
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0768d209-90de-3cc5-9065-89722f865b4a.roa
File: 0768d209-90de-3cc5-9065-89722f865b4a.roa (raw, json)
Hash identifier: XUt+kx+mgsJLHzsp8Q87mCJlJEobwSezvhdtUGlYtfM=
Subject key identifier: F4:DD:1E:FB:8A:98:4A:6A:0D:50:D3:FC:ED:0C:87:0A:7F:0A:83:F8
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDA00853D15BE3D206C9E00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0768d209-90de-3cc5-9065-89722f865b4a.roa
Signing time: Tue 07 Apr 2026 16:23:56 +0000
ROA not before: Tue 07 Apr 2026 16:23:56 +0000
ROA not after: Mon 06 Jul 2026 16:23:56 +0000
asID: 11404
IP address blocks: 45.38.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:da:00:85:3d:15:be:3d:20:6c:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:23:56 2026 GMT
Not After : Jul 6 16:23:56 2026 GMT
Subject: CN=8f7bab08-ecc6-48b6-bcd8-858e3f8fd932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:a2:c8:45:af:cc:21:f2:90:d8:a9:84:54:
55:e8:2a:af:a6:dc:3f:4e:03:aa:5d:53:9f:84:5d:
55:6f:2f:da:fb:7c:76:56:65:07:3b:a0:af:2f:25:
b0:91:44:49:bd:ab:17:16:5a:2f:aa:b1:c8:80:5f:
8c:55:22:13:1a:9a:ed:28:06:7e:75:83:d2:9e:a0:
8d:d2:49:86:67:c6:5f:ac:09:63:e8:0e:97:13:be:
ba:7d:83:c7:b7:45:2d:4c:b9:15:17:27:49:7e:43:
52:ce:ac:97:4f:e7:24:d6:9c:f7:e3:74:5b:16:75:
22:a5:3c:5b:f5:e5:cc:e3:5f:1f:a8:f1:71:f8:b9:
56:c0:7c:97:08:bb:25:a6:15:75:97:ef:5c:36:66:
6a:62:f0:93:f0:2b:be:ed:06:3e:63:20:3e:7c:fb:
83:7a:18:6c:4c:49:0e:b3:6b:57:e1:e6:44:76:b0:
65:7d:96:1c:67:87:a2:77:94:7a:49:8e:f2:fd:74:
35:df:f0:ba:c2:c5:23:58:49:f2:88:6c:d5:7f:ad:
e5:7f:63:58:bf:a2:e8:9e:26:0b:18:82:92:e4:69:
5a:2c:26:32:45:2a:cb:be:76:03:e2:10:dc:61:70:
fb:d0:70:1a:68:16:67:34:70:7f:09:87:f2:f3:fa:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DD:1E:FB:8A:98:4A:6A:0D:50:D3:FC:ED:0C:87:0A:7F:0A:83:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0768d209-90de-3cc5-9065-89722f865b4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:fc:74:3a:9a:06:27:24:95:60:59:83:a2:96:14:51:31:b0:
30:46:aa:c9:5a:c1:97:8c:8f:17:2b:d6:11:fc:91:39:93:31:
ae:05:96:10:91:d7:d1:ba:f5:f3:89:a6:6b:78:2d:07:2d:8e:
f9:e7:38:d5:ac:14:05:22:bc:e1:3a:72:e2:06:6d:ff:37:5f:
01:11:90:39:98:00:07:9a:8d:dd:43:20:9b:85:72:57:12:d3:
e3:dd:84:3b:06:1e:13:f6:89:72:d1:d4:5b:a1:2f:01:e7:ea:
02:08:90:c4:f5:22:db:57:a3:63:49:f8:2d:c4:d9:34:6f:6b:
88:6e:ef:6a:16:d7:4d:e2:0e:ae:f5:dc:83:21:37:0a:d1:e0:
18:f8:1c:1a:0e:35:9d:26:45:3c:7a:66:0c:91:43:f7:b4:9b:
dc:a3:40:0e:30:cf:1a:08:66:12:47:89:52:4c:7f:ca:d0:b4:
e5:9d:97:48:f6:f7:fa:98:c9:51:4e:fb:ec:a3:1a:3d:e7:ff:
52:ed:3b:99:e1:1b:25:45:1e:1f:e4:78:ec:16:20:bb:ba:aa:
96:85:d8:4d:f1:12:7c:4b:d6:9e:8b:da:35:8c:8c:de:69:79:
e7:4d:a3:77:69:cf:66:0a:23:32:01:c2:f9:e1:d9:cb:00:89:
a9:c8:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:35 2026 by rpki-client