
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/17a22897-da11-3f78-92d2-7469ac06a273.roa
File: 17a22897-da11-3f78-92d2-7469ac06a273.roa (raw, json)
Hash identifier: XVCKQS/GdOU3c+QkVWW7am7kzsAEM2MGDTz6cf6bM28=
Subject key identifier: 85:59:FF:3D:0B:50:1F:2D:EA:93:E6:57:41:82:14:87:A3:8E:94:12
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584E4DB9F7DA30AA83FBD07230C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/17a22897-da11-3f78-92d2-7469ac06a273.roa
Signing time: Fri 26 Jun 2026 21:00:11 +0000
ROA not before: Fri 26 Jun 2026 21:00:11 +0000
ROA not after: Thu 24 Sep 2026 21:00:11 +0000
asID: 18779
IP address blocks: 45.38.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4d:b9:f7:da:30:aa:83:fb:d0:72:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Jun 26 21:00:11 2026 GMT
Not After : Sep 24 21:00:11 2026 GMT
Subject: CN=d4295813-b115-4e03-8d67-66607d2a864a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c4:e9:22:3d:c2:e5:47:1d:9d:f2:eb:6b:22:
74:c9:70:cf:f3:af:13:aa:02:39:1f:4d:7f:1e:ae:
8c:89:9b:74:40:c2:28:e7:00:26:5e:d6:98:c2:71:
79:b5:29:10:e3:9b:82:6c:7e:4d:49:13:f5:4f:55:
2b:83:06:d5:fe:6f:54:40:54:7f:7c:c0:d7:07:32:
89:8a:72:71:d9:78:3c:bf:77:2d:5a:e9:50:9f:01:
cb:e8:b8:b2:0a:ca:35:86:72:df:92:d7:da:69:70:
2a:34:1d:9c:56:92:5a:b6:5a:7d:f2:a6:8b:17:f8:
b2:76:8a:70:c2:50:53:f5:ac:b5:6b:c8:4a:5f:91:
9d:8e:9a:30:55:b6:ce:84:b1:c1:73:32:5c:aa:7e:
5a:2b:1e:98:48:f3:2a:31:50:8a:49:39:6b:7e:63:
14:44:19:b9:c3:f3:f9:4a:8e:d5:e6:d2:23:8b:15:
c7:bf:f4:49:d8:c0:e8:6f:61:cc:41:f6:19:89:d7:
2f:e5:37:9d:a0:d4:fc:2a:7d:3c:83:4e:2b:c3:31:
1c:aa:9f:a9:d9:06:bc:d9:23:aa:42:2d:35:28:0e:
8a:8d:d9:f8:e9:c0:d9:a3:4c:97:c9:5a:38:d3:24:
75:1f:d7:21:a3:f5:0a:68:c1:97:82:8e:ac:b4:8c:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:59:FF:3D:0B:50:1F:2D:EA:93:E6:57:41:82:14:87:A3:8E:94:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/17a22897-da11-3f78-92d2-7469ac06a273.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:ee:01:5c:c5:23:19:47:c0:21:69:be:67:af:88:4e:55:04:
d3:7a:56:a1:20:18:b6:3c:7b:88:a2:3c:5e:72:16:86:07:41:
be:89:13:31:16:36:6a:41:58:c1:98:3a:a0:e9:05:d2:a1:82:
00:96:d4:2c:6d:6d:37:ab:cb:13:07:15:c3:b3:8c:04:0e:35:
4c:94:ad:2f:f8:23:a3:63:17:b7:7d:5b:e3:d5:7e:f8:ba:77:
ab:a1:31:47:4a:a3:d7:18:78:d2:13:dc:6e:d8:3c:09:d7:f7:
2f:b5:93:bc:ca:8b:75:f3:77:df:41:7e:64:03:4e:82:04:98:
75:ff:07:86:4c:0c:c8:17:ab:c7:9f:c7:3c:99:84:ca:30:1e:
f0:9c:f0:ed:21:bc:4c:33:6b:58:65:e0:7e:30:6c:cc:f5:97:
43:f7:cb:70:24:52:ad:fd:ea:e0:02:09:eb:f5:ac:12:66:65:
85:c5:c3:45:3e:f7:16:21:d8:e7:45:a9:ad:60:25:8d:55:4a:
f1:65:bf:a1:03:fc:f3:3a:74:13:4a:f8:07:4f:af:aa:fa:2a:
a5:04:cf:49:b4:59:50:c5:02:d4:13:06:a7:ae:d1:a3:b4:ee:
c6:5d:dd:66:a3:cb:a8:dd:38:c5:da:c4:88:ed:ac:1e:90:28:
0c:05:90:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:56:24 2026 by rpki-client