$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bdfcda28-1bac-316d-baa4-be19c2f208f6.roa File: bdfcda28-1bac-316d-baa4-be19c2f208f6.roa (raw, json) Hash identifier: iNRnLBmwHlQm0LzPgQt+Ff3/3l47wj2hdYON43ZbQL0= Subject key identifier: BD:03:24:C3:72:D9:AF:0B:83:9A:95:4A:78:74:87:26:ED:34:5C:39 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDD29A57F65E13914935D40 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bdfcda28-1bac-316d-baa4-be19c2f208f6.roa Signing time: Tue 07 Apr 2026 16:30:18 +0000 ROA not before: Tue 07 Apr 2026 16:30:18 +0000 ROA not after: Mon 06 Jul 2026 16:30:18 +0000 asID: 398781 IP address blocks: 172.252.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:dd:29:a5:7f:65:e1:39:14:93:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:30:18 2026 GMT Not After : Jul 6 16:30:18 2026 GMT Subject: CN=95c6facf-2c16-49fb-8a0f-da4948ac9c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:1b:8d:f1:4e:9a:d3:fb:0d:16:a9:ca:09: 13:db:ff:a1:dd:8c:3c:ca:06:98:dc:73:08:28:39: 92:49:c4:2c:5e:08:0e:9a:0c:dc:dc:e0:62:82:94: 13:2c:f6:6f:cb:8e:a2:7a:b9:20:81:9e:2c:f3:02: 28:9a:c3:e8:37:4e:ee:35:9b:aa:04:ac:ec:69:dd: 78:5c:6d:0e:8d:d2:16:4e:b7:72:f1:6f:6e:3a:f7: 48:da:74:1a:76:c1:52:b9:fe:fb:02:05:da:5d:28: 82:93:ef:89:54:77:4c:9e:b3:94:36:29:3c:21:40: be:6d:02:39:fa:2b:34:8b:3c:1c:34:97:ae:50:17: 82:3b:92:c2:50:af:43:36:2d:fc:24:ef:98:c7:ea: 31:4a:8a:9f:c7:eb:96:a5:fc:6c:ca:2e:18:2e:f4: dd:14:fa:db:2e:27:26:ac:4c:1a:72:a2:49:a0:4d: a4:f1:84:89:f9:94:24:52:20:02:d1:70:25:9b:48: 59:ef:cf:a0:82:20:94:41:59:29:63:be:8e:6b:9c: 8c:b6:1e:d9:af:06:fd:7a:9c:d3:c4:a8:7a:20:7e: 1c:d8:ee:72:c6:b1:94:03:a3:0e:78:1b:a9:0c:0b: 90:25:d2:4d:75:fb:17:79:3d:67:1c:db:29:5f:f5: 9a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:03:24:C3:72:D9:AF:0B:83:9A:95:4A:78:74:87:26:ED:34:5C:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bdfcda28-1bac-316d-baa4-be19c2f208f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a8:a2:a5:04:73:2c:f6:b4:25:53:44:66:84:e6:bc:9d:48: ca:48:d8:97:5c:04:d2:e0:22:9b:61:c1:f7:7d:30:3e:78:56: fb:fe:3c:9f:c0:00:25:b4:9f:e5:e0:9f:31:a4:61:c8:c3:f2: c7:23:f0:07:c2:e2:ef:d3:91:a2:e3:14:b1:1c:30:ab:be:c3: 4b:8f:db:10:eb:97:78:d6:c3:aa:69:85:03:65:84:32:f6:b5: 0b:14:78:9f:f9:36:38:40:cd:aa:96:88:be:12:e0:66:1a:58: ef:02:f8:ae:e5:28:81:9b:e3:71:5f:8f:e2:44:c9:53:95:06: 9a:e6:cd:06:88:39:4c:9c:19:1a:86:4a:ad:3f:c1:a2:35:2e: 53:6a:75:2e:e8:9f:4a:9c:d7:9e:33:8c:06:61:9c:25:8c:a7: 4c:85:61:61:70:c8:f5:7c:c8:7c:e6:1c:0f:6b:1f:cd:99:47: a5:d9:93:fc:2d:d4:c4:44:05:29:99:5b:27:13:41:0f:d5:83: de:3f:e0:85:ad:b8:91:5c:91:86:4e:3e:b1:1e:c3:fd:2c:52: c0:8a:32:9b:e7:ab:4f:f2:33:34:34:12:46:7a:4b:fb:da:b9: f8:68:01:22:06:ae:bb:3a:30:45:f8:04:f5:86:78:ec:ad:2d: 89:39:3f:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3Smlf2XhORSTXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2MzAxOFoXDTI2MDcwNjE2MzAxOFowLzEtMCsGA1UEAxMk OTVjNmZhY2YtMmMxNi00OWZiLThhMGYtZGE0OTQ4YWM5YzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4QbjfFOmtP7DRapygkT2/+h3Yw8ygaY3HMI KDmSScQsXggOmgzc3OBigpQTLPZvy46ierkggZ4s8wIomsPoN07uNZuqBKzsad14 XG0OjdIWTrdy8W9uOvdI2nQadsFSuf77AgXaXSiCk++JVHdMnrOUNik8IUC+bQI5 +is0izwcNJeuUBeCO5LCUK9DNi38JO+Yx+oxSoqfx+uWpfxsyi4YLvTdFPrbLicm rEwacqJJoE2k8YSJ+ZQkUiAC0XAlm0hZ78+ggiCUQVkpY76Oa5yMth7Zrwb9epzT xKh6IH4c2O5yxrGUA6MOeBupDAuQJdJNdfsXeT1nHNspX/WajwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0DJMNy2a8Lg5qVSnh0hybtNFw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYmRmY2RhMjgtMWJhYy0z MTZkLWJhYTQtYmUxOWMyZjIwOGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGooqUEcyz2tCVTRGaE5rydSMpI2JdcBNLgIpthwfd9MD54Vvv+PJ/A ACW0n+XgnzGkYcjD8scj8AfC4u/TkaLjFLEcMKu+w0uP2xDrl3jWw6pphQNlhDL2 tQsUeJ/5NjhAzaqWiL4S4GYaWO8C+K7lKIGb43Ffj+JEyVOVBprmzQaIOUycGRqG Sq0/waI1LlNqdS7on0qc154zjAZhnCWMp0yFYWFwyPV8yHzmHA9rH82ZR6XZk/wt 1MREBSmZWycTQQ/Vg94/4IWtuJFckYZOPrEew/0sUsCKMpvnq0/yMzQ0EkZ6S/va ufhoASIGrrs6MEX4BPWGeOytLYk5P4o= -----END CERTIFICATE-----Generated at Wed Apr 8 01:40:49 2026 by rpki-client