$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b20e23a2-a23d-301e-aacf-f8a32e574661.roa File: b20e23a2-a23d-301e-aacf-f8a32e574661.roa (raw, json) Hash identifier: sCEaAhHxuvP+vyxo5zwWOWo3b0cmr7v6sgz7MkYWwI4= Subject key identifier: 73:FF:DF:11:F7:36:83:35:59:C3:35:E4:1E:9F:65:A9:F2:66:6D:39 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDBBD77820E3976EBC57480 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b20e23a2-a23d-301e-aacf-f8a32e574661.roa Signing time: Tue 07 Apr 2026 16:27:26 +0000 ROA not before: Tue 07 Apr 2026 16:27:26 +0000 ROA not after: Mon 06 Jul 2026 16:27:26 +0000 asID: 202015 IP address blocks: 104.252.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:db:bd:77:82:0e:39:76:eb:c5:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:27:26 2026 GMT Not After : Jul 6 16:27:26 2026 GMT Subject: CN=ea37e849-ae74-4eca-9993-91c27229054f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:21:22:d8:73:17:66:50:5d:9e:b7:2a:8b:b8: 2d:39:e2:48:d6:e4:74:4e:2d:6b:76:7c:49:e0:30: 12:e0:d2:fb:b9:e1:29:0c:78:93:11:76:6e:ff:70: dd:71:6c:09:e4:c9:20:bf:0e:ba:d6:2e:9b:43:c8: 84:ee:c7:b3:9f:ed:a6:9e:84:0c:cf:1d:d6:7a:7f: 42:60:bd:ba:43:97:e3:2b:43:01:46:96:9c:43:09: b2:76:b9:8f:d6:a6:55:3d:db:4c:35:fc:93:33:15: b0:ff:a4:5f:e7:9b:09:21:45:59:fa:2d:a2:86:67: 88:ca:65:e2:20:9f:3f:8c:46:5b:b5:87:36:9c:84: 05:a0:e2:bd:a9:d7:10:76:5b:65:5e:e4:22:7e:f1: 9b:23:fa:3c:8e:6b:6c:86:b3:69:97:d8:f0:a3:e8: b8:cb:77:19:9f:b6:fb:56:dd:0c:c0:b2:54:b0:a1: c1:3c:f2:ee:ff:5b:20:a2:b4:0a:cb:5e:10:a7:3c: e8:e2:dc:01:6d:af:9e:53:e5:bb:67:b0:22:ed:6e: 1e:23:3b:1b:d0:3e:5c:6c:66:b0:79:68:4a:87:ac: d7:5a:ae:ea:79:af:80:78:05:f1:ee:0c:99:cb:d3: b8:06:5e:e3:91:74:ff:c8:29:f1:78:50:37:57:64: 4b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FF:DF:11:F7:36:83:35:59:C3:35:E4:1E:9F:65:A9:F2:66:6D:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b20e23a2-a23d-301e-aacf-f8a32e574661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.252.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b0:33:4d:94:a0:6e:ab:50:14:eb:05:fd:26:71:7a:b7:d0: 18:34:64:71:90:92:fc:38:7e:64:54:6b:da:cc:ff:4d:f7:e1: 53:1d:c2:6c:f2:47:ea:3d:bd:7c:63:c1:d1:b8:56:3a:3a:a5: 9d:d0:18:00:ef:e9:16:11:dc:6e:c5:de:23:c3:e4:d8:3a:c3: d3:4c:57:b1:3a:23:b2:b5:19:d7:64:04:2e:22:72:e2:f7:34: 05:d4:5f:7a:18:d5:76:aa:2f:02:35:79:b0:4f:ca:5d:2d:0d: 1f:f5:8c:bf:6e:52:c1:46:92:c4:e2:bf:83:68:42:a4:83:c4: c3:77:5f:60:cb:e3:48:ff:99:b5:a3:d3:80:22:e7:a5:53:00: 6e:06:7b:f0:b8:70:43:78:30:58:cb:0e:5b:ce:a9:b3:56:07: 37:06:56:c7:2c:59:f9:ce:82:bb:f0:81:7a:81:b3:34:87:6e: 21:d7:e5:d9:5c:43:da:fc:39:da:f4:7d:b8:3d:c1:f3:63:5a: d8:06:1f:5a:9e:ec:0d:b3:7e:ef:ac:6a:f1:59:13:1d:66:05: e7:9a:43:c7:40:14:47:ca:2a:85:6c:5d:83:f9:d4:02:ca:32: 3a:b9:13:00:a9:97:0d:dd:aa:8d:ed:30:17:f3:6d:64:25:10: 4e:7e:28:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t2713gg45duvFdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2MjcyNloXDTI2MDcwNjE2MjcyNlowLzEtMCsGA1UEAxMk ZWEzN2U4NDktYWU3NC00ZWNhLTk5OTMtOTFjMjcyMjkwNTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCEi2HMXZlBdnrcqi7gtOeJI1uR0Ti1rdnxJ 4DAS4NL7ueEpDHiTEXZu/3DdcWwJ5Mkgvw661i6bQ8iE7sezn+2mnoQMzx3Wen9C YL26Q5fjK0MBRpacQwmydrmP1qZVPdtMNfyTMxWw/6Rf55sJIUVZ+i2ihmeIymXi IJ8/jEZbtYc2nIQFoOK9qdcQdltlXuQifvGbI/o8jmtshrNpl9jwo+i4y3cZn7b7 Vt0MwLJUsKHBPPLu/1sgorQKy14Qpzzo4twBba+eU+W7Z7Ai7W4eIzsb0D5cbGaw eWhKh6zXWq7qea+AeAXx7gyZy9O4Bl7jkXT/yCnxeFA3V2RLqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHP/3xH3NoM1WcM15B6fZanyZm05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYjIwZTIzYTItYTIzZC0z MDFlLWFhY2YtZjhhMzJlNTc0NjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSwM02UoG6rUBTrBf0mcXq30Bg0ZHGQkvw4fmRUa9rM/0334VMdwmzy R+o9vXxjwdG4Vjo6pZ3QGADv6RYR3G7F3iPD5Ng6w9NMV7E6I7K1GddkBC4icuL3 NAXUX3oY1XaqLwI1ebBPyl0tDR/1jL9uUsFGksTiv4NoQqSDxMN3X2DL40j/mbWj 04Ai56VTAG4Ge/C4cEN4MFjLDlvOqbNWBzcGVscsWfnOgrvwgXqBszSHbiHX5dlc Q9r8Odr0fbg9wfNjWtgGH1qe7A2zfu+savFZEx1mBeeaQ8dAFEfKKoVsXYP51ALK Mjq5EwCplw3dqo3tMBfzbWQlEE5+KKE= -----END CERTIFICATE-----Generated at Wed Apr 8 01:42:35 2026 by rpki-client