
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/da24d36c-82a7-31cd-9e7f-89530b9af3b4.roa
File: da24d36c-82a7-31cd-9e7f-89530b9af3b4.roa (raw, json)
Hash identifier: ypTVwlVFxn2Cr1RSnMQ4iOpPWas1XTx1O3Lg3hW85MI=
Subject key identifier: A8:B0:05:8C:87:9C:5A:54:9A:81:3B:5D:EB:91:50:5E:29:D2:9D:D2
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDAFE404DBEDA295D22DB40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/da24d36c-82a7-31cd-9e7f-89530b9af3b4.roa
Signing time: Tue 07 Apr 2026 16:25:56 +0000
ROA not before: Tue 07 Apr 2026 16:25:56 +0000
ROA not after: Mon 06 Jul 2026 16:25:56 +0000
asID: 25893
IP address blocks: 45.39.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:da:fe:40:4d:be:da:29:5d:22:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:25:56 2026 GMT
Not After : Jul 6 16:25:56 2026 GMT
Subject: CN=1c9a9c25-544e-4304-bcbf-2a9511636cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:6e:83:68:8b:ff:cc:ad:e9:36:06:72:14:
d6:f0:70:00:a8:5d:2e:9e:a7:a6:5a:20:a9:42:94:
50:80:f7:88:d0:8a:36:46:6d:d3:68:60:93:35:8b:
3e:ce:3a:d5:28:dc:0f:77:b6:a3:85:69:3d:13:33:
c3:af:50:00:73:8c:70:23:73:c7:95:10:18:fd:04:
88:e0:98:a5:ed:81:3d:94:39:a8:c0:f5:2b:33:ed:
89:af:bc:cf:7d:94:43:10:46:1d:61:22:b7:4c:aa:
42:84:0b:fa:06:86:db:c5:0d:13:ae:72:4d:58:ff:
0b:1c:9d:e2:43:15:b8:cd:e3:c1:5d:e6:4c:ac:c7:
f2:b6:92:15:a6:29:98:79:55:92:54:0d:8e:9c:84:
8e:0f:ea:fb:0d:d4:98:06:a2:f1:e9:90:c3:aa:85:
b0:06:5c:16:16:fb:66:61:60:1e:cf:65:5f:bc:2f:
4d:95:15:2f:6f:5e:1f:86:2e:cd:15:00:b3:88:86:
5b:c6:17:ea:bc:2c:e3:5f:bc:ba:09:3d:73:60:07:
3b:b7:26:bc:f3:00:d2:03:eb:bd:29:6d:1a:4b:f9:
4a:61:3d:28:3d:45:db:e8:79:c1:98:64:fa:93:77:
78:0f:c3:bd:58:46:df:64:66:c6:f0:54:b1:3b:f4:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B0:05:8C:87:9C:5A:54:9A:81:3B:5D:EB:91:50:5E:29:D2:9D:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/da24d36c-82a7-31cd-9e7f-89530b9af3b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
45.39.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:db:e1:7b:3d:c0:b5:48:04:a9:fe:05:3c:f8:01:ce:fe:c9:
c6:84:69:16:c4:0e:f1:ce:fe:12:6a:f3:18:f9:c7:fb:b2:2d:
6f:53:9c:24:48:0e:7f:f7:db:21:20:58:04:88:6f:11:b3:05:
5e:dd:3b:fb:8f:e9:ae:44:45:2b:12:d6:44:9b:bc:30:40:28:
bb:aa:fa:cf:1e:03:32:88:79:aa:fd:f8:05:5a:8a:a6:d0:09:
9d:fa:32:40:71:a3:62:53:72:4d:7a:9d:2d:0b:3e:47:27:5a:
19:aa:5a:72:c7:7b:ac:bc:0a:db:0b:16:e4:5a:d2:4d:92:aa:
70:2d:17:a7:72:2f:62:28:3d:fe:a0:6c:3f:d6:b6:1d:cf:c2:
17:4c:1b:5f:e1:a2:17:88:2a:21:7d:02:ee:55:51:b9:4d:e9:
30:fc:0e:1a:d3:31:fe:e5:2f:06:5b:ee:76:74:03:f5:28:da:
b9:6a:5b:35:d2:e5:ae:31:93:42:bd:44:ad:13:6c:2d:03:76:
12:d3:08:78:21:33:1c:8c:59:33:4f:ad:92:ed:ad:f7:a3:78:
d7:90:05:8d:2b:61:4e:3f:fc:44:ee:00:48:e9:2c:95:42:15:
01:fc:46:52:a1:77:2b:98:db:e9:11:25:c6:2c:98:52:02:b5:
f4:1a:d5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:40:44 2026 by rpki-client