFtr/xZd3R6ST3hQUhAF YR7/Gg1vp/3NMwPH0MLtDkn+cVYmX0r7CAsYio/AMrRUCuIId4ukk+YKYSRaZtQa mG5rKnG9duPpRm/ElZBpoJPswFnswovsAZ/DgCeoOSHpJLiAPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4p5TW5QLLxfJ6KPxjIs2vDfTtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYTBlZmVkMjktNDAwNy0z Yjg3LWFiZGItMDBhNzhiNGM5MTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSerMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2Qx7/dsSmtR0lWSKP3VJAq7/SdecxrIwDkRKBw3Sg376bE7zV6Swn1 CGFQIm00Ejb50e6i0e1sJe6Z8dA52udO0VVJDyA2RGb6nwc0efjoQXYu9XUsUmsH jXcO0DldnSqeUtHgLRItgaeJ3rNrD32DGwrvMI1xw5Ne0+VnX8BtM2alv4Nqvx1M UwWSEQ8jh3Kn6QCw7o7hdlWix+YOrlFhBCeTZM4uk1z9M0bOCWNkXp4T+mcNNyn5 vOlJI/5odBL76m6gb8SOLBgXV6rRNygV1thEKxsTNkRvVZXzwSKgimTMWqG7MTgb hQK5HKCji+vUu0SaonccaTPSQe4gMxE= -----END CERTIFICATE-----Generated at Wed Apr 8 01:39:06 2026 by rpki-client