$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cde4fa49-406d-361b-af70-1ad2db11e87b.roa File: cde4fa49-406d-361b-af70-1ad2db11e87b.roa (raw, json) Hash identifier: offJhGO77a2HzUvEfIfiJrgcn2ulQkxqx1ycpmPRnCw= Subject key identifier: CF:CD:F8:DE:B6:F7:CA:F5:FF:FB:01:30:82:41:E5:41:2B:5E:93:D5 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DEC3842B1797BA15AB59340 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cde4fa49-406d-361b-af70-1ad2db11e87b.roa Signing time: Tue 07 Apr 2026 17:00:38 +0000 ROA not before: Tue 07 Apr 2026 17:00:38 +0000 ROA not after: Mon 06 Jul 2026 17:00:38 +0000 asID: 54252 IP address blocks: 104.252.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:ec:38:42:b1:79:7b:a1:5a:b5:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 17:00:38 2026 GMT Not After : Jul 6 17:00:38 2026 GMT Subject: CN=f2aa368a-63bd-40a2-838a-8224bb593bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:10:fc:fc:34:9b:ed:3d:cd:d8:fe:c9:bf:bc: 69:32:4c:ee:0d:8d:76:37:3f:2e:08:b8:92:7a:dc: af:52:6f:be:65:87:44:a9:39:9e:0f:a1:06:1f:34: ce:13:ce:5b:9f:9c:e8:d4:1b:b6:29:c1:67:d2:6c: 0f:31:9b:69:4a:b0:ee:36:42:71:10:94:32:ed:bf: fe:80:86:14:0f:d8:cc:bd:82:4c:c1:6c:e7:91:34: e0:e9:3b:e1:49:58:83:52:28:a3:b2:f8:5c:0d:37: ef:43:ae:5e:43:a2:aa:90:94:c5:70:73:68:0d:86: 8f:75:5e:bd:7c:a6:9e:56:36:f1:fd:b1:65:3c:7d: d7:7a:68:5b:fa:34:e4:a6:8c:9e:4d:f5:70:52:e1: 21:b5:14:5d:13:bd:bc:40:21:a2:6a:a5:ba:ca:78: ec:e7:6d:38:67:d6:eb:de:cf:6d:78:2b:45:05:4d: 48:96:e4:c6:16:b0:75:63:72:a4:76:59:46:b4:53: 77:3b:66:4b:20:2e:1e:9c:4e:cd:57:2c:c1:07:55: dd:e1:5e:00:f6:97:09:af:c0:47:b5:4c:82:e7:76: a2:22:b6:0e:69:cc:85:bc:93:2a:d1:88:99:4b:09: 46:6a:05:36:15:79:bb:ab:55:c9:91:b4:b8:fa:34: 8d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CD:F8:DE:B6:F7:CA:F5:FF:FB:01:30:82:41:E5:41:2B:5E:93:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cde4fa49-406d-361b-af70-1ad2db11e87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.252.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:37:40:98:9b:bb:df:3b:1d:45:0e:18:ab:ff:e3:4b:6c:b8: f6:17:4b:ee:23:eb:70:87:f5:ba:41:ab:78:43:c8:40:b7:64: 60:1f:43:51:6c:48:0b:5a:39:db:41:69:c8:dc:91:92:99:f6: 69:fa:c9:fd:9b:e1:f2:ac:8c:f1:f4:6e:26:da:e1:bb:fd:fe: 8c:48:5d:4b:b2:dd:f8:bc:0a:6d:f1:2a:f6:fd:1b:5b:e5:9e: 7d:84:9f:65:20:5e:83:26:95:f5:19:d2:73:dc:93:7e:d5:d3: b9:5d:fd:39:42:56:10:62:e7:01:80:63:e5:3c:ad:57:45:44: 34:91:9e:d8:92:d3:ca:54:eb:eb:dc:38:b7:05:78:2a:c3:64: f3:2c:b6:5a:96:41:1a:d5:15:39:53:6c:ab:19:3f:ed:da:5b: ae:d0:0b:ff:46:c6:5e:dd:7b:2a:08:84:39:77:f3:e3:ed:7d: 8f:d2:f9:ac:c9:48:9a:43:31:99:68:5e:8a:2e:3a:58:45:81: 9f:67:3b:fc:f9:9d:47:0c:75:44:7d:55:75:c1:70:84:bf:ed: 85:33:3c:a6:fd:cc:70:69:4d:56:62:ee:72:af:14:7c:23:a9: 98:59:0d:24:d1:70:52:4c:8e:da:d1:cd:7b:43:18:6f:24:bb: f2:e7:8b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t7DhCsXl7oVq1k0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE3MDAzOFoXDTI2MDcwNjE3MDAzOFowLzEtMCsGA1UEAxMk ZjJhYTM2OGEtNjNiZC00MGEyLTgzOGEtODIyNGJiNTkzYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBD8/DSb7T3N2P7Jv7xpMkzuDY12Nz8uCLiS etyvUm++ZYdEqTmeD6EGHzTOE85bn5zo1Bu2KcFn0mwPMZtpSrDuNkJxEJQy7b/+ gIYUD9jMvYJMwWznkTTg6TvhSViDUiijsvhcDTfvQ65eQ6KqkJTFcHNoDYaPdV69 fKaeVjbx/bFlPH3Xemhb+jTkpoyeTfVwUuEhtRRdE728QCGiaqW6ynjs5204Z9br 3s9teCtFBU1IluTGFrB1Y3KkdllGtFN3O2ZLIC4enE7NVyzBB1Xd4V4A9pcJr8BH tUyC53aiIrYOacyFvJMq0YiZSwlGagU2FXm7q1XJkbS4+jSNHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/N+N6298r1//sBMIJB5UErXpPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvY2RlNGZhNDktNDA2ZC0z NjFiLWFmNzAtMWFkMmRiMTFlODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk3QJibu987HUUOGKv/40tsuPYXS+4j63CH9bpBq3hDyEC3ZGAfQ1Fs SAtaOdtBacjckZKZ9mn6yf2b4fKsjPH0biba4bv9/oxIXUuy3fi8Cm3xKvb9G1vl nn2En2UgXoMmlfUZ0nPck37V07ld/TlCVhBi5wGAY+U8rVdFRDSRntiS08pU6+vc OLcFeCrDZPMstlqWQRrVFTlTbKsZP+3aW67QC/9Gxl7deyoIhDl38+PtfY/S+azJ SJpDMZloXoouOlhFgZ9nO/z5nUcMdUR9VXXBcIS/7YUzPKb9zHBpTVZi7nKvFHwj qZhZDSTRcFJMjtrRzXtDGG8ku/Lni1o= -----END CERTIFICATE-----Generated at Wed Apr 8 01:40:48 2026 by rpki-client