$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fa1f9ea1-1b47-345e-b244-e5f81f4ddf82.roa File: fa1f9ea1-1b47-345e-b244-e5f81f4ddf82.roa (raw, json) Hash identifier: yH3PS//xRQgeDcQCN2pXtgx4Ewikbnn8Hx6eW4+G/o8= Subject key identifier: 35:0B:D4:AB:C7:5E:03:FB:43:91:8B:DA:6B:A3:19:6A:86:96:45:AB Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584D6DDC52883183C31D5000A000 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fa1f9ea1-1b47-345e-b244-e5f81f4ddf82.roa Signing time: Tue 07 Apr 2026 16:28:36 +0000 ROA not before: Tue 07 Apr 2026 16:28:36 +0000 ROA not after: Mon 06 Jul 2026 16:28:36 +0000 asID: 16509 IP address blocks: 104.253.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:dc:52:88:31:83:c3:1d:50:00:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Apr 7 16:28:36 2026 GMT Not After : Jul 6 16:28:36 2026 GMT Subject: CN=9b39b000-91f2-45da-acde-1fbce7764f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:e1:a6:f9:ce:5c:d7:31:da:62:93:13:06: 62:39:25:c4:d8:d5:8c:82:60:a2:50:81:4e:ed:4f: 7d:55:0d:80:14:76:a5:14:c2:18:99:24:5a:a4:ab: ad:06:b1:90:eb:b0:b2:90:20:41:4c:ca:63:06:1f: 16:cd:94:a2:94:5c:73:cf:1b:fc:fb:7e:34:9e:3e: f8:bb:c5:73:ee:14:c1:23:0d:7b:2a:04:b1:df:8f: f8:90:11:db:ef:4b:a3:d0:16:4e:db:46:4c:16:ea: 58:be:28:c3:c1:4a:9e:be:a9:70:12:bb:6c:91:64: d1:bd:5a:b3:b5:69:50:9c:86:cf:a4:46:8b:89:7c: d2:3c:73:a6:02:1f:06:14:85:91:f6:4c:7c:8c:52: 1d:2d:ed:1b:d0:5d:01:70:82:97:08:9d:f2:89:db: 68:ea:3f:f9:a5:7a:ec:6f:75:10:35:62:b2:a9:51: 19:b9:bb:f4:a3:58:04:1a:86:51:e0:ca:0e:b9:be: 9a:f9:06:6c:39:14:3b:07:b5:58:ab:37:fd:0d:ff: 15:03:b2:65:1d:84:8e:ed:87:59:9b:a6:54:84:aa: 1c:7e:9d:ca:61:91:fd:4f:d5:dd:c8:23:46:a2:77: 01:4e:76:dd:51:2f:d9:f5:c1:6e:0b:a8:ff:f4:bb: db:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0B:D4:AB:C7:5E:03:FB:43:91:8B:DA:6B:A3:19:6A:86:96:45:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fa1f9ea1-1b47-345e-b244-e5f81f4ddf82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 104.253.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:fb:eb:c3:97:f9:31:80:05:3d:94:dd:f5:91:22:e2:1d:a1: b6:bb:9c:a5:16:b3:8f:e1:29:a8:8a:08:f3:18:e3:78:3f:d0: 99:d0:4d:f2:ae:88:dc:05:9c:1a:b0:98:2f:da:c2:8e:23:37: 42:0a:68:4c:ae:98:2f:fa:5a:1d:e2:dc:7e:03:94:11:8f:5b: 2c:d5:e6:92:6e:2c:0e:98:55:cb:63:23:27:87:92:c7:89:a4: 0a:53:cd:8d:bf:e1:89:d8:40:d3:f3:ec:cf:4d:e5:8a:ac:81: d1:38:08:75:07:1c:44:bf:c0:dd:42:b8:f1:98:53:54:3e:4f: 83:1c:91:67:e2:34:43:57:1b:49:7c:2c:3b:e0:26:a7:1c:23: 9a:38:c7:88:2c:fa:4c:85:03:2b:37:9d:59:0e:f2:3c:fa:33: dd:5f:58:64:32:1a:1e:a4:2d:f8:f3:71:09:c9:94:70:d6:b9: 62:7c:1a:83:99:90:d0:b2:0d:64:27:8e:51:af:58:e3:4e:87: 75:50:05:de:12:a7:0b:81:48:11:e1:16:40:19:f7:9b:25:60: d0:25:6c:f6:0f:28:a6:5e:f2:f2:47:03:fb:39:cc:2f:6d:81: db:3b:20:06:2a:74:34:48:a7:92:e7:bc:02:6f:11:90:ef:d2: 04:1c:d9:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3FKIMYPDHVAAoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDQwNzE2MjgzNloXDTI2MDcwNjE2MjgzNlowLzEtMCsGA1UEAxMk OWIzOWIwMDAtOTFmMi00NWRhLWFjZGUtMWZiY2U3NzY0ZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5DhpvnOXNcx2mKTEwZiOSXE2NWMgmCiUIFO 7U99VQ2AFHalFMIYmSRapKutBrGQ67CykCBBTMpjBh8WzZSilFxzzxv8+340nj74 u8Vz7hTBIw17KgSx34/4kBHb70uj0BZO20ZMFupYvijDwUqevqlwErtskWTRvVqz tWlQnIbPpEaLiXzSPHOmAh8GFIWR9kx8jFIdLe0b0F0BcIKXCJ3yidto6j/5pXrs b3UQNWKyqVEZubv0o1gEGoZR4MoOub6a+QZsORQ7B7VYqzf9Df8VA7JlHYSO7YdZ m6ZUhKocfp3KYZH9T9XdyCNGoncBTnbdUS/Z9cFuC6j/9LvbowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUL1KvHXgP7Q5GL2mujGWqGlkWrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvZmExZjllYTEtMWI0Ny0z NDVlLWIyNDQtZTVmODFmNGRkZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD768OX+TGABT2U3fWRIuIdoba7nKUWs4/hKaiKCPMY43g/0JnQTfKu iNwFnBqwmC/awo4jN0IKaEyumC/6Wh3i3H4DlBGPWyzV5pJuLA6YVctjIyeHkseJ pApTzY2/4YnYQNPz7M9N5YqsgdE4CHUHHES/wN1CuPGYU1Q+T4MckWfiNENXG0l8 LDvgJqccI5o4x4gs+kyFAys3nVkO8jz6M91fWGQyGh6kLfjzcQnJlHDWuWJ8GoOZ kNCyDWQnjlGvWONOh3VQBd4SpwuBSBHhFkAZ95slYNAlbPYPKKZe8vJHA/s5zC9t gds7IAYqdDRIp5LnvAJvEZDv0gQc2Sg= -----END CERTIFICATE-----Generated at Wed Apr 8 01:39:21 2026 by rpki-client