
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/43cf759a-7154-3acb-8842-36fec725d632.roa
File: 43cf759a-7154-3acb-8842-36fec725d632.roa (raw, json)
Hash identifier: JPbuOAGuBJF3tsxXyIss5NGUsQ/L24EwCaglxFJjq98=
Subject key identifier: F7:93:A6:DF:3A:87:5C:D7:AF:C2:87:25:9B:78:3F:41:6C:03:2B:EE
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDC82CF02B7D1B2FB868E80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/43cf759a-7154-3acb-8842-36fec725d632.roa
Signing time: Tue 07 Apr 2026 16:28:59 +0000
ROA not before: Tue 07 Apr 2026 16:28:59 +0000
ROA not after: Mon 06 Jul 2026 16:28:59 +0000
asID: 201525
IP address blocks: 104.253.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:dc:82:cf:02:b7:d1:b2:fb:86:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:28:59 2026 GMT
Not After : Jul 6 16:28:59 2026 GMT
Subject: CN=b9a054fc-1397-4691-a5e3-78bd47946c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ce:b2:73:13:3c:95:8c:1b:06:67:d0:7e:64:
6d:8d:a6:9b:4c:f5:94:eb:c8:6f:26:74:cc:a5:d9:
64:e9:90:04:d7:68:84:34:dd:c2:ba:19:a0:6c:53:
27:98:c0:0b:5c:a1:a9:4b:a9:f5:a0:2a:c7:5f:9a:
de:ee:8d:d5:53:6e:fe:b8:1e:7d:f6:c8:38:75:2a:
93:0d:39:5f:60:11:69:19:63:61:e4:28:b7:c2:1d:
86:85:15:ea:a1:c3:fb:53:e1:f4:6e:2e:77:16:34:
37:a5:a9:df:4d:3a:ca:c6:4a:85:bc:fc:2d:1c:36:
f6:f6:2e:fd:dc:b8:1e:21:eb:5e:46:58:87:f0:f5:
87:4d:21:ea:2c:8e:a2:9c:cd:ab:2d:7a:1d:a5:4f:
51:39:e0:77:0d:b8:c5:13:5c:c7:1e:6f:fb:1f:3e:
8b:51:3f:f3:48:21:59:e3:cf:93:65:14:ab:36:64:
f3:1c:a0:8e:bf:94:ea:ef:74:5c:69:61:e9:9a:4c:
54:e7:b6:db:9b:0d:14:07:cf:03:6a:f8:09:56:4b:
44:56:99:9f:fd:eb:91:52:69:47:91:b4:4a:50:b5:
0d:cd:b2:93:0f:bb:7b:86:3c:f9:64:8b:92:2c:68:
3a:16:84:48:7f:bb:fe:1d:a6:d1:32:56:f7:23:bf:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:93:A6:DF:3A:87:5C:D7:AF:C2:87:25:9B:78:3F:41:6C:03:2B:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/43cf759a-7154-3acb-8842-36fec725d632.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:25:49:48:60:ce:64:2c:03:57:bc:f1:1c:5f:2c:c7:3d:0e:
b2:67:f4:c2:fd:54:f8:df:1c:08:9f:0a:82:93:ef:2a:b9:f7:
ed:61:a5:dd:49:85:56:43:f9:dc:7c:25:dd:8f:b9:96:65:9b:
2e:34:ba:20:2b:63:2e:05:e3:f0:cb:dd:9a:ec:19:7a:c7:e3:
d8:84:3b:8e:65:5e:9c:da:ea:21:d0:de:27:98:b3:78:b2:57:
3f:bd:25:c0:dc:c3:5b:07:88:67:be:54:42:b9:7d:41:2c:ce:
63:09:4e:60:6a:2e:b1:0a:6c:9a:fe:f4:50:25:0f:48:65:e6:
42:19:0b:f3:e4:ea:a5:e2:7f:90:da:8c:7c:bc:3c:7a:a9:a5:
e8:df:be:37:39:c3:91:70:9e:9d:53:69:e7:5c:35:5b:09:42:
b6:c1:f8:07:3e:8c:0b:02:40:d3:20:28:8c:ac:3a:67:f2:ff:
6a:e9:f8:4d:f6:1c:5a:33:be:e5:93:22:f0:d3:50:75:c3:56:
1a:62:e0:66:f0:1b:d2:a5:89:b1:44:13:ff:b5:5f:c9:a7:f8:
f0:50:f1:f7:b7:d1:c5:85:dc:ad:96:74:d4:55:c9:de:95:75:
96:8d:66:14:bb:0d:e0:83:d5:21:2d:98:89:75:7a:1c:a6:13:
79:d4:44:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:43:58 2026 by rpki-client