$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a801f5b8-9c6b-3415-8653-9cfe8cfd8269.roa File: a801f5b8-9c6b-3415-8653-9cfe8cfd8269.roa (raw, json) Hash identifier: oImrPSk3x0U6acHu1Y28TYhLN5Ped0o/1tThfzgVo1I= Subject key identifier: 6B:C7:56:9B:9D:15:7A:5D:09:10:47:E5:FE:EB:14:2C:E8:F1:49:B1 Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068 Certificate serial: 010D0C9F4328584E4DBA1E0A6CE9A066733DA4C2 Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a801f5b8-9c6b-3415-8653-9cfe8cfd8269.roa Signing time: Fri 26 Jun 2026 21:00:11 +0000 ROA not before: Fri 26 Jun 2026 21:00:11 +0000 ROA not after: Thu 24 Sep 2026 21:00:11 +0000 asID: 201106 IP address blocks: 172.252.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:ba:1e:0a:6c:e9:a0:66:73:3d:a4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068 Validity Not Before: Jun 26 21:00:11 2026 GMT Not After : Sep 24 21:00:11 2026 GMT Subject: CN=4304dfd0-309a-485e-badf-1f769b0d3712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c3:a0:32:22:eb:79:fd:99:ff:af:81:47:24: 6b:03:1b:40:77:f1:0c:d0:42:e8:43:ee:69:2e:a4: 43:7d:cf:f3:c0:9f:13:64:59:8e:e9:b4:8b:a3:20: 31:af:58:cc:6e:25:8a:d4:c0:98:89:a9:76:cc:62: 81:72:0c:5e:2c:90:36:61:c2:b4:ce:43:fd:a2:fb: e7:7d:c4:aa:44:9b:62:e7:4f:24:f5:ee:e9:25:0a: 17:3c:af:10:5d:76:8c:73:ab:1d:ca:9c:46:f2:b5: 14:73:ce:32:2e:c0:26:45:98:54:44:78:a8:5b:57: aa:e3:bc:01:90:4d:e7:50:c5:15:54:36:b0:d0:42: 03:cd:1f:f7:17:8d:48:d8:9d:0e:0e:7d:ed:31:31: 44:fd:ba:3d:f4:ec:88:87:57:0f:16:54:93:f1:1d: 0f:41:f7:27:cb:5d:4c:2b:29:53:ed:a7:25:1e:1b: 20:8c:29:21:98:e9:cd:ce:8b:e9:70:4f:6f:d0:57: 8f:7c:60:a8:43:00:69:bc:bd:87:49:38:92:f0:9b: f0:07:97:99:bb:fe:ec:11:4a:d0:19:32:7d:76:99: d3:32:5a:d2:50:ad:ee:11:0e:fb:1b:f2:50:3f:bd: b5:70:2e:d3:08:fa:99:78:1d:19:c8:60:92:aa:42: 26:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C7:56:9B:9D:15:7A:5D:09:10:47:E5:FE:EB:14:2C:E8:F1:49:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a801f5b8-9c6b-3415-8653-9cfe8cfd8269.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl X509v3 Authority Key Identifier: keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer sbgp-ipAddrBlock: critical IPv4: 172.252.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:60:25:80:1a:eb:dd:b1:92:81:9e:7e:89:28:be:6d:1f:50: 51:b4:88:69:bb:27:9b:47:24:f9:b3:98:b4:15:cf:35:9a:67: 85:ee:40:9a:4f:94:61:f8:2d:03:7a:47:86:39:c1:81:fa:a8: 18:fe:9e:18:35:f3:6c:8e:3c:d4:44:6a:bc:f7:39:c8:34:66: 78:a6:93:83:26:ad:db:00:37:d8:2d:bd:3a:1b:2e:43:07:89: 34:c1:1c:ce:34:26:f4:b6:42:f6:2b:92:41:6f:e9:73:6f:ee: 0b:4e:65:94:e1:0a:2d:52:11:f9:73:4a:b7:f3:e9:08:b9:29: 7a:a9:c2:8c:f2:bb:6c:14:75:0a:28:11:af:53:07:aa:6d:a5: 9b:10:e0:19:84:9a:ea:d1:a8:51:11:7e:5c:25:0c:e8:a6:9a: 91:39:1f:0d:1e:b7:98:7e:e3:95:ec:c0:16:d9:24:8f:b4:5f: b2:2e:02:83:11:0e:f2:eb:81:df:c9:ef:8f:f2:38:c3:d1:3c: fa:be:46:0d:94:c3:2f:cd:8c:33:74:bb:aa:eb:de:ed:e3:44: 15:77:e0:e1:6a:b1:14:f7:16:35:2c:58:de:73:a2:99:8a:78: 7b:9f:46:66:c6:e3:a3:cc:40:3e:5d:45:12:35:64:c7:8c:9d: 3f:c3:2f:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Nuh4KbOmgZnM9pMIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk NDMwNGRmZDAtMzA5YS00ODVlLWJhZGYtMWY3NjliMGQzNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MOgMiLref2Z/6+BRyRrAxtAd/EM0ELoQ+5p LqRDfc/zwJ8TZFmO6bSLoyAxr1jMbiWK1MCYial2zGKBcgxeLJA2YcK0zkP9ovvn fcSqRJti508k9e7pJQoXPK8QXXaMc6sdypxG8rUUc84yLsAmRZhURHioW1eq47wB kE3nUMUVVDaw0EIDzR/3F41I2J0ODn3tMTFE/bo99OyIh1cPFlST8R0PQfcny11M KylT7aclHhsgjCkhmOnNzovpcE9v0FePfGCoQwBpvL2HSTiS8JvwB5eZu/7sEUrQ GTJ9dpnTMlrSUK3uEQ77G/JQP721cC7TCPqZeB0ZyGCSqkIm0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvHVpudFXpdCRBH5f7rFCzo8UmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYTgwMWY1YjgtOWM2Yi0z NDE1LTg2NTMtOWNmZThjZmQ4MjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhgJYAa692xkoGefokovm0fUFG0iGm7J5tHJPmzmLQVzzWaZ4XuQJpP lGH4LQN6R4Y5wYH6qBj+nhg182yOPNREarz3Ocg0Znimk4MmrdsAN9gtvTobLkMH iTTBHM40JvS2QvYrkkFv6XNv7gtOZZThCi1SEflzSrfz6Qi5KXqpwozyu2wUdQoo Ea9TB6ptpZsQ4BmEmurRqFERflwlDOimmpE5Hw0et5h+45XswBbZJI+0X7IuAoMR DvLrgd/J74/yOMPRPPq+Rg2Uwy/NjDN0u6rr3u3jRBV34OFqsRT3FjUsWN5zopmK eHufRmbG46PMQD5dRRI1ZMeMnT/DL34= -----END CERTIFICATE-----Generated at Tue Jul 7 11:55:36 2026 by rpki-client