
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4ef72d22-d47a-3d30-acae-1d0c72e772ba.roa
File: 4ef72d22-d47a-3d30-acae-1d0c72e772ba.roa (raw, json)
Hash identifier: y5+PikCYpRyPgq8t3JcG2NXYFmdQfwtRwVH4AWpATps=
Subject key identifier: 3E:FE:D0:3B:71:AF:F3:FD:E3:86:B7:5F:A2:20:51:9A:B8:F3:A5:9A
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DEC386C6D32B2AF7A15C240
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4ef72d22-d47a-3d30-acae-1d0c72e772ba.roa
Signing time: Tue 07 Apr 2026 17:00:38 +0000
ROA not before: Tue 07 Apr 2026 17:00:38 +0000
ROA not after: Mon 06 Jul 2026 17:00:38 +0000
asID: 6939
IP address blocks: 104.252.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:ec:38:6c:6d:32:b2:af:7a:15:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 17:00:38 2026 GMT
Not After : Jul 6 17:00:38 2026 GMT
Subject: CN=535acb72-6f12-434e-a1f1-dfd5ad2f8fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:bf:43:ac:08:59:76:99:25:e2:d5:71:e8:
f5:7d:80:7b:61:92:72:11:7f:f6:fc:03:07:12:01:
00:f7:1b:86:cc:d4:fa:bc:7e:a8:af:05:08:d8:4f:
3f:c7:aa:7b:4e:dd:e3:bd:aa:3a:f2:ff:bf:a8:81:
a5:c3:e6:a2:ed:ed:c1:12:a5:20:f3:be:10:71:bc:
e7:ae:e7:67:b2:89:51:5f:6a:66:8d:45:41:35:7c:
58:c9:75:74:44:ce:2e:8b:5c:16:0a:20:13:cb:94:
11:2b:54:00:a8:08:77:aa:54:4b:64:b5:06:d6:92:
2b:39:ed:1f:8a:65:7f:99:b6:74:0f:4d:fa:91:72:
4e:3d:db:95:f7:be:8c:8a:1b:18:2b:36:2a:41:6d:
cc:b0:71:dc:47:99:07:7d:f8:2f:02:6d:2e:b8:72:
91:13:0a:35:b4:1c:e6:c8:f2:1a:fd:bc:20:fc:09:
36:9d:00:7a:69:47:58:8c:c5:ea:e8:57:a9:ec:7e:
57:17:af:e0:93:ee:5f:d1:f4:45:f9:d4:57:69:6c:
93:09:4a:68:53:44:dd:11:28:01:de:0e:c2:05:b0:
8d:4b:d0:7c:d8:4f:93:4d:d5:58:53:10:24:e0:66:
a5:9d:03:4b:33:bb:24:7f:bf:f4:17:4b:a6:0f:6a:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:D0:3B:71:AF:F3:FD:E3:86:B7:5F:A2:20:51:9A:B8:F3:A5:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4ef72d22-d47a-3d30-acae-1d0c72e772ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.252.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:4f:3e:07:41:0d:8b:a2:01:ef:c2:22:9c:e5:35:dc:fe:3e:
8f:57:df:ae:4b:30:16:f1:ac:79:9b:1b:57:5c:59:ab:32:90:
20:c9:db:22:11:34:80:52:b4:31:41:74:8b:88:24:24:26:c5:
11:81:d7:d4:ae:ec:76:1c:e6:ca:a3:5c:1b:90:f8:a9:b1:5d:
89:e3:60:da:70:ad:36:a5:f9:84:83:f4:ea:30:93:66:b9:e7:
89:d1:6b:91:35:83:6f:1f:51:a1:4d:58:ff:62:af:1c:83:e9:
92:8c:44:8d:ba:44:f7:4e:fc:bd:90:66:43:72:66:f6:cc:cb:
7e:f1:58:a7:25:8b:3a:3e:8a:35:24:79:d4:99:4e:e3:52:bb:
1d:96:09:c8:2a:ba:d1:4a:a1:6b:29:5e:c7:d9:18:4e:ba:6c:
e2:27:8d:ad:7c:4d:54:ae:70:d8:98:6a:9d:c8:d4:c6:d8:9d:
a8:93:fe:cf:0c:a7:f4:d6:49:5f:0d:a2:f4:37:91:db:30:79:
96:6c:7c:d9:1b:1c:9e:14:7b:10:60:8d:9b:f9:f3:ab:bd:4b:
82:5c:57:1b:68:a1:25:76:1c:8b:4f:4a:95:26:59:cc:a9:2d:
04:aa:e0:61:19:c0:16:e2:da:fa:e1:ab:75:0b:f1:ed:82:f4:
2b:14:34:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t7DhsbTKyr3oVwkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE3MDAzOFoXDTI2MDcwNjE3MDAzOFowLzEtMCsGA1UEAxMk
NTM1YWNiNzItNmYxMi00MzRlLWExZjEtZGZkNWFkMmY4ZmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL+/Q6wIWXaZJeLVcej1fYB7YZJyEX/2/AMH
EgEA9xuGzNT6vH6orwUI2E8/x6p7Tt3jvao68v+/qIGlw+ai7e3BEqUg874Qcbzn
rudnsolRX2pmjUVBNXxYyXV0RM4ui1wWCiATy5QRK1QAqAh3qlRLZLUG1pIrOe0f
imV/mbZ0D036kXJOPduV976MihsYKzYqQW3MsHHcR5kHffgvAm0uuHKREwo1tBzm
yPIa/bwg/Ak2nQB6aUdYjMXq6Fep7H5XF6/gk+5f0fRF+dRXaWyTCUpoU0TdESgB
3g7CBbCNS9B82E+TTdVYUxAk4GalnQNLM7skf7/0F0umD2rxTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD7+0Dtxr/P944a3X6IgUZq486WaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNGVmNzJkMjItZDQ3YS0z
ZDMwLWFjYWUtMWQwYzcyZTc3MmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPzcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElPPgdBDYuiAe/CIpzlNdz+Po9X365LMBbxrHmbG1dcWasykCDJ2yIR
NIBStDFBdIuIJCQmxRGB19Su7HYc5sqjXBuQ+KmxXYnjYNpwrTal+YSD9Oowk2a5
54nRa5E1g28fUaFNWP9irxyD6ZKMRI26RPdO/L2QZkNyZvbMy37xWKclizo+ijUk
edSZTuNSux2WCcgqutFKoWspXsfZGE66bOInja18TVSucNiYap3I1MbYnaiT/s8M
p/TWSV8NovQ3kdsweZZsfNkbHJ4UexBgjZv586u9S4JcVxtooSV2HItPSpUmWcyp
LQSq4GEZwBbi2vrhq3UL8e2C9CsUNNw=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:41:08 2026 by rpki-client