
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4a36c573-7b65-3a5f-a694-a30bcaec9b7c.roa
File: 4a36c573-7b65-3a5f-a694-a30bcaec9b7c.roa (raw, json)
Hash identifier: VVbSUrOhPGZ1+jqotJ171EZwlGlwS1VQlgSEwEZ1STU=
Subject key identifier: E9:75:CD:2A:34:56:86:E6:5C:3D:06:89:18:B8:69:1C:D2:CF:A5:0F
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDBD503AD3EAE175E881F80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4a36c573-7b65-3a5f-a694-a30bcaec9b7c.roa
Signing time: Tue 07 Apr 2026 16:27:37 +0000
ROA not before: Tue 07 Apr 2026 16:27:37 +0000
ROA not after: Mon 06 Jul 2026 16:27:37 +0000
asID: 211273
IP address blocks: 104.252.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:db:d5:03:ad:3e:ae:17:5e:88:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:27:37 2026 GMT
Not After : Jul 6 16:27:37 2026 GMT
Subject: CN=85c9c4f6-b926-41db-be09-5854d9f2eb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:76:17:07:96:76:ee:f0:88:a9:c5:96:46:
bd:f5:0f:2d:eb:95:73:13:4b:2e:f5:61:92:65:37:
05:21:9f:62:33:27:26:c9:d1:7f:40:11:0a:2b:28:
eb:38:2e:ac:a8:58:b5:6e:15:80:92:28:63:cc:4d:
d3:60:18:c5:34:41:77:c4:81:7f:38:78:47:1a:5d:
6e:95:b3:ab:6c:70:a1:af:81:d8:e7:a4:37:2f:91:
18:4b:8a:0a:d3:ec:d0:4b:f4:ce:1e:41:ad:77:08:
cc:57:34:c8:83:dc:40:d9:bb:9b:bf:e6:c7:bd:08:
bf:b1:11:64:0b:ed:73:57:50:d2:a0:73:78:d8:05:
ce:5c:fb:4f:ed:2c:32:59:b6:4a:b0:d7:a5:25:4b:
7e:59:d0:b6:e1:04:0d:18:b3:47:34:ec:84:f2:9e:
fc:ad:92:c4:35:11:18:1e:86:29:18:4d:ae:63:3b:
fe:2d:34:97:95:e4:99:f0:90:6e:d5:21:a1:b4:c3:
65:9f:eb:17:c1:c5:89:bc:d6:d1:19:9b:8b:f6:07:
3d:c9:70:0a:88:bc:dd:e4:9d:3d:2b:84:79:98:ac:
6a:1f:e4:a2:28:3f:a3:c2:fe:23:dd:04:22:8d:ad:
8c:dd:d4:f1:60:fb:34:61:f4:f8:aa:62:c3:de:c5:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:75:CD:2A:34:56:86:E6:5C:3D:06:89:18:B8:69:1C:D2:CF:A5:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4a36c573-7b65-3a5f-a694-a30bcaec9b7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.252.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:30:a5:c8:18:5c:12:01:f9:1c:88:69:76:7f:9d:8a:ae:30:
10:6a:ea:9d:6e:16:9a:be:45:9a:cd:09:62:da:e6:f5:20:55:
99:eb:44:a5:0c:f8:40:7d:59:e4:5d:38:0c:e2:6b:d0:82:75:
20:db:db:c4:0c:77:27:ed:38:57:0b:14:9e:fa:61:1c:59:eb:
6b:0f:c7:96:67:04:44:18:c3:55:3f:1b:ef:b9:ad:b4:a2:27:
3e:19:05:07:a9:b7:c0:99:c8:de:d0:04:71:d3:cf:56:d7:f8:
0a:be:ab:96:a1:c9:c2:ad:2e:68:8e:27:cd:3c:83:b4:33:57:
8b:96:2c:cf:6b:88:d1:5d:92:18:61:76:74:9b:77:98:59:94:
47:b2:dd:0b:13:1d:fa:5a:02:a8:78:36:cc:e4:15:2c:6c:9f:
fb:76:16:06:04:76:d3:cc:87:b7:0d:f3:2b:c0:a6:76:ed:a8:
d1:14:99:84:10:f1:2d:0f:e5:27:58:51:11:2c:4a:4e:dd:55:
45:25:4f:64:39:66:d9:52:6a:78:8f:cd:bb:fe:da:49:3f:a6:
23:8c:b4:a9:c7:d3:e3:0f:3b:5c:1b:bd:1c:fe:cd:a2:54:a0:
32:99:a3:1a:bb:38:ba:b9:6c:9e:ba:1d:c4:67:f6:20:28:a0:
8e:c4:8a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:25 2026 by rpki-client