$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0fa4f0f8-5f1f-3fb5-9a3f-a2d4ddc5ca02.roa File: 0fa4f0f8-5f1f-3fb5-9a3f-a2d4ddc5ca02.roa (raw, json) Hash identifier: LDx1nSaYFaahFLGsSaV6tfeutEZ7aU1H+4gD76yhnPs= Subject key identifier: 48:03:7F:91:19:FB:D7:F7:D0:E2:A9:37:00:E6:F8:DD:86:D2:BE:0B Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584E4DBA1FC4C9117DC7852F25A0 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0fa4f0f8-5f1f-3fb5-9a3f-a2d4ddc5ca02.roa Signing time: Fri 26 Jun 2026 21:00:11 +0000 ROA not before: Fri 26 Jun 2026 21:00:11 +0000 ROA not after: Thu 24 Sep 2026 21:00:11 +0000 asID: 18779 IP address blocks: 172.252.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:ba:1f:c4:c9:11:7d:c7:85:2f:25:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Jun 26 21:00:11 2026 GMT Not After : Sep 24 21:00:11 2026 GMT Subject: CN=3d5ce33c-e3d1-4676-8335-1802fbd767e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:10:f1:2f:fb:c7:26:4e:2f:fe:b8:6b:ae:21: 4f:0b:9c:65:f9:fd:38:5a:28:6d:83:49:15:96:f3: 2b:8b:ca:9d:9a:eb:83:ee:60:fd:f4:59:f5:11:c3: f6:d8:05:3c:9f:e9:8d:1c:86:8e:79:2c:fc:2e:bb: e0:cb:91:2c:f9:a6:1e:1a:27:ea:46:c4:04:de:95: 5d:4b:bc:68:1f:ed:7a:c0:eb:b1:45:35:7a:00:99: 57:af:ca:ab:a6:ca:cd:6b:59:27:c8:46:1f:06:64: e4:a1:2b:6d:80:56:94:cd:39:2c:79:ef:23:bc:c9: fb:dd:e2:37:92:75:24:90:ce:60:81:28:0c:9e:52: 61:5d:66:2e:06:98:6d:7e:2e:7b:38:ee:98:75:ab: f4:dd:d6:48:1b:56:f0:d9:c3:50:fb:e2:68:03:ce: 45:d3:45:fa:be:73:99:b1:11:87:c5:56:47:78:15: d8:08:bc:d5:8e:9d:c6:65:08:7b:d9:5a:88:39:7c: 91:92:7f:4a:38:13:43:f5:0d:a6:f2:a2:81:02:ee: bd:d1:ae:90:dc:24:c2:77:47:0f:45:b0:e2:ba:f8: ba:f9:87:97:ff:14:98:d8:28:e3:58:22:7c:e7:95: 93:24:4b:de:99:73:d4:bd:08:ef:a3:04:1d:bd:cc: 3a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:03:7F:91:19:FB:D7:F7:D0:E2:A9:37:00:E6:F8:DD:86:D2:BE:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0fa4f0f8-5f1f-3fb5-9a3f-a2d4ddc5ca02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:54:4f:c8:34:45:05:1f:b6:0e:f4:39:dc:04:4c:29:4e:f6: fe:42:a6:57:bb:e5:be:90:27:8b:48:14:fd:f0:00:c2:4a:8a: fd:f3:aa:b0:ab:83:78:77:a6:b1:99:2d:e9:d8:fb:6e:53:82: 5d:4f:48:02:67:7c:67:4e:ca:e1:f2:0f:29:bb:e6:e2:cc:91: cc:3f:0d:2e:41:ac:64:7c:37:38:c1:9c:93:52:8e:58:55:08: 13:81:f9:df:ac:49:44:03:6f:a9:cb:85:b3:f6:6e:fb:69:f9: 5e:9f:cb:b1:ec:a7:1c:aa:8b:ce:2a:16:a1:4b:9a:dc:14:ba: c4:c0:fe:ae:59:96:b9:33:10:22:12:45:ff:03:0b:db:a6:f9: aa:4a:e0:dc:a8:f4:42:83:09:5b:df:26:b2:8d:aa:f8:a7:57: 02:38:0f:a3:88:7a:e9:5d:c5:33:7f:bb:ae:9b:6a:6b:00:21: 5e:12:a5:b3:aa:28:e4:ea:ed:d2:c7:e0:12:f6:89:b3:c6:b9: fe:5f:11:2e:54:55:3f:10:83:e3:a5:c7:34:98:c1:51:c6:bd: c8:2c:8a:52:e7:6c:2d:e0:87:3d:3b:0f:89:4b:ad:00:c8:97: c0:84:01:10:07:d3:f6:89:f2:b1:f2:42:e2:5b:63:58:98:2c: b7:18:d4:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Nuh/EyRF9x4UvJaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk M2Q1Y2UzM2MtZTNkMS00Njc2LTgzMzUtMTgwMmZiZDc2N2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBDxL/vHJk4v/rhrriFPC5xl+f04Wihtg0kV lvMri8qdmuuD7mD99Fn1EcP22AU8n+mNHIaOeSz8Lrvgy5Es+aYeGifqRsQE3pVd S7xoH+16wOuxRTV6AJlXr8qrpsrNa1knyEYfBmTkoSttgFaUzTksee8jvMn73eI3 knUkkM5ggSgMnlJhXWYuBphtfi57OO6Ydav03dZIG1bw2cNQ++JoA85F00X6vnOZ sRGHxVZHeBXYCLzVjp3GZQh72VqIOXyRkn9KOBND9Q2m8qKBAu690a6Q3CTCd0cP RbDiuvi6+YeX/xSY2CjjWCJ855WTJEvemXPUvQjvowQdvcw6qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgDf5EZ+9f30OKpNwDm+N2G0r4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMGZhNGYwZjgtNWYxZi0z ZmI1LTlhM2YtYTJkNGRkYzVjYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5UT8g0RQUftg70OdwETClO9v5Cple75b6QJ4tIFP3wAMJKiv3zqrCr g3h3prGZLenY+25Tgl1PSAJnfGdOyuHyDym75uLMkcw/DS5BrGR8NzjBnJNSjlhV CBOB+d+sSUQDb6nLhbP2bvtp+V6fy7Hspxyqi84qFqFLmtwUusTA/q5ZlrkzECIS Rf8DC9um+apK4Nyo9EKDCVvfJrKNqvinVwI4D6OIeuldxTN/u66bamsAIV4SpbOq KOTq7dLH4BL2ibPGuf5fES5UVT8Qg+OlxzSYwVHGvcgsilLnbC3ghz07D4lLrQDI l8CEARAH0/aJ8rHyQuJbY1iYLLcY1DA= -----END CERTIFICATE-----Generated at Tue Jul 7 11:51:27 2026 by rpki-client