$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/41e02930-4001-3fe6-86e8-0a14402f4273.roa File: 41e02930-4001-3fe6-86e8-0a14402f4273.roa (raw, json) Hash identifier: NWapb3aMef2jMORtP+Qg7bIrsMCfV7bgzzmHY6IfkSw= Subject key identifier: 9C:3C:35:5B:21:57:E4:45:E5:CD:47:88:84:8F:9B:9E:66:C2:D1:C9 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584E4DBA1EED0FD8FBC32519CE00 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/41e02930-4001-3fe6-86e8-0a14402f4273.roa Signing time: Fri 26 Jun 2026 21:00:11 +0000 ROA not before: Fri 26 Jun 2026 21:00:11 +0000 ROA not after: Thu 24 Sep 2026 21:00:11 +0000 asID: 398781 IP address blocks: 172.252.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:ba:1e:ed:0f:d8:fb:c3:25:19:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Jun 26 21:00:11 2026 GMT Not After : Sep 24 21:00:11 2026 GMT Subject: CN=3bc6fb59-a35f-406e-b526-903a2787a0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:37:41:e3:31:b7:8e:91:b1:92:92:0e:0d: 30:2c:92:5d:dd:2a:e7:fd:ed:95:5f:f2:4c:11:3d: 72:ae:f6:32:eb:84:80:a1:1f:66:37:74:5a:8e:60: 46:1c:c1:35:d7:21:4b:31:5e:6c:32:58:1c:ab:c6: dd:74:36:1d:92:d1:8b:85:32:27:15:86:25:30:e4: 80:8e:e5:0a:90:05:0d:16:1e:48:ca:93:ba:3a:f4: 50:78:68:61:86:1f:3d:38:1e:cd:96:45:84:06:6c: c4:bf:83:79:57:96:f8:c5:ec:28:38:ec:f6:31:ab: b5:24:c7:9e:09:61:d5:01:42:76:63:33:c4:00:e7: 81:22:8d:06:90:2e:33:eb:44:46:1d:5a:bd:bd:34: 50:f7:76:62:e6:11:70:ba:9d:df:2d:0f:55:6c:ca: c3:5d:a7:09:02:96:4b:d2:3d:ab:44:15:86:cf:12: 77:20:ac:f2:3a:59:f4:b4:ee:ee:0e:23:a2:81:6c: e8:dd:d4:32:20:c1:bb:63:25:c7:ff:46:fa:c4:52: 83:2e:d7:45:e4:04:ce:86:8a:98:c6:03:d2:16:04: b8:e2:46:85:97:b2:ff:ef:37:75:1d:d9:08:77:6d: bb:e9:fa:16:79:53:da:6d:e3:36:d4:d8:61:8f:e4: f3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3C:35:5B:21:57:E4:45:E5:CD:47:88:84:8F:9B:9E:66:C2:D1:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/41e02930-4001-3fe6-86e8-0a14402f4273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:3b:df:c0:77:4d:70:c8:84:e6:0f:3a:09:81:70:8b:76:88: 07:15:6e:0c:07:39:68:47:ea:51:28:12:25:c9:27:be:97:38: 1e:29:f4:63:85:40:f1:82:af:73:23:c5:cc:01:b4:54:e7:5d: 1a:e5:74:4c:24:a8:31:2d:68:0a:7c:32:c7:77:15:9a:05:47: 75:f9:f5:44:d3:7d:84:76:a8:09:6f:68:90:ec:fe:cd:92:6a: 7d:1f:c6:52:9b:5e:62:39:49:aa:00:ac:46:e4:c5:32:ec:73: ac:46:9d:b7:0d:22:a1:23:52:30:8a:0a:36:68:ea:b3:af:8c: 8d:d8:6c:9e:a1:11:21:34:55:44:ea:6b:6e:59:ed:ca:10:c2: e4:36:44:30:fe:c9:ec:33:49:ff:a8:42:e2:f9:9a:7c:da:3d: e5:87:18:82:87:65:7f:89:da:72:26:a0:27:1b:d1:d2:d6:da: 4c:be:d9:ec:d7:7c:4b:13:00:4c:49:d4:b5:4f:34:3d:15:5f: 33:30:68:97:79:9b:52:45:48:c0:61:87:2b:85:be:94:a8:29: 11:36:9a:98:a0:96:b6:53:6e:cc:cb:b9:da:d5:28:30:78:53: 83:b0:60:30:46:37:e8:ff:c5:22:d3:95:bc:06:c9:d8:85:e1: a2:82:7b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Nuh7tD9j7wyUZzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk M2JjNmZiNTktYTM1Zi00MDZlLWI1MjYtOTAzYTI3ODdhMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo83QeMxt46RsZKSDg0wLJJd3Srn/e2VX/JM ET1yrvYy64SAoR9mN3RajmBGHME11yFLMV5sMlgcq8bddDYdktGLhTInFYYlMOSA juUKkAUNFh5IypO6OvRQeGhhhh89OB7NlkWEBmzEv4N5V5b4xewoOOz2Mau1JMee CWHVAUJ2YzPEAOeBIo0GkC4z60RGHVq9vTRQ93Zi5hFwup3fLQ9VbMrDXacJApZL 0j2rRBWGzxJ3IKzyOln0tO7uDiOigWzo3dQyIMG7YyXH/0b6xFKDLtdF5ATOhoqY xgPSFgS44kaFl7L/7zd1HdkId2276foWeVPabeM21Nhhj+TzdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJw8NVshV+RF5c1HiISPm55mwtHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNDFlMDI5MzAtNDAwMS0z ZmU2LTg2ZTgtMGExNDQwMmY0MjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPx1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI738B3TXDIhOYPOgmBcIt2iAcVbgwHOWhH6lEoEiXJJ76XOB4p9GOF QPGCr3MjxcwBtFTnXRrldEwkqDEtaAp8Msd3FZoFR3X59UTTfYR2qAlvaJDs/s2S an0fxlKbXmI5SaoArEbkxTLsc6xGnbcNIqEjUjCKCjZo6rOvjI3YbJ6hESE0VUTq a25Z7coQwuQ2RDD+yewzSf+oQuL5mnzaPeWHGIKHZX+J2nImoCcb0dLW2ky+2ezX fEsTAExJ1LVPND0VXzMwaJd5m1JFSMBhhyuFvpSoKRE2mpiglrZTbszLudrVKDB4 U4OwYDBGN+j/xSLTlbwGydiF4aKCe5Q= -----END CERTIFICATE-----Generated at Tue Jul 7 11:56:30 2026 by rpki-client