$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bb36344c-d254-367e-a2be-2bead9670b5b.roa File: bb36344c-d254-367e-a2be-2bead9670b5b.roa (raw, json) Hash identifier: 2fy8BhSqsxgwlc+288yt2+lg58Pcek0GwfvzwSq4tGU= Subject key identifier: 42:B7:BA:31:A5:5A:B9:E5:B4:2E:98:18:20:56:73:C2:75:FE:CD:45 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDC3F31ACF90676791AAAC0 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bb36344c-d254-367e-a2be-2bead9670b5b.roa Signing time: Tue 07 Apr 2026 16:28:27 +0000 ROA not before: Tue 07 Apr 2026 16:28:27 +0000 ROA not after: Mon 06 Jul 2026 16:28:27 +0000 asID: 400944 IP address blocks: 104.253.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:dc:3f:31:ac:f9:06:76:79:1a:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:28:27 2026 GMT Not After : Jul 6 16:28:27 2026 GMT Subject: CN=a6482fb7-7ce7-4536-a8f8-26a132668c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:b5:8b:81:fb:91:cd:22:82:48:70:0f:c6: 59:9b:a2:0a:69:ff:8f:09:2f:b2:27:2e:26:df:0e: c5:72:e1:5b:7d:6b:99:19:3c:8b:ec:0f:7f:f9:26: 25:8f:af:42:01:37:3d:e4:cf:fd:ee:fc:ed:ec:63: e9:56:44:01:45:c4:25:9a:3f:34:b3:7f:01:da:25: d9:50:bf:47:65:55:86:c6:cd:6d:cc:ca:c1:e6:e3: 98:92:f1:c5:01:c5:d6:09:e6:cc:88:a0:4c:bb:f1: 56:2d:4a:1e:b2:c4:46:b1:ed:09:18:43:a1:00:3e: 08:e9:a4:6a:99:1e:72:be:48:ac:a2:03:71:e0:57: 34:f1:fb:bc:eb:b0:1e:18:6e:3f:96:da:84:3a:c9: 4b:e5:b2:c5:37:3d:9f:5c:a0:16:34:b3:74:e4:30: 9d:65:0f:a3:e7:ea:cb:3f:fb:de:e6:a2:ab:35:24: db:8f:08:1f:84:fd:cc:20:52:ca:c8:5d:34:d4:a9: 1d:d4:7f:aa:0e:0c:86:24:1b:09:78:f8:23:39:8f: 20:6b:88:19:e6:8d:9f:51:c9:8c:46:ea:20:2b:17: f2:18:4e:6d:68:40:70:99:9f:b0:c0:00:08:55:ce: d5:14:9d:5f:76:3f:c7:62:0b:39:26:92:bf:34:57: ab:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B7:BA:31:A5:5A:B9:E5:B4:2E:98:18:20:56:73:C2:75:FE:CD:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bb36344c-d254-367e-a2be-2bead9670b5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.253.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:dc:22:01:1a:70:37:ad:e0:39:ea:8f:63:88:5f:2f:3a:09: f1:ad:f8:19:13:a8:59:8f:13:16:7d:d0:ca:69:18:36:da:e8: e7:5d:09:1e:2b:5f:40:01:dc:cb:0b:7d:17:c8:8b:e2:af:5b: ec:8c:76:6e:a6:1b:b8:e4:95:3e:db:d0:e6:18:72:a3:65:03: 0e:f9:de:12:5f:90:d6:ba:70:d0:af:da:b8:98:05:58:03:82: d2:fd:8d:12:26:21:df:db:a6:08:1d:32:d5:21:97:2a:f7:ef: e4:d1:b8:65:3a:9d:3d:cc:27:de:25:4c:f7:e3:41:56:74:82: 98:97:99:6c:7b:4a:6e:0d:51:a7:da:2d:0c:3d:cc:23:1f:12: 41:4d:f2:c1:0b:5b:94:96:4c:4d:1e:f0:ba:16:05:bc:7e:79: 52:6f:58:85:7b:12:ff:e3:50:24:c0:d1:ac:92:03:3d:9d:a1: 0c:cd:de:7e:67:31:f4:e5:49:09:46:ee:a4:eb:f3:dd:54:32: cf:67:41:25:65:ee:cf:c8:a4:a9:80:fb:1c:6b:2a:cf:cc:49: 96:d6:05:41:15:d3:41:b0:3d:0b:c7:80:d5:9b:46:df:62:34: e8:ce:2b:9e:23:82:3a:03:0e:c0:be:6f:1a:3f:00:26:03:09: 17:c6:9b:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3D8xrPkGdnkaqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2MjgyN1oXDTI2MDcwNjE2MjgyN1owLzEtMCsGA1UEAxMk YTY0ODJmYjctN2NlNy00NTM2LWE4ZjgtMjZhMTMyNjY4YzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYe1i4H7kc0igkhwD8ZZm6IKaf+PCS+yJy4m 3w7FcuFbfWuZGTyL7A9/+SYlj69CATc95M/97vzt7GPpVkQBRcQlmj80s38B2iXZ UL9HZVWGxs1tzMrB5uOYkvHFAcXWCebMiKBMu/FWLUoessRGse0JGEOhAD4I6aRq mR5yvkisogNx4Fc08fu867AeGG4/ltqEOslL5bLFNz2fXKAWNLN05DCdZQ+j5+rL P/ve5qKrNSTbjwgfhP3MIFLKyF001Kkd1H+qDgyGJBsJePgjOY8ga4gZ5o2fUcmM RuogKxfyGE5taEBwmZ+wwAAIVc7VFJ1fdj/HYgs5JpK/NFerbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK3ujGlWrnltC6YGCBWc8J1/s1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYmIzNjM0NGMtZDI1NC0z NjdlLWEyYmUtMmJlYWQ5NjcwYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7cIgEacDet4Dnqj2OIXy86CfGt+BkTqFmPExZ90MppGDba6OddCR4r X0AB3MsLfRfIi+KvW+yMdm6mG7jklT7b0OYYcqNlAw753hJfkNa6cNCv2riYBVgD gtL9jRImId/bpggdMtUhlyr37+TRuGU6nT3MJ94lTPfjQVZ0gpiXmWx7Sm4NUafa LQw9zCMfEkFN8sELW5SWTE0e8LoWBbx+eVJvWIV7Ev/jUCTA0aySAz2doQzN3n5n MfTlSQlG7qTr891UMs9nQSVl7s/IpKmA+xxrKs/MSZbWBUEV00GwPQvHgNWbRt9i NOjOK54jgjoDDsC+bxo/ACYDCRfGm70= -----END CERTIFICATE-----Generated at Wed Apr 8 01:39:23 2026 by rpki-client