
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2cbc647d-38aa-3e25-84e9-321731eee579.roa
File: 2cbc647d-38aa-3e25-84e9-321731eee579.roa (raw, json)
Hash identifier: XsHHfPcZZNRDJbPyrmoDRXaPi3VYMUgjcnUujf+SrBU=
Subject key identifier: 5D:02:82:8F:D7:B6:B8:00:29:F6:34:E0:B0:BE:84:2B:2D:79:BF:F5
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDC52E682786B32D7B5BC80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2cbc647d-38aa-3e25-84e9-321731eee579.roa
Signing time: Tue 07 Apr 2026 16:28:37 +0000
ROA not before: Tue 07 Apr 2026 16:28:37 +0000
ROA not after: Mon 06 Jul 2026 16:28:37 +0000
asID: 400899
IP address blocks: 104.253.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:dc:52:e6:82:78:6b:32:d7:b5:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:28:37 2026 GMT
Not After : Jul 6 16:28:37 2026 GMT
Subject: CN=e79a0228-d41e-4e98-8b22-f2a1f3a94a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:04:1b:60:8f:c9:43:d1:a8:2a:25:01:5e:
b0:1b:02:60:09:08:fa:90:d8:0a:32:b6:c7:3a:39:
4f:7c:f2:92:9f:f7:1b:eb:ff:47:7e:00:15:3b:00:
c2:67:ea:92:50:1d:49:71:7f:d3:3a:7d:cd:cb:4d:
1f:d9:66:b1:d7:c7:1a:30:96:12:7f:d5:04:3f:7f:
9d:23:98:89:5a:6d:f7:37:d6:de:4f:ab:f3:84:b8:
5e:33:7b:80:d2:e5:ac:a7:80:38:c1:36:1e:b1:d7:
35:6f:4d:8c:2e:e2:b3:76:91:d5:0c:48:6e:4d:9e:
01:93:05:f1:35:5b:21:09:37:87:51:45:34:18:95:
8b:21:30:02:5b:08:e2:8f:2c:16:15:fa:73:32:e7:
27:45:ed:1a:d5:0a:e6:01:93:84:2d:9d:d3:8e:82:
72:6d:75:3c:0c:cc:e8:01:09:a7:da:af:89:5a:b7:
f0:4a:0b:05:6d:84:40:72:5e:3f:59:b8:9f:d8:9d:
f2:a9:5c:ee:ba:1a:fd:25:68:cf:8b:f0:36:37:49:
80:24:80:ca:14:12:cb:73:22:7f:ab:b9:fe:97:ef:
05:76:91:64:c2:ad:07:d8:70:3b:7b:2f:db:94:d6:
4c:8a:1f:d2:50:37:69:d9:a0:3b:07:ce:92:07:f8:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:02:82:8F:D7:B6:B8:00:29:F6:34:E0:B0:BE:84:2B:2D:79:BF:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2cbc647d-38aa-3e25-84e9-321731eee579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:5c:ba:65:5f:57:1a:5d:1a:50:cd:50:3d:a2:8b:20:92:c4:
ff:1e:76:77:9f:9c:ba:8d:df:4d:e5:31:7e:6d:7e:b2:67:96:
db:30:40:69:89:9d:c7:c9:36:c0:0d:67:21:19:83:19:e7:ef:
d7:87:a5:ee:4c:3b:91:25:36:47:43:6a:d0:72:6e:37:2e:2d:
ac:9d:69:ca:1a:91:29:d7:70:67:41:cf:2b:a8:6d:6e:35:0f:
7c:f4:3b:c7:dd:32:88:65:5c:e2:0b:d4:ff:62:9d:d0:b2:06:
29:83:5a:ea:2d:0f:90:cb:ba:b1:04:1a:42:fd:e9:8a:4f:96:
fd:70:83:fc:9c:ef:e8:53:61:8b:76:76:fe:7c:7c:80:f0:d6:
fd:69:a8:8e:85:b3:55:9a:63:bf:c9:64:54:6e:40:61:ef:a7:
57:33:6e:34:b3:8f:b7:9d:69:90:1f:12:b5:bd:68:4d:78:cb:
b9:71:6b:3b:c8:cd:ad:f9:b6:51:7c:e9:92:80:b7:db:91:ab:
13:42:03:2b:2b:c9:9f:96:f3:db:0b:89:94:51:19:e7:bf:5e:
f1:92:d4:ee:c3:0e:f7:61:d5:13:87:b1:ca:a0:a4:73:4a:4c:
60:ae:e4:52:8c:80:67:89:c3:7e:28:db:c2:b6:0a:e9:9d:2c:
f0:01:23:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:40:54 2026 by rpki-client