
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f88d4280-07cb-32f7-aa95-ffdedec45434.roa
File: f88d4280-07cb-32f7-aa95-ffdedec45434.roa (raw, json)
Hash identifier: lTYKrtwmq3CUsaD9XwW8BlSB9dOp0KJbeZyTJgh7Ni4=
Subject key identifier: 07:79:AE:AC:71:92:47:7E:1F:53:68:07:75:3D:AA:5B:04:EB:87:94
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDC8439205F2F98C27ADE00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f88d4280-07cb-32f7-aa95-ffdedec45434.roa
Signing time: Tue 07 Apr 2026 16:29:00 +0000
ROA not before: Tue 07 Apr 2026 16:29:00 +0000
ROA not after: Mon 06 Jul 2026 16:29:00 +0000
asID: 9009
IP address blocks: 104.253.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:dc:84:39:20:5f:2f:98:c2:7a:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:29:00 2026 GMT
Not After : Jul 6 16:29:00 2026 GMT
Subject: CN=2a9f4e92-f98c-40a7-aaad-ae0032a868bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:eb:db:6d:df:ca:02:d0:93:5b:61:de:39:
f8:b8:53:98:f8:16:c9:4c:f6:08:b5:dc:11:8c:6a:
9d:68:80:ab:cc:c2:05:e3:fd:f2:54:40:ff:b7:6d:
64:cb:e5:bb:5a:d4:36:66:4a:4d:2a:87:6c:8b:71:
be:30:ac:d0:ae:45:8f:e0:64:4c:a5:a9:b2:a3:e4:
94:94:b8:15:cc:04:59:8a:41:f9:6e:2f:c1:6d:c5:
82:f4:bc:35:6f:37:4c:f3:78:4d:03:50:df:ca:a3:
0e:cc:47:51:0e:9f:96:a2:0d:05:45:c9:db:25:20:
f3:72:3c:9e:30:86:8e:b4:e1:dd:b5:f0:6b:c5:21:
97:62:6a:82:b5:8b:62:da:aa:da:4b:da:c9:83:2e:
45:2e:5e:c6:80:71:60:97:1b:6b:de:a9:e9:68:39:
5a:41:26:cb:64:5a:e5:e4:bb:f4:69:4a:4d:81:71:
29:d9:2f:60:9d:73:72:5e:d1:b2:33:ff:31:6c:aa:
6b:93:bb:1e:47:9d:4d:81:50:60:bf:44:7c:0a:ee:
40:9d:6e:a6:f2:38:8b:03:66:77:fb:25:f8:95:c3:
59:6a:42:33:0f:1c:91:1b:46:22:7a:d5:fb:55:f3:
b7:71:3d:ef:ca:08:4a:aa:f0:00:e7:63:fb:f5:d7:
42:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:79:AE:AC:71:92:47:7E:1F:53:68:07:75:3D:AA:5B:04:EB:87:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f88d4280-07cb-32f7-aa95-ffdedec45434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:e7:97:c5:5e:0a:6e:68:3e:a8:8e:85:97:c9:c1:6c:54:0e:
49:7e:16:80:e7:cf:fc:a2:9b:ae:42:bb:2d:c7:96:c4:e9:a4:
a5:59:7f:d9:21:88:5e:08:e1:91:3d:83:1c:65:bb:2d:92:61:
80:99:d3:b9:25:59:45:16:0b:cc:f6:8e:c7:6b:b6:c0:d3:48:
a7:96:8b:81:25:8f:b7:f1:72:97:3c:a3:75:4e:72:a0:99:0c:
53:49:1f:f6:e1:d1:e8:6e:d1:65:3a:e1:bc:9b:c2:37:20:60:
3f:2d:0c:a1:54:42:56:01:f2:31:e4:6c:f5:df:d9:2e:cc:56:
e6:5f:c9:e4:56:88:92:ff:91:6c:14:d7:b3:8d:6c:90:e7:82:
83:6b:7a:73:47:d1:44:a8:f0:2f:ac:6c:2d:ba:05:65:e5:14:
4f:ae:80:23:a6:6d:95:16:e7:d1:5f:bd:c7:3e:2b:b0:89:1a:
80:38:6a:fc:a6:5e:33:bd:5b:25:b0:fa:bc:40:7b:44:94:a3:
60:40:9d:b8:9e:4d:19:7b:10:a7:75:25:8c:fb:af:a7:41:98:
ff:fe:8e:30:64:bb:2e:72:d8:59:f7:69:22:4f:3a:d3:4a:89:
0b:b1:68:fd:8a:d4:9b:6a:bb:19:e1:4f:c7:eb:9f:6a:64:78:
45:bf:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:41:24 2026 by rpki-client