$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/caf38e27-d77f-35db-a229-188479f2b383.roa File: caf38e27-d77f-35db-a229-188479f2b383.roa (raw, json) Hash identifier: bd7mrLnj5j2wPyjSbqLtycIncEY2JjNJxenLsF549Yw= Subject key identifier: 80:90:2C:21:1F:7A:82:BD:5C:1F:18:57:55:F2:0A:93:E0:9E:E9:10 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DD803EADCA5750227BAC300 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/caf38e27-d77f-35db-a229-188479f2b383.roa Signing time: Tue 07 Apr 2026 16:19:56 +0000 ROA not before: Tue 07 Apr 2026 16:19:56 +0000 ROA not after: Mon 06 Jul 2026 16:19:56 +0000 asID: 834 IP address blocks: 104.253.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:d8:03:ea:dc:a5:75:02:27:ba:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:19:56 2026 GMT Not After : Jul 6 16:19:56 2026 GMT Subject: CN=296c1389-02ff-4f43-a809-d43f5d5e37f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:66:e2:bd:29:bb:d5:2a:d8:fe:c1:09:f0:da: b1:84:0e:ad:8b:56:76:85:34:6d:04:b4:b6:98:e5: 59:d9:f2:49:96:34:b8:ef:21:65:1d:7b:b3:d6:df: 64:13:03:71:e2:7f:d4:bf:a2:82:c0:44:a6:2e:ff: 81:0e:0b:e8:65:41:43:44:43:44:45:52:83:7a:26: dd:d7:6c:3e:6d:6b:c9:ff:3e:fd:65:3d:c3:91:9e: 24:20:4c:74:dd:12:37:43:cf:ee:e4:68:b6:a6:b0: 0e:69:75:a7:a6:d2:69:5a:de:19:7e:fb:ee:40:64: a4:29:2e:ab:c3:7b:76:08:2a:77:d7:d3:1d:56:64: 32:1a:17:dd:2b:1d:bf:51:f0:0b:48:e2:13:94:5d: 3b:7a:44:41:ac:a2:42:48:15:d2:25:c9:95:8f:67: 5a:14:ce:33:dd:32:f2:75:13:2d:ec:97:52:8e:96: 4e:c4:26:68:f5:45:45:3b:4e:bb:21:2d:a4:1a:f6: e4:71:3c:8f:e3:87:12:91:cf:68:b3:49:4c:d5:a1: e9:9e:73:89:f6:ff:1f:ed:7f:13:6a:d1:2a:9e:5b: 93:8c:c9:83:62:31:f7:4a:80:e8:20:e8:60:a1:fc: d5:ff:37:c9:9e:4b:65:87:b9:b5:65:92:72:62:7d: 33:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:90:2C:21:1F:7A:82:BD:5C:1F:18:57:55:F2:0A:93:E0:9E:E9:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/caf38e27-d77f-35db-a229-188479f2b383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.253.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f4:fd:6e:17:93:23:87:69:a2:af:ad:aa:b3:31:fc:06:02: db:65:eb:ed:e3:a8:92:2a:23:dd:e1:ab:9c:32:51:49:77:a9: fc:c1:9f:3d:3b:a5:83:af:fc:37:6b:0d:02:66:a7:57:18:d5: e5:ef:8d:a4:30:7f:32:2f:16:17:a7:89:32:fa:4b:4f:ae:e0: fa:ce:55:79:34:66:40:ec:47:75:f0:64:8e:94:b5:a6:3f:30: ab:2d:25:cb:f8:aa:7b:0a:3b:f3:b1:90:b6:9d:74:83:48:fc: ba:36:bf:63:d9:07:c1:98:4c:4f:eb:e2:cf:31:2b:6c:0c:a8: da:5f:cb:1a:65:48:68:5f:41:07:34:73:e7:b0:56:69:61:91: 97:38:66:94:1d:42:5d:f5:b5:03:5a:14:c0:46:15:da:60:b3: f0:c0:03:56:00:87:21:ee:03:f2:28:2d:56:1b:d2:3c:0f:a6: 08:91:90:e0:00:9c:7c:a6:b6:9f:ed:85:b5:42:d0:81:ba:0b: 77:f1:ec:ae:38:ac:4c:86:49:ad:4a:a7:01:73:01:2a:4f:42: 9d:39:70:06:26:8e:cf:aa:54:97:a0:9b:a8:6e:23:ea:6b:0a: c3:44:54:c7:d4:f2:bd:09:2e:f7:a7:d8:2d:2d:03:81:58:bb: 7b:e1:f6:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t2APq3KV1Aie6wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2MTk1NloXDTI2MDcwNjE2MTk1NlowLzEtMCsGA1UEAxMk Mjk2YzEzODktMDJmZi00ZjQzLWE4MDktZDQzZjVkNWUzN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWbivSm71SrY/sEJ8NqxhA6ti1Z2hTRtBLS2 mOVZ2fJJljS47yFlHXuz1t9kEwNx4n/Uv6KCwESmLv+BDgvoZUFDRENERVKDeibd 12w+bWvJ/z79ZT3DkZ4kIEx03RI3Q8/u5Gi2prAOaXWnptJpWt4ZfvvuQGSkKS6r w3t2CCp319MdVmQyGhfdKx2/UfALSOITlF07ekRBrKJCSBXSJcmVj2daFM4z3TLy dRMt7JdSjpZOxCZo9UVFO067IS2kGvbkcTyP44cSkc9os0lM1aHpnnOJ9v8f7X8T atEqnluTjMmDYjH3SoDoIOhgofzV/zfJnktlh7m1ZZJyYn0z3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICQLCEfeoK9XB8YV1XyCpPgnukQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvY2FmMzhlMjctZDc3Zi0z NWRiLWEyMjktMTg4NDc5ZjJiMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP0aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL0/W4XkyOHaaKvraqzMfwGAttl6+3jqJIqI93hq5wyUUl3qfzBnz07 pYOv/DdrDQJmp1cY1eXvjaQwfzIvFheniTL6S0+u4PrOVXk0ZkDsR3XwZI6UtaY/ MKstJcv4qnsKO/OxkLaddINI/Lo2v2PZB8GYTE/r4s8xK2wMqNpfyxplSGhfQQc0 c+ewVmlhkZc4ZpQdQl31tQNaFMBGFdpgs/DAA1YAhyHuA/IoLVYb0jwPpgiRkOAA nHymtp/thbVC0IG6C3fx7K44rEyGSa1KpwFzASpPQp05cAYmjs+qVJegm6huI+pr CsNEVMfU8r0JLven2C0tA4FYu3vh9uw= -----END CERTIFICATE-----Generated at Wed Apr 8 01:43:50 2026 by rpki-client