$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a9b18a0c-0f3f-3d23-b3b9-4925d9d86401.roa File: a9b18a0c-0f3f-3d23-b3b9-4925d9d86401.roa (raw, json) Hash identifier: ObsmLPyAGPGThzyA2qrDkBTjtYsZnmuAx/rakCEJ2D8= Subject key identifier: 8B:E8:DD:2E:30:F7:6A:E8:0C:8F:70:AC:99:3E:65:FB:26:C4:2C:19 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDC3F07685FCF6348660AC0 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a9b18a0c-0f3f-3d23-b3b9-4925d9d86401.roa Signing time: Tue 07 Apr 2026 16:28:27 +0000 ROA not before: Tue 07 Apr 2026 16:28:27 +0000 ROA not after: Mon 06 Jul 2026 16:28:27 +0000 asID: 13213 IP address blocks: 104.253.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:dc:3f:07:68:5f:cf:63:48:66:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:28:27 2026 GMT Not After : Jul 6 16:28:27 2026 GMT Subject: CN=cfb649b3-f685-4b45-b1f6-8dc6415b7250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b0:5c:ef:8d:22:31:f0:b8:19:d2:d9:78:70: 85:69:3e:27:1a:fb:f7:b7:17:91:39:b1:90:b5:ba: 61:0e:71:bd:21:46:72:ee:1f:ec:77:83:71:09:a9: 6c:e3:8a:27:4a:5c:cf:fc:2c:c6:b1:7a:f0:6e:c6: 63:6f:8c:5d:49:18:d3:08:95:d0:7f:3d:ae:29:49: b4:30:f9:94:44:5a:d9:0e:82:e7:6a:77:61:6d:d2: 84:87:d8:63:1d:84:6e:28:25:72:df:87:7e:75:2e: d1:e2:88:92:10:be:56:1e:e0:66:7f:8e:c3:50:ed: 5a:6b:26:ed:5c:ce:79:8b:42:37:3f:69:f5:52:76: 45:1b:dc:e3:d1:a1:58:b3:67:3a:8b:9e:eb:1a:46: 20:a7:82:05:4b:f5:c2:21:cc:93:64:eb:d1:b5:0d: 2a:41:4b:47:70:49:71:af:22:3c:f1:38:f1:86:93: d0:3c:4a:61:ea:7b:5d:87:fa:a8:22:78:12:2a:09: b0:43:70:b5:25:9c:ae:cb:34:90:be:f2:fd:44:50: f3:14:15:e0:a0:f0:aa:37:07:d3:c9:f5:91:33:df: 87:26:09:47:ee:77:74:ea:32:b3:83:d7:70:97:9e: 4f:04:cc:df:44:51:49:c0:a3:53:70:a4:34:d8:cc: 09:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E8:DD:2E:30:F7:6A:E8:0C:8F:70:AC:99:3E:65:FB:26:C4:2C:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a9b18a0c-0f3f-3d23-b3b9-4925d9d86401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.253.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e6:6d:fa:fc:63:8f:3f:63:0b:53:a4:7d:b8:78:b7:f2:3f: be:20:2a:dc:47:cb:d1:29:2e:d5:6e:92:ec:4f:0f:3e:e2:a1: 10:02:3f:2d:df:6a:d1:da:a4:97:06:d5:f0:68:c4:09:57:88: a3:68:90:36:83:69:25:a7:17:a1:d4:39:0b:88:64:db:a4:a6: 09:0c:f1:a1:08:21:e3:c5:af:79:cd:e9:e8:5d:4d:31:c9:b0: 17:fc:3f:e4:ea:6a:cc:de:4b:e1:e7:15:d0:2d:6b:18:01:67: a6:f9:03:7d:ab:e8:5e:78:d9:fc:5a:62:8d:35:2e:8f:d1:56: ce:e6:be:19:14:ea:09:82:69:dd:24:b0:e8:af:c9:f9:b3:98: 93:95:d7:26:a0:22:cc:90:a1:c0:4c:fb:29:a0:b7:15:bc:e8: b9:83:c1:03:57:b7:2d:21:4d:24:14:54:17:93:7b:f9:09:9e: ba:e3:42:90:e2:f2:50:41:f9:8b:02:19:32:0c:84:9d:2d:0b: 65:b6:47:b0:bb:e4:ae:2f:84:6d:fa:d8:26:ee:62:a5:37:24: c0:c7:e8:85:6f:93:d7:ab:bf:52:28:5b:62:c3:95:9a:56:ad: ac:f2:55:b1:e4:c4:24:a0:e5:7f:b2:69:d9:16:9b:ed:61:a1: 0d:16:5f:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3D8HaF/PY0hmCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2MjgyN1oXDTI2MDcwNjE2MjgyN1owLzEtMCsGA1UEAxMk Y2ZiNjQ5YjMtZjY4NS00YjQ1LWIxZjYtOGRjNjQxNWI3MjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Bc740iMfC4GdLZeHCFaT4nGvv3txeRObGQ tbphDnG9IUZy7h/sd4NxCals44onSlzP/CzGsXrwbsZjb4xdSRjTCJXQfz2uKUm0 MPmURFrZDoLnandhbdKEh9hjHYRuKCVy34d+dS7R4oiSEL5WHuBmf47DUO1aaybt XM55i0I3P2n1UnZFG9zj0aFYs2c6i57rGkYgp4IFS/XCIcyTZOvRtQ0qQUtHcElx ryI88TjxhpPQPEph6ntdh/qoIngSKgmwQ3C1JZyuyzSQvvL9RFDzFBXgoPCqNwfT yfWRM9+HJglH7nd06jKzg9dwl55PBMzfRFFJwKNTcKQ02MwJUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvo3S4w92roDI9wrJk+ZfsmxCwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYTliMThhMGMtMGYzZi0z ZDIzLWIzYjktNDkyNWQ5ZDg2NDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTmbfr8Y48/YwtTpH24eLfyP74gKtxHy9EpLtVukuxPDz7ioRACPy3f atHapJcG1fBoxAlXiKNokDaDaSWnF6HUOQuIZNukpgkM8aEIIePFr3nN6ehdTTHJ sBf8P+TqaszeS+HnFdAtaxgBZ6b5A32r6F542fxaYo01Lo/RVs7mvhkU6gmCad0k sOivyfmzmJOV1yagIsyQocBM+ymgtxW86LmDwQNXty0hTSQUVBeTe/kJnrrjQpDi 8lBB+YsCGTIMhJ0tC2W2R7C75K4vhG362CbuYqU3JMDH6IVvk9erv1IoW2LDlZpW razyVbHkxCSg5X+yadkWm+1hoQ0WXzQ= -----END CERTIFICATE-----Generated at Wed Apr 8 01:42:24 2026 by rpki-client