$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/17e9e69f-8c5c-3614-8e1c-0e132d957c66.roa File: 17e9e69f-8c5c-3614-8e1c-0e132d957c66.roa (raw, json) Hash identifier: xMvGBqr5iKd3jean/TlRVgHlN9trPIDgyDlMjKITndI= Subject key identifier: 67:11:3D:25:E0:B1:0A:22:DC:38:AB:95:5C:12:D0:24:43:E6:DC:86 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584DE931640BB7D568C7DEA54A50 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/17e9e69f-8c5c-3614-8e1c-0e132d957c66.roa Signing time: Thu 21 May 2026 20:44:26 +0000 ROA not before: Thu 21 May 2026 20:44:26 +0000 ROA not after: Wed 19 Aug 2026 20:44:26 +0000 asID: 9009 IP address blocks: 172.252.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:31:64:0b:b7:d5:68:c7:de:a5:4a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: May 21 20:44:26 2026 GMT Not After : Aug 19 20:44:26 2026 GMT Subject: CN=8e8756c8-c816-4838-a642-fe029b978222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:e3:8b:9c:91:d9:eb:a0:81:be:36:81:04: c9:69:32:f7:37:da:b6:71:2c:ff:1a:01:8c:36:b4: 6d:93:ae:e6:8e:ee:0d:9b:a6:be:f7:b6:d8:b1:99: d6:cf:28:6f:d9:54:e7:1e:85:5f:e6:57:45:83:73: ce:66:2d:e9:62:75:ff:81:2d:58:93:f4:97:ee:ab: a3:d7:e2:d3:dd:f6:38:34:b5:02:e2:50:86:25:01: 32:73:c5:a7:4b:e2:28:95:02:25:92:a9:10:9b:21: 15:6d:60:18:13:9e:bd:97:b6:9b:46:69:db:f3:3b: a1:eb:db:0e:b0:0a:71:00:b7:e0:42:94:cb:02:e1: 94:a9:e1:c6:02:b8:d4:fd:2b:28:f5:5a:59:59:ac: 7d:76:85:6c:99:11:47:e5:e2:7c:47:7d:24:96:a3: d2:b7:76:40:70:fd:48:91:6c:0d:f8:0b:aa:31:79: 3d:e0:1d:00:4b:5b:6d:90:5f:fe:3c:dd:d0:3e:e4: de:d3:67:53:8a:cb:05:67:6d:ca:b0:fd:36:a9:8a: a0:0a:45:ac:f5:43:cc:d5:48:a2:39:0e:d7:48:66: e3:00:79:84:f6:98:18:cd:4e:e1:1e:a5:04:4b:f7: 93:b1:97:a1:f0:85:e5:fb:21:dd:81:17:7d:57:36: d4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:11:3D:25:E0:B1:0A:22:DC:38:AB:95:5C:12:D0:24:43:E6:DC:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/17e9e69f-8c5c-3614-8e1c-0e132d957c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ab:c4:12:ff:f4:f9:26:8b:56:a6:77:c7:fb:ab:5f:d4:0e: 8e:ff:cd:45:54:9a:2f:2c:99:ba:ea:3e:e1:91:59:96:df:4e: 70:89:f9:99:dd:20:5a:59:94:d5:e8:2f:58:da:02:2a:06:65: 8b:b9:b5:15:ce:4a:59:7c:6d:04:02:0e:c5:2c:27:00:47:af: b1:c8:c2:57:41:cb:19:23:f8:bc:e7:9e:a0:f2:10:0b:a9:d1: 88:f1:af:dd:9a:60:ed:aa:fe:62:ff:e4:3d:ed:47:06:52:a6: 12:50:d0:4f:02:e5:5b:1b:d2:e5:c8:0b:4b:e9:db:84:ea:51: 32:42:34:6d:1e:e4:36:3f:bc:c1:cf:1e:4d:fc:8d:28:50:2a: 90:e8:3b:ee:f3:a2:cd:e7:1c:36:15:04:d2:92:71:8f:28:f6: 5a:74:b6:5a:1d:3d:9c:a4:24:3b:5f:2e:fa:83:3d:3c:ba:18: 71:c5:93:5e:21:5e:df:b4:c0:7a:6e:aa:b7:09:77:ea:cd:75: 7a:10:5c:0e:29:1e:ef:14:d2:fa:2b:db:3b:44:a5:d9:e0:52: 3b:04:1e:c8:c8:e5:ad:34:59:0b:e1:4e:79:05:23:4d:9e:82: 40:a8:f1:80:c0:bf:09:34:e4:df:52:00:3d:c0:cd:88:a9:30: f6:e9:bf:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3pMWQLt9Vox96lSlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDUyMTIwNDQyNloXDTI2MDgxOTIwNDQyNlowLzEtMCsGA1UEAxMk OGU4NzU2YzgtYzgxNi00ODM4LWE2NDItZmUwMjliOTc4MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKDji5yR2euggb42gQTJaTL3N9q2cSz/GgGM NrRtk67mju4Nm6a+97bYsZnWzyhv2VTnHoVf5ldFg3POZi3pYnX/gS1Yk/SX7quj 1+LT3fY4NLUC4lCGJQEyc8WnS+IolQIlkqkQmyEVbWAYE569l7abRmnb8zuh69sO sApxALfgQpTLAuGUqeHGArjU/Sso9VpZWax9doVsmRFH5eJ8R30klqPSt3ZAcP1I kWwN+AuqMXk94B0AS1ttkF/+PN3QPuTe02dTissFZ23KsP02qYqgCkWs9UPM1Uii OQ7XSGbjAHmE9pgYzU7hHqUES/eTsZeh8IXl+yHdgRd9VzbU7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcRPSXgsQoi3DirlVwS0CRD5tyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMTdlOWU2OWYtOGM1Yy0z NjE0LThlMWMtMGUxMzJkOTU3YzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPznMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFerxBL/9Pkmi1amd8f7q1/UDo7/zUVUmi8smbrqPuGRWZbfTnCJ+Znd IFpZlNXoL1jaAioGZYu5tRXOSll8bQQCDsUsJwBHr7HIwldByxkj+LznnqDyEAup 0Yjxr92aYO2q/mL/5D3tRwZSphJQ0E8C5Vsb0uXIC0vp24TqUTJCNG0e5DY/vMHP Hk38jShQKpDoO+7zos3nHDYVBNKScY8o9lp0tlodPZykJDtfLvqDPTy6GHHFk14h Xt+0wHpuqrcJd+rNdXoQXA4pHu8U0vor2ztEpdngUjsEHsjI5a00WQvhTnkFI02e gkCo8YDAvwk05N9SAD3AzYipMPbpv4o= -----END CERTIFICATE-----Generated at Sat May 23 04:26:03 2026 by rpki-client