$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/68e8e202-8ff5-3de5-85e7-f6894acbbabd.roa File: 68e8e202-8ff5-3de5-85e7-f6894acbbabd.roa (raw, json) Hash identifier: ChHcM0hIfEjP8ejb8/wkRv1yJEcpEHU7cA8an93FLHw= Subject key identifier: 5E:8B:92:66:56:EF:7B:B5:36:D4:98:0E:D8:83:C6:0D:B4:A8:25:30 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584E4DBA202A29C8AF4D207E5620 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/68e8e202-8ff5-3de5-85e7-f6894acbbabd.roa Signing time: Fri 26 Jun 2026 21:00:11 +0000 ROA not before: Fri 26 Jun 2026 21:00:11 +0000 ROA not after: Thu 24 Sep 2026 21:00:11 +0000 asID: 9009 IP address blocks: 172.252.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:ba:20:2a:29:c8:af:4d:20:7e:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Jun 26 21:00:11 2026 GMT Not After : Sep 24 21:00:11 2026 GMT Subject: CN=3d15d9b4-d983-43c0-8a2d-23b26c5f5461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:d7:a4:77:e7:ac:99:e6:44:43:37:80:13: 88:70:63:68:e4:d0:b6:58:15:6e:9d:1e:d7:58:cc: ca:25:df:15:9d:4d:6a:dc:83:6d:62:de:fb:43:40: b5:45:da:57:55:fc:bf:59:e2:59:02:68:ce:8b:11: 79:e1:d1:d6:59:45:32:d0:b4:55:53:f6:a3:0c:56: ee:14:c2:ba:1a:cd:af:f6:e7:f1:94:8f:35:61:13: 7e:2f:ec:d0:5b:8e:0c:f6:af:a7:cc:58:c9:cc:b5: c9:23:86:f6:87:38:da:b0:ec:b5:e9:68:79:3f:52: af:c8:74:f6:d4:93:4a:1c:fa:77:21:9e:31:37:93: 4e:a0:c7:c8:47:ef:83:dd:2b:02:db:9a:d5:96:d5: 35:1c:54:fe:ee:f1:c7:78:f0:db:28:ec:6a:06:3e: 05:c9:6d:69:99:bb:ed:23:0a:b7:36:e1:8c:3a:a9: 2d:87:8d:af:2c:15:df:69:7b:df:c5:ef:2f:90:bf: 1c:1a:dd:46:78:a6:f6:00:d7:b1:c2:40:7c:d8:fd: 0e:72:9d:cc:0f:61:6e:52:1e:70:55:1e:54:fc:3e: 25:85:ee:f4:0b:eb:5b:f4:ae:3d:e4:5f:98:74:af: 75:fb:b3:d0:5c:9b:d0:bc:44:11:57:40:9e:67:b8: 13:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8B:92:66:56:EF:7B:B5:36:D4:98:0E:D8:83:C6:0D:B4:A8:25:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/68e8e202-8ff5-3de5-85e7-f6894acbbabd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:82:64:06:50:c5:d3:76:fd:06:a1:25:f8:17:fd:83:f9:c2: d2:3d:b2:e1:cc:94:ab:ff:74:48:5e:7c:1f:94:08:b4:89:6c: 55:10:c3:9f:77:b9:ba:40:3c:06:57:06:c3:65:bd:93:ba:d1: 91:f1:96:ec:1a:20:b2:e3:2d:67:6f:86:ed:98:71:06:fd:ef: 01:55:be:ed:aa:ca:15:8b:4b:df:5b:35:58:ad:02:fb:1b:2b: 88:64:0c:b5:6e:90:4c:17:24:8b:5f:3a:aa:16:d6:f8:87:0f: 79:ad:37:55:43:5d:05:76:87:9c:33:cc:67:39:67:15:5a:07: 2a:8a:40:30:36:65:04:17:f2:b9:f0:8c:22:cd:d1:b6:e4:e3: dc:18:a7:8c:02:4e:59:2c:48:cc:20:ff:24:d3:c4:cd:26:40: ac:9b:f7:18:6d:f7:f3:63:41:79:85:2b:e8:89:fe:e6:96:ba: 22:63:e4:db:f6:25:cf:d3:cc:25:7c:b4:13:11:fb:1c:1a:b0: cb:54:8e:e9:87:af:50:c9:bb:e0:f7:e3:59:ed:ec:2b:0c:b1: 4a:4c:e9:66:ae:8a:e8:eb:15:3d:9f:36:5a:4c:41:e6:71:9b: bc:8a:30:fa:34:97:fa:2c:fe:b6:44:3d:6d:20:da:2c:1f:42: 93:eb:79:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NuiAqKcivTSB+ViAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk M2QxNWQ5YjQtZDk4My00M2MwLThhMmQtMjNiMjZjNWY1NDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7fXpHfnrJnmREM3gBOIcGNo5NC2WBVunR7X WMzKJd8VnU1q3INtYt77Q0C1RdpXVfy/WeJZAmjOixF54dHWWUUy0LRVU/ajDFbu FMK6Gs2v9ufxlI81YRN+L+zQW44M9q+nzFjJzLXJI4b2hzjasOy16Wh5P1KvyHT2 1JNKHPp3IZ4xN5NOoMfIR++D3SsC25rVltU1HFT+7vHHePDbKOxqBj4FyW1pmbvt Iwq3NuGMOqkth42vLBXfaXvfxe8vkL8cGt1GeKb2ANexwkB82P0Ocp3MD2FuUh5w VR5U/D4lhe70C+tb9K495F+YdK91+7PQXJvQvEQRV0CeZ7gTnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6LkmZW73u1NtSYDtiDxg20qCUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNjhlOGUyMDItOGZmNS0z ZGU1LTg1ZTctZjY4OTRhY2JiYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCCZAZQxdN2/QahJfgX/YP5wtI9suHMlKv/dEhefB+UCLSJbFUQw593 ubpAPAZXBsNlvZO60ZHxluwaILLjLWdvhu2YcQb97wFVvu2qyhWLS99bNVitAvsb K4hkDLVukEwXJItfOqoW1viHD3mtN1VDXQV2h5wzzGc5ZxVaByqKQDA2ZQQX8rnw jCLN0bbk49wYp4wCTlksSMwg/yTTxM0mQKyb9xht9/NjQXmFK+iJ/uaWuiJj5Nv2 Jc/TzCV8tBMR+xwasMtUjumHr1DJu+D341nt7CsMsUpM6WauiujrFT2fNlpMQeZx m7yKMPo0l/os/rZEPW0g2iwfQpPrec4= -----END CERTIFICATE-----Generated at Tue Jul 7 11:54:03 2026 by rpki-client