
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3033ea5e-19ea-32a8-a4bf-d59bf100b6fa.roa
File: 3033ea5e-19ea-32a8-a4bf-d59bf100b6fa.roa (raw, json)
Hash identifier: 3Km0RL2grQFX/W69gToo7vBWTrJBUf2ZU8iXKTLgvSg=
Subject key identifier: FF:28:E6:21:02:A1:13:B4:52:A1:6F:EF:9C:6B:AF:AC:DE:05:72:D4
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDC12717E7A99510068B100
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3033ea5e-19ea-32a8-a4bf-d59bf100b6fa.roa
Signing time: Tue 07 Apr 2026 16:28:06 +0000
ROA not before: Tue 07 Apr 2026 16:28:06 +0000
ROA not after: Mon 06 Jul 2026 16:28:06 +0000
asID: 396356
IP address blocks: 104.252.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:dc:12:71:7e:7a:99:51:00:68:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:28:06 2026 GMT
Not After : Jul 6 16:28:06 2026 GMT
Subject: CN=b03ddbfd-60da-4a27-a7b0-870e9ba54474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e5:0b:f7:ac:3f:a9:89:f5:64:9c:73:4d:e2:
bb:77:e4:0a:86:f0:86:c4:f3:8a:40:bb:0e:04:d1:
52:e7:09:19:78:aa:06:26:f6:27:5f:33:ed:82:8e:
62:9b:d5:bd:cb:6d:a7:fc:11:80:19:00:98:ba:da:
4c:e7:1a:00:3c:31:b2:4b:ab:ed:82:a5:51:b0:21:
73:53:1d:dd:84:dc:fd:29:e3:bb:ba:38:9e:55:a3:
29:f9:5d:ff:98:1f:a2:55:d0:9c:bd:a3:80:25:12:
29:33:43:54:4f:e9:e3:ce:d4:ef:22:00:f3:e4:12:
6a:05:60:d6:0a:5a:8f:bd:d3:18:50:55:b9:ca:c4:
a0:36:52:b3:73:2b:5d:20:57:e9:0b:e3:52:3e:34:
29:bb:99:0f:90:85:d3:a2:4c:3f:de:2e:b7:77:ee:
c7:9e:d0:c7:af:76:24:f0:94:50:6b:da:df:d2:b0:
fa:a3:13:0e:66:22:cc:85:ae:98:b8:51:a5:57:bd:
7e:16:e7:df:3a:58:d2:bb:0b:de:79:7a:59:5b:a0:
97:96:fb:e8:c2:48:df:ca:95:01:4d:74:6c:6c:6a:
31:b6:d6:a5:95:87:a1:01:07:f1:ac:9d:0b:d0:45:
38:8c:31:48:2b:19:61:70:1e:0d:8b:fa:78:20:16:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:28:E6:21:02:A1:13:B4:52:A1:6F:EF:9C:6B:AF:AC:DE:05:72:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3033ea5e-19ea-32a8-a4bf-d59bf100b6fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.252.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:0e:24:a9:66:b3:67:75:58:74:3c:81:8f:79:1b:a4:b7:2d:
60:9a:c1:77:ef:5b:9c:8e:15:8d:7e:af:cb:b5:89:12:9b:b9:
7f:99:47:9c:72:5e:4b:af:7b:87:14:2d:70:9f:d3:46:53:cd:
e6:ed:3f:27:1b:12:fe:e1:c4:96:d1:22:93:c8:b3:b1:17:a9:
68:61:a4:e0:17:14:30:4f:99:f7:74:c3:1a:d0:ba:e9:5a:5c:
d9:e6:0a:b6:ec:f9:13:08:ec:50:66:a7:88:d3:de:e7:f5:27:
bb:56:e6:53:8b:de:a8:5c:a8:63:e1:3c:4c:b1:cc:cf:b8:c6:
38:5b:e2:68:20:03:3b:5a:57:84:8b:70:6b:79:52:1d:fe:05:
b9:0e:23:64:40:3c:26:3f:dd:9c:88:27:61:64:2c:10:c4:f1:
46:69:bb:60:a0:3a:08:d0:9d:7b:6c:4b:b7:36:f2:0c:7a:99:
dd:16:55:4e:ff:24:b0:0f:bc:65:92:21:a7:fa:b2:6c:85:45:
11:73:d4:ff:20:e0:9a:de:84:06:1e:ab:15:02:a0:33:42:1e:
50:be:fa:23:0a:4d:42:8f:ec:31:c2:d7:0a:09:3e:7b:86:33:
95:88:51:c6:b5:f8:19:61:27:2a:81:f1:d7:97:33:d4:8d:25:
25:db:91:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:12 2026 by rpki-client