$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dd288e70-dc70-35f8-a541-957c2f424197.roa File: dd288e70-dc70-35f8-a541-957c2f424197.roa (raw, json) Hash identifier: 7QZlKaQEQ6gukLwtTE/nilrlEGrKIO3DCqbZddULyRU= Subject key identifier: C4:7A:1E:E5:17:51:4C:F9:76:95:3D:75:4A:A8:C9:C4:F5:78:BE:E4 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDD4F53A98AFEC5A22F1380 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dd288e70-dc70-35f8-a541-957c2f424197.roa Signing time: Tue 07 Apr 2026 16:30:36 +0000 ROA not before: Tue 07 Apr 2026 16:30:36 +0000 ROA not after: Mon 06 Jul 2026 16:30:36 +0000 asID: 398781 IP address blocks: 172.252.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:dd:4f:53:a9:8a:fe:c5:a2:2f:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:30:36 2026 GMT Not After : Jul 6 16:30:36 2026 GMT Subject: CN=06b857c3-07dc-4064-bf79-906526bbc81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:ab:c1:94:8b:97:dd:42:2b:b8:cd:c0:ab: 1e:c6:47:38:53:b7:a6:3f:70:db:c6:7d:d3:7d:15: 75:49:b5:13:b4:57:f6:87:80:71:1e:99:ea:a8:a8: a3:6b:4c:c2:ba:3d:29:9c:92:e1:43:9e:d6:a4:3e: a3:4f:ad:39:ae:d6:eb:56:1d:ac:a1:60:5e:b6:61: 27:fc:23:f9:23:2f:36:6d:7a:4b:99:50:47:b7:3b: ad:b5:b9:a3:7d:ed:50:28:0d:8d:ce:a0:00:9e:82: be:36:3d:2a:a6:09:e5:55:0f:30:21:8e:50:2a:2e: 71:84:5c:7b:48:96:4c:94:46:86:4f:16:dd:81:2d: 17:67:fe:bd:d9:47:69:11:72:46:7c:26:7a:ee:e5: c6:ed:74:75:fe:35:7b:2d:54:41:95:a9:88:a3:b3: 51:dd:af:a5:cd:ad:53:6e:4f:59:43:bd:c2:3d:3f: 37:df:56:0e:27:93:c4:d0:68:46:a0:83:f1:45:34: bc:78:c6:e3:04:20:65:77:50:3d:03:df:10:16:a3: 7e:de:c2:7e:1f:7e:da:f1:25:96:fa:ef:66:64:ef: 93:75:a5:be:6b:24:82:79:5a:e6:b7:8d:05:e3:44: f4:4a:fe:cb:f2:d4:33:94:c3:6d:c5:97:41:10:72: ef:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7A:1E:E5:17:51:4C:F9:76:95:3D:75:4A:A8:C9:C4:F5:78:BE:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dd288e70-dc70-35f8-a541-957c2f424197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c2:bc:8c:56:68:d8:fc:86:44:4c:1e:31:b3:f8:10:b3:79: 48:5e:ab:f1:18:ba:7a:5b:c8:ed:14:7d:07:05:da:a5:82:1e: 35:10:f6:03:51:88:ed:77:aa:d5:a6:4e:4b:50:63:b9:13:26: 83:9b:a8:66:e8:91:ee:c6:59:ee:1e:99:58:28:41:35:cc:bc: 8e:e4:91:7d:c5:d1:3e:ae:1f:2c:d1:9d:82:0c:44:89:7d:ce: f6:50:9f:a8:0a:61:91:e5:84:10:48:ea:74:09:84:e5:24:07: 06:a0:b2:2a:7c:a7:9d:fd:b2:77:2f:e1:18:c7:6f:0e:20:a4: 0b:45:a4:ee:b5:01:79:db:38:63:34:88:c0:43:80:70:8a:17: 7a:a7:44:a5:72:b7:62:9b:37:a4:d4:1d:89:cb:c3:45:3d:9f: 43:19:a1:55:ce:5f:7c:b3:8e:59:00:80:b1:df:e3:ea:7f:a0: 88:f5:a9:a4:a6:e1:00:61:61:17:a8:4a:eb:0e:5f:30:66:ae: ff:ac:8a:f2:9f:ea:c9:98:55:33:e3:c5:d9:68:8f:c2:a6:7f: 76:ad:b2:03:1a:2e:74:0d:89:59:fa:b6:42:2b:48:5b:cd:22: 04:04:6a:77:ac:ae:a4:8b:6e:88:41:03:1c:cc:cf:78:05:1f: c2:a6:47:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3U9TqYr+xaIvE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2MzAzNloXDTI2MDcwNjE2MzAzNlowLzEtMCsGA1UEAxMk MDZiODU3YzMtMDdkYy00MDY0LWJmNzktOTA2NTI2YmJjODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRarwZSLl91CK7jNwKsexkc4U7emP3Dbxn3T fRV1SbUTtFf2h4BxHpnqqKija0zCuj0pnJLhQ57WpD6jT605rtbrVh2soWBetmEn /CP5Iy82bXpLmVBHtzuttbmjfe1QKA2NzqAAnoK+Nj0qpgnlVQ8wIY5QKi5xhFx7 SJZMlEaGTxbdgS0XZ/692UdpEXJGfCZ67uXG7XR1/jV7LVRBlamIo7NR3a+lza1T bk9ZQ73CPT8331YOJ5PE0GhGoIPxRTS8eMbjBCBld1A9A98QFqN+3sJ+H37a8SWW +u9mZO+TdaW+aySCeVrmt40F40T0Sv7L8tQzlMNtxZdBEHLvcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR6HuUXUUz5dpU9dUqoycT1eL7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvZGQyODhlNzAtZGM3MC0z NWY4LWE1NDEtOTU3YzJmNDI0MTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTCvIxWaNj8hkRMHjGz+BCzeUheq/EYunpbyO0UfQcF2qWCHjUQ9gNR iO13qtWmTktQY7kTJoObqGboke7GWe4emVgoQTXMvI7kkX3F0T6uHyzRnYIMRIl9 zvZQn6gKYZHlhBBI6nQJhOUkBwagsip8p539sncv4RjHbw4gpAtFpO61AXnbOGM0 iMBDgHCKF3qnRKVyt2KbN6TUHYnLw0U9n0MZoVXOX3yzjlkAgLHf4+p/oIj1qaSm 4QBhYReoSusOXzBmrv+sivKf6smYVTPjxdloj8Kmf3atsgMaLnQNiVn6tkIrSFvN IgQEanesrqSLbohBAxzMz3gFH8KmR8c= -----END CERTIFICATE-----Generated at Wed Apr 8 01:42:59 2026 by rpki-client