$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7ae41e52-77d7-3378-8afc-7d61f7ac25e8.roa File: 7ae41e52-77d7-3378-8afc-7d61f7ac25e8.roa (raw, json) Hash identifier: nFdnlX+G0DICVQ3rXky2kX/Tv5gClDcanJhlorhPB6M= Subject key identifier: DE:5E:C4:97:6F:EF:48:14:EE:CB:41:4C:5B:DA:24:EC:95:DC:21:08 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584E4DB9F5B6AE815B1B22B55800 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7ae41e52-77d7-3378-8afc-7d61f7ac25e8.roa Signing time: Fri 26 Jun 2026 21:00:11 +0000 ROA not before: Fri 26 Jun 2026 21:00:11 +0000 ROA not after: Thu 24 Sep 2026 21:00:11 +0000 asID: 23511 IP address blocks: 45.38.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:b9:f5:b6:ae:81:5b:1b:22:b5:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Jun 26 21:00:11 2026 GMT Not After : Sep 24 21:00:11 2026 GMT Subject: CN=0575a8bb-bca5-470c-a011-47bdf353ef54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:6f:93:d5:a1:72:6f:d7:8d:a7:19:d1:7d: 69:ea:63:f9:25:4d:05:c1:d0:a2:1c:b2:b7:ce:e5: 1c:7a:f9:38:3b:73:59:8d:23:fe:e3:98:71:cf:f5: f1:2f:d4:18:0f:47:37:54:0b:1d:4c:65:36:25:af: 55:7f:a7:e3:fc:ff:ba:07:cd:07:bb:ea:7e:69:c0: 99:d5:5a:3f:d0:96:ad:10:3e:87:94:21:60:9d:7a: 56:7b:5c:52:ed:6b:f1:26:29:de:74:f0:88:ef:0d: a1:73:76:7b:f8:9c:1a:cc:20:a1:30:a7:05:53:7f: 86:43:3c:93:ed:45:bb:31:d4:d6:b9:76:e5:22:d5: e9:49:69:82:d7:d5:f2:1e:8f:4c:fe:3f:15:86:c1: dd:ac:2f:b8:5b:3c:d0:fc:36:19:f0:72:f0:c7:1e: 9c:e7:22:d2:e3:5a:35:d2:66:1b:13:e3:ac:11:9f: cc:79:a9:37:79:5f:19:5c:26:d9:ed:e6:e5:9c:e4: ac:bd:42:db:ee:37:29:1b:61:41:1d:29:a2:db:e5: 73:5d:d2:73:ce:b9:2f:7c:ae:98:0e:2a:8b:83:37: 52:27:25:60:b0:b6:3b:94:7a:d6:9a:bf:82:59:1f: 3e:39:51:00:19:de:6f:82:ba:21:05:83:66:3c:61: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5E:C4:97:6F:EF:48:14:EE:CB:41:4C:5B:DA:24:EC:95:DC:21:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7ae41e52-77d7-3378-8afc-7d61f7ac25e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 45.38.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:80:42:62:b1:ee:23:b2:7c:fa:1f:6e:e4:99:91:2a:33:b3: 2f:d7:92:7e:5c:0e:d4:c0:dc:bc:e0:7b:2b:b3:13:e9:89:63: 7f:dd:82:fb:fa:2e:ec:0a:b6:f0:1a:d8:d1:d4:cf:be:2c:bf: f3:10:43:93:f4:d7:ef:84:78:f1:1d:f3:b8:19:0b:5b:7e:59: fd:97:f7:e7:b3:c3:54:8d:a5:fd:66:2f:b7:9c:48:b4:9e:b9: c6:f3:21:93:17:6e:50:f9:8d:9d:52:89:80:52:b8:2c:8c:6f: b6:50:ce:78:6b:04:24:a0:1a:4f:88:c5:8f:e9:d5:ba:9b:e0: 37:f4:1f:3d:a4:2a:95:95:e0:73:eb:86:38:26:17:54:e5:11: 79:9e:93:30:e7:d9:15:a8:e8:77:0f:5a:b1:1d:2e:76:02:72: 02:bb:ab:03:78:3d:62:5c:ed:4c:b6:fb:43:39:93:66:78:32: fa:b1:4e:7b:8d:0a:5e:bc:59:18:2a:8f:96:04:fe:a9:ab:54: d7:af:7f:6a:7e:ea:85:ef:b8:29:e5:b6:2f:3a:78:3d:b0:dd: b0:21:d3:85:c9:f0:0d:9b:da:4a:a7:af:d7:9f:e1:bd:9d:84: c6:0c:2c:e5:56:6d:da:1b:82:32:aa:00:c8:29:db:d7:58:4b: 95:9a:f7:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NufW2roFbGyK1WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk MDU3NWE4YmItYmNhNS00NzBjLWEwMTEtNDdiZGYzNTNlZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry5vk9Whcm/XjacZ0X1p6mP5JU0FwdCiHLK3 zuUcevk4O3NZjSP+45hxz/XxL9QYD0c3VAsdTGU2Ja9Vf6fj/P+6B80Hu+p+acCZ 1Vo/0JatED6HlCFgnXpWe1xS7WvxJinedPCI7w2hc3Z7+JwazCChMKcFU3+GQzyT 7UW7MdTWuXblItXpSWmC19XyHo9M/j8VhsHdrC+4WzzQ/DYZ8HLwxx6c5yLS41o1 0mYbE+OsEZ/Meak3eV8ZXCbZ7eblnOSsvULb7jcpG2FBHSmi2+VzXdJzzrkvfK6Y DiqLgzdSJyVgsLY7lHrWmr+CWR8+OVEAGd5vgrohBYNmPGETywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5exJdv70gU7stBTFvaJOyV3CEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvN2FlNDFlNTItNzdkNy0z Mzc4LThhZmMtN2Q2MWY3YWMyNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSYVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWAQmKx7iOyfPofbuSZkSozsy/Xkn5cDtTA3LzgeyuzE+mJY3/dgvv6 LuwKtvAa2NHUz74sv/MQQ5P01++EePEd87gZC1t+Wf2X9+ezw1SNpf1mL7ecSLSe ucbzIZMXblD5jZ1SiYBSuCyMb7ZQznhrBCSgGk+IxY/p1bqb4Df0Hz2kKpWV4HPr hjgmF1TlEXmekzDn2RWo6HcPWrEdLnYCcgK7qwN4PWJc7Uy2+0M5k2Z4MvqxTnuN Cl68WRgqj5YE/qmrVNevf2p+6oXvuCnlti86eD2w3bAh04XJ8A2b2kqnr9ef4b2d hMYMLOVWbdobgjKqAMgp29dYS5Wa91c= -----END CERTIFICATE-----Generated at Tue Jul 7 11:54:43 2026 by rpki-client