$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2d8eccce-d98b-3fd6-aacb-d4f51bf82b10.roa File: 2d8eccce-d98b-3fd6-aacb-d4f51bf82b10.roa (raw, json) Hash identifier: qNvag6I9FVHtRzbq3RLhOeKzQN29am2mlgkXmMXK7y4= Subject key identifier: 38:22:ED:CF:FC:56:94:68:88:63:B4:47:1A:27:28:14:65:04:E1:73 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584E4DBA203503F91392C5F74380 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2d8eccce-d98b-3fd6-aacb-d4f51bf82b10.roa Signing time: Fri 26 Jun 2026 21:00:11 +0000 ROA not before: Fri 26 Jun 2026 21:00:11 +0000 ROA not after: Thu 24 Sep 2026 21:00:11 +0000 asID: 398781 IP address blocks: 172.252.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:ba:20:35:03:f9:13:92:c5:f7:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Jun 26 21:00:11 2026 GMT Not After : Sep 24 21:00:11 2026 GMT Subject: CN=6fcc1cbc-0818-4e45-a446-7c98032e8098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:55:4e:8a:ba:90:64:36:20:7f:4b:07:34:f5: 33:f2:9c:0d:81:6b:02:64:13:cd:f1:21:cc:7f:dd: d0:13:0f:7e:ba:87:1a:b9:7f:5e:01:d8:bf:0a:f3: f7:df:e9:97:98:c0:b5:40:25:bd:9f:75:03:e2:d6: 29:6f:d0:64:61:87:f0:48:90:7b:e3:4c:19:1b:78: 67:6d:1a:23:b7:a0:c1:e2:04:84:d7:36:40:45:44: 66:0e:f4:d4:bd:2e:6f:c2:28:43:73:df:2f:14:49: fb:ee:f4:de:cb:95:6b:b5:d2:7d:1f:a7:3e:08:db: 31:df:6e:15:ea:ba:40:43:4b:09:52:e5:e0:a1:4e: ff:2c:77:23:4f:b9:72:b5:0f:57:09:30:8a:71:a3: 32:05:8a:21:11:94:96:1a:90:fc:e7:3a:b1:26:b3: 4e:7d:06:8b:f3:3a:95:69:c8:93:88:aa:78:e5:c2: 81:09:1d:c7:af:d0:c4:b8:2e:04:cd:a8:84:ce:e0: 73:c0:5f:92:a1:d1:71:0d:b5:2f:bf:1e:b5:80:63: 06:3e:03:83:cb:f8:33:f7:2b:bb:11:92:03:1f:49: cb:ba:90:b7:e8:99:fa:be:1f:6f:5b:11:14:7d:6b: bb:a7:73:a1:72:31:07:a8:a2:8f:dc:8e:98:e0:8d: 7e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:22:ED:CF:FC:56:94:68:88:63:B4:47:1A:27:28:14:65:04:E1:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2d8eccce-d98b-3fd6-aacb-d4f51bf82b10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ab:0b:f5:1a:94:62:66:71:20:fb:73:38:73:09:df:8f:c0: ac:73:29:8b:c0:28:88:1a:dc:af:6e:4e:69:5a:bc:da:05:fc: 5b:56:50:a2:d8:45:0a:93:8c:84:3c:ca:52:ef:8c:d2:43:28: 85:fa:1c:f7:b8:05:d2:89:37:17:d4:0d:2f:fb:bc:77:ea:ef: f7:86:ea:35:0d:cd:75:cf:ed:70:55:d8:47:0b:15:60:36:99: 7b:41:45:f1:da:5d:fa:e5:b0:88:1e:d1:27:0f:aa:05:23:33: 6b:43:8a:03:0d:cb:0b:a1:be:68:fd:2c:43:20:63:e0:b1:72: 3b:ee:80:e6:30:b9:54:93:7c:fb:86:bd:0d:0c:cc:e5:8d:ad: c2:45:82:ec:95:ba:f1:e4:5d:ad:9c:f1:d7:79:8f:7e:41:71: 2c:ec:24:5b:d0:dc:1b:4a:1c:48:39:25:83:fc:c5:b0:b0:bb: 10:5d:ba:38:32:a2:63:94:3f:1e:5b:b7:0b:dd:c9:f8:09:02: b4:b8:80:11:e0:66:f7:01:5d:b9:82:14:d4:6c:71:b0:1e:0e: 6b:56:c3:47:bc:96:21:1d:b0:ab:0f:ff:b1:3c:64:f9:b1:7d: bb:c9:07:19:13:69:06:a0:79:5c:ff:2c:51:30:2c:43:5e:a8: d0:14:80:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NuiA1A/kTksX3Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk NmZjYzFjYmMtMDgxOC00ZTQ1LWE0NDYtN2M5ODAzMmU4MDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lVOirqQZDYgf0sHNPUz8pwNgWsCZBPN8SHM f93QEw9+uocauX9eAdi/CvP33+mXmMC1QCW9n3UD4tYpb9BkYYfwSJB740wZG3hn bRojt6DB4gSE1zZARURmDvTUvS5vwihDc98vFEn77vTey5VrtdJ9H6c+CNsx324V 6rpAQ0sJUuXgoU7/LHcjT7lytQ9XCTCKcaMyBYohEZSWGpD85zqxJrNOfQaL8zqV aciTiKp45cKBCR3Hr9DEuC4EzaiEzuBzwF+SodFxDbUvvx61gGMGPgODy/gz9yu7 EZIDH0nLupC36Jn6vh9vWxEUfWu7p3OhcjEHqKKP3I6Y4I1+TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgi7c/8VpRoiGO0RxonKBRlBOFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMmQ4ZWNjY2UtZDk4Yi0z ZmQ2LWFhY2ItZDRmNTFiZjgyYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWrC/UalGJmcSD7czhzCd+PwKxzKYvAKIga3K9uTmlavNoF/FtWUKLY RQqTjIQ8ylLvjNJDKIX6HPe4BdKJNxfUDS/7vHfq7/eG6jUNzXXP7XBV2EcLFWA2 mXtBRfHaXfrlsIge0ScPqgUjM2tDigMNywuhvmj9LEMgY+CxcjvugOYwuVSTfPuG vQ0MzOWNrcJFguyVuvHkXa2c8dd5j35BcSzsJFvQ3BtKHEg5JYP8xbCwuxBdujgy omOUPx5btwvdyfgJArS4gBHgZvcBXbmCFNRscbAeDmtWw0e8liEdsKsP/7E8ZPmx fbvJBxkTaQageVz/LFEwLENeqNAUgCM= -----END CERTIFICATE-----Generated at Tue Jul 7 11:51:45 2026 by rpki-client