
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ebebc14f-7fb0-3234-bc9a-8d4dff23c8f2.roa
File: ebebc14f-7fb0-3234-bc9a-8d4dff23c8f2.roa (raw, json)
Hash identifier: KFj8wEDqnyV6QkyhhcCm+r7XxLcy6CO//kf1/pPgPfA=
Subject key identifier: 71:10:6C:4E:D1:05:58:2A:A0:D2:BF:5E:B0:9D:63:FC:75:35:C9:D6
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DD804126BA5B2AEBC4E9600
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ebebc14f-7fb0-3234-bc9a-8d4dff23c8f2.roa
Signing time: Tue 07 Apr 2026 16:19:56 +0000
ROA not before: Tue 07 Apr 2026 16:19:56 +0000
ROA not after: Mon 06 Jul 2026 16:19:56 +0000
asID: 834
IP address blocks: 104.253.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:d8:04:12:6b:a5:b2:ae:bc:4e:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:19:56 2026 GMT
Not After : Jul 6 16:19:56 2026 GMT
Subject: CN=31c00d38-d923-46a3-84e6-a8bcb58bb74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:73:a4:4e:33:89:38:4d:ca:47:63:c4:e3:84:
02:91:b8:75:17:5b:aa:e7:79:b4:57:41:2d:70:79:
dd:41:57:a2:4c:bc:a8:4b:c1:c0:96:f1:3f:40:a7:
ec:44:2b:24:d7:49:70:a3:f2:2e:b1:3d:63:5d:eb:
a9:83:b9:0f:cd:54:2a:d9:82:a3:17:fa:d2:79:a8:
2b:79:53:4d:4f:b2:3c:73:48:f7:22:0c:0b:1e:70:
e8:19:14:13:ba:3e:98:2d:ef:31:ad:f1:45:82:af:
7a:0d:0d:60:9b:0f:c2:19:82:1b:e4:e0:6b:3c:db:
65:4a:76:90:90:33:77:61:3e:cc:c6:53:21:3a:9c:
50:4a:da:82:b3:8b:29:be:b4:62:13:d5:ea:58:d4:
4e:92:45:b1:ba:fa:28:39:97:f2:50:be:2c:f0:9a:
a3:ea:c2:50:d3:84:eb:70:1a:71:e4:7e:78:e0:a9:
d3:31:94:87:d0:1b:c8:7b:f2:dd:b0:19:46:b9:bb:
21:06:8c:5a:61:4d:65:86:39:5b:f0:f0:5a:9b:34:
14:94:fe:09:06:80:21:21:77:5b:8f:03:12:4f:f7:
54:f8:d5:0e:2c:4e:b9:f5:5b:09:aa:0e:b6:be:21:
91:4c:da:33:e8:0c:be:75:0e:75:36:2b:5f:d0:31:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:10:6C:4E:D1:05:58:2A:A0:D2:BF:5E:B0:9D:63:FC:75:35:C9:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ebebc14f-7fb0-3234-bc9a-8d4dff23c8f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:34:c3:53:2c:56:ff:2e:03:5d:9e:c0:1a:08:23:22:6a:1c:
26:9e:72:ce:35:d8:14:ba:54:61:f4:d2:df:37:9d:f2:1c:a3:
a0:2f:ce:dd:a4:5b:c9:f5:26:26:5f:5a:79:f6:2f:72:53:8d:
81:59:fc:66:ca:23:7f:8a:8c:7c:2d:5c:51:98:6c:16:99:2d:
5e:b8:e3:95:ba:88:8d:1d:a3:73:dc:4c:ff:55:7a:37:f6:9d:
47:c6:8e:f7:88:92:81:7c:c3:db:0e:31:c5:4e:e0:b2:54:67:
3f:c7:8a:14:7d:c3:20:5a:0e:2b:05:e7:d8:cd:43:ee:67:36:
11:f2:c5:35:61:2b:43:7d:7d:ab:b1:9c:fa:ed:77:09:cd:dd:
37:81:e9:c4:39:a3:92:02:7e:df:e0:84:9f:f3:f8:d3:46:2d:
39:24:90:4d:db:15:5b:d5:bb:db:41:5f:e4:a7:84:48:5b:29:
e0:0b:c1:5c:35:7b:cf:e4:94:1c:5e:07:50:78:4b:8c:50:c6:
2e:e9:e3:e1:b8:44:b8:8c:d5:27:78:95:c3:c7:d3:b3:fc:54:
39:4c:30:2a:a3:bb:4a:db:da:c4:2c:c7:a7:38:15:94:0d:de:
7e:c0:5b:c7:07:6b:d3:4b:e6:b8:58:09:c9:47:8f:24:1b:b3:
ed:16:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:12 2026 by rpki-client