$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f1b5e73c-8ddc-32c3-8080-c0921d4af27e.roa File: f1b5e73c-8ddc-32c3-8080-c0921d4af27e.roa (raw, json) Hash identifier: Nvf5/EsgWWO42VwxzeB3EKS43vlIlEkxTslMS5zuBKM= Subject key identifier: 27:DA:9D:74:49:07:39:0F:CD:9D:C1:A1:BB:B5:AC:46:E8:2C:D7:87 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDD3E35DC2B44F092A17500 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f1b5e73c-8ddc-32c3-8080-c0921d4af27e.roa Signing time: Tue 07 Apr 2026 16:30:28 +0000 ROA not before: Tue 07 Apr 2026 16:30:28 +0000 ROA not after: Mon 06 Jul 2026 16:30:28 +0000 asID: 23511 IP address blocks: 172.252.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:dd:3e:35:dc:2b:44:f0:92:a1:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:30:28 2026 GMT Not After : Jul 6 16:30:28 2026 GMT Subject: CN=39881aa2-89ae-4d50-9966-65847a0abccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e3:b9:c1:ec:05:72:30:17:8d:1c:f8:0c:8e: 5a:69:dd:94:80:8a:f2:54:86:d6:8c:ae:35:27:35: ba:76:9d:75:7b:9a:6e:57:a4:be:4f:f8:81:a2:f0: 42:ef:eb:c1:51:36:d5:57:41:e6:ff:49:d5:bc:0d: e9:a2:14:f9:71:f9:b7:09:04:68:50:6c:17:e2:e5: 3a:81:8e:26:1d:38:e6:28:44:c8:6c:33:b7:9f:55: 4e:a3:ea:2f:fa:57:6b:1a:a3:3e:39:b5:16:bf:2c: a1:0d:31:0d:73:ab:fe:ce:f6:45:3f:94:f3:dd:a5: 27:a3:ed:ef:fb:fe:ce:2a:1a:99:cd:4a:27:7b:74: a8:3c:0b:09:54:e4:b2:70:04:db:05:df:10:87:ad: 4e:1f:19:55:7e:6a:8a:a5:9e:b4:61:32:ae:07:3d: 0b:1a:23:0b:ea:43:2a:d4:8b:ec:d2:ed:b9:6c:4a: ea:af:3e:f6:ea:3a:30:ad:c5:6a:7c:7a:50:f6:24: 21:64:8f:8d:3c:73:1d:57:cd:8f:d8:08:51:68:a0: 34:77:56:d5:9e:f1:7b:c2:c8:eb:e4:e0:24:70:6c: 6d:e8:fc:51:27:4b:e6:be:c9:6f:82:56:46:44:27: 0c:bd:0b:23:7a:9d:6d:0f:98:79:2f:bd:31:19:d6: b4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DA:9D:74:49:07:39:0F:CD:9D:C1:A1:BB:B5:AC:46:E8:2C:D7:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f1b5e73c-8ddc-32c3-8080-c0921d4af27e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:50:89:28:a5:cd:65:e1:d1:95:36:6d:27:ee:fd:12:d0:dc: ec:d1:a8:af:94:47:d7:34:cf:f3:be:b0:7a:7d:b9:ff:31:14: b2:cb:d7:98:74:03:2b:9a:6e:69:a1:22:a0:d0:92:c9:ce:04: 9b:ed:e4:7d:16:19:6c:ab:09:94:a5:90:32:ee:17:7f:92:d8: 80:c2:10:56:a1:0a:98:b6:f6:83:3b:79:b0:a1:87:c5:1e:bf: bc:98:52:17:f4:d0:cd:37:28:47:83:9c:fc:03:47:20:b1:77: 2d:98:92:bc:ce:77:7d:3d:6c:75:8d:35:11:ba:f2:22:06:cb: 0e:d9:85:59:e4:17:2b:ad:1a:99:5e:1f:e0:0a:03:8e:70:7e: ef:c3:96:15:77:54:f6:d2:28:30:b1:05:72:c1:e8:02:a3:f9: f1:a8:a4:dd:f1:fa:91:e6:aa:3a:4f:8d:f0:55:8c:50:bc:73: 07:5c:2f:de:f8:6b:6f:dd:07:29:a7:02:be:17:7f:fa:15:42: 6b:8b:83:a4:b0:1d:7d:92:8f:8c:01:c2:87:fe:a8:86:d7:94: 46:e1:87:66:c8:92:da:69:b3:2d:72:13:cc:39:f7:7a:df:61: ff:08:f9:46:04:3b:29:63:9f:19:26:16:0a:42:b2:af:b3:ec: cf:f8:4f:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3T413CtE8JKhdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2MzAyOFoXDTI2MDcwNjE2MzAyOFowLzEtMCsGA1UEAxMk Mzk4ODFhYTItODlhZS00ZDUwLTk5NjYtNjU4NDdhMGFiY2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOO5wewFcjAXjRz4DI5aad2UgIryVIbWjK41 JzW6dp11e5puV6S+T/iBovBC7+vBUTbVV0Hm/0nVvA3pohT5cfm3CQRoUGwX4uU6 gY4mHTjmKETIbDO3n1VOo+ov+ldrGqM+ObUWvyyhDTENc6v+zvZFP5Tz3aUno+3v +/7OKhqZzUone3SoPAsJVOSycATbBd8Qh61OHxlVfmqKpZ60YTKuBz0LGiML6kMq 1Ivs0u25bErqrz726jowrcVqfHpQ9iQhZI+NPHMdV82P2AhRaKA0d1bVnvF7wsjr 5OAkcGxt6PxRJ0vmvslvglZGRCcMvQsjep1tD5h5L70xGda08QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfanXRJBzkPzZ3Bobu1rEboLNeHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvZjFiNWU3M2MtOGRkYy0z MmMzLTgwODAtYzA5MjFkNGFmMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrPy8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExQiSilzWXh0ZU2bSfu/RLQ3OzRqK+UR9c0z/O+sHp9uf8xFLLL15h0 AyuabmmhIqDQksnOBJvt5H0WGWyrCZSlkDLuF3+S2IDCEFahCpi29oM7ebChh8Ue v7yYUhf00M03KEeDnPwDRyCxdy2YkrzOd309bHWNNRG68iIGyw7ZhVnkFyutGple H+AKA45wfu/DlhV3VPbSKDCxBXLB6AKj+fGopN3x+pHmqjpPjfBVjFC8cwdcL974 a2/dBymnAr4Xf/oVQmuLg6SwHX2Sj4wBwof+qIbXlEbhh2bIktppsy1yE8w593rf Yf8I+UYEOyljnxkmFgpCsq+z7M/4T/g= -----END CERTIFICATE-----Generated at Wed Apr 8 01:40:51 2026 by rpki-client