
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/40aa54a8-e14e-30a5-8de2-9369f4a15383.roa
File: 40aa54a8-e14e-30a5-8de2-9369f4a15383.roa (raw, json)
Hash identifier: YAuuAihdY0AmTkvQQLXiGUXQvRc87bDG6+5pm8xSOg4=
Subject key identifier: C1:04:B7:83:11:E7:3C:26:54:F0:35:94:E9:2A:77:33:EE:C5:30:A1
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDBFCD4CE8896D2FE31E880
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/40aa54a8-e14e-30a5-8de2-9369f4a15383.roa
Signing time: Tue 07 Apr 2026 16:27:56 +0000
ROA not before: Tue 07 Apr 2026 16:27:56 +0000
ROA not after: Mon 06 Jul 2026 16:27:56 +0000
asID: 63018
IP address blocks: 104.252.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:db:fc:d4:ce:88:96:d2:fe:31:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:27:56 2026 GMT
Not After : Jul 6 16:27:56 2026 GMT
Subject: CN=8d34cef9-49b5-4675-8c02-a534b5e1b6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:89:98:ce:20:94:ad:3a:3f:4f:db:af:d4:3f:
c0:c3:28:28:37:0a:86:8b:4c:4f:40:67:a5:66:a6:
ed:2a:c6:3f:57:8f:77:c4:36:f7:d5:68:22:5b:89:
70:e4:62:8f:e1:ff:08:89:14:72:4c:be:25:dc:12:
a1:e4:94:09:92:88:af:0e:e7:ea:c0:d0:34:71:92:
69:b1:75:49:43:3a:8c:6a:9b:c2:ab:e7:ea:71:14:
d6:b8:86:a0:c6:07:84:89:a4:7c:f6:43:ad:fe:21:
12:e3:8b:da:e8:91:23:41:dd:26:36:99:5c:8a:61:
5a:fa:d5:28:c5:16:05:3f:2b:cc:77:db:28:ad:10:
71:7e:63:01:aa:ad:b7:e1:15:c0:07:f9:cd:64:35:
f5:b8:25:8c:de:9c:84:f5:78:76:52:69:ae:5d:ff:
a7:20:43:f4:81:53:d2:70:44:8f:7a:5b:98:23:fd:
79:bb:e1:90:a2:0d:49:83:97:2b:56:34:63:b5:26:
43:af:3d:dd:00:0a:59:db:c1:8f:8d:5e:22:80:36:
46:6a:4c:9a:60:53:e5:e1:10:b3:86:7a:7a:37:ec:
97:1a:ce:87:b7:1b:90:94:a4:0c:d8:39:bf:72:94:
db:fe:48:2f:18:40:87:32:64:96:28:49:0d:39:d2:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:04:B7:83:11:E7:3C:26:54:F0:35:94:E9:2A:77:33:EE:C5:30:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/40aa54a8-e14e-30a5-8de2-9369f4a15383.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.252.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:bd:e0:f5:73:07:41:ef:a2:63:f1:db:91:e6:88:2b:b0:f9:
19:23:df:a2:59:6b:bc:15:74:06:19:d2:05:48:15:47:84:62:
bc:37:9d:b5:33:55:c8:c1:bc:6b:50:6f:78:15:8c:d8:36:19:
a3:74:8c:cc:0b:58:a2:a9:81:a5:84:92:e6:ea:42:5b:a2:3d:
51:e5:74:3f:39:65:49:fe:c0:bc:84:14:53:0e:f1:ba:17:54:
3d:6a:0a:7a:7b:65:4f:18:ce:40:5b:2c:ab:24:ba:31:0f:73:
17:5b:03:c0:02:1e:eb:87:d3:b0:c1:da:51:f9:98:08:5e:55:
15:68:b5:cf:03:19:ad:0c:ac:9e:15:a1:a6:73:30:cb:24:d7:
70:35:82:8c:d0:8a:a1:b5:ab:de:fa:0a:6e:2d:99:3a:0a:0e:
f9:f0:38:55:94:82:95:15:ad:5a:af:1e:bd:4d:9d:2a:a7:0e:
d7:fd:20:b3:f3:99:97:47:6a:54:31:37:81:47:68:e6:40:eb:
6b:27:84:20:e5:a4:8f:cf:b7:a4:ae:bd:70:6f:84:4d:f3:be:
1a:fa:f0:17:31:be:58:08:6a:43:cb:9f:22:ee:07:48:5d:88:
75:99:67:ab:bf:67:89:3d:b6:2d:88:4e:ed:e6:da:f9:7b:32:
21:0d:1f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:41:06 2026 by rpki-client