
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/88bafaa8-19ee-3616-9dd9-613edc2e4a7d.roa
File: 88bafaa8-19ee-3616-9dd9-613edc2e4a7d.roa (raw, json)
Hash identifier: SBYCdj+0vOflk+VX0sDj3wohnaTLKqcptSr5zfW0OVA=
Subject key identifier: 1E:62:E2:EE:2D:24:5E:3E:44:FF:88:E7:25:51:61:2B:66:9A:7D:A8
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EAFE6E848FEED65A33FF19580
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/88bafaa8-19ee-3616-9dd9-613edc2e4a7d.roa
Signing time: Sat 01 Aug 2026 01:00:12 +0000
ROA not before: Sat 01 Aug 2026 01:00:12 +0000
ROA not after: Fri 30 Oct 2026 01:00:12 +0000
asID: 3561
IP address blocks: 104.252.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:e6:e8:48:fe:ed:65:a3:3f:f1:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Aug 1 01:00:12 2026 GMT
Not After : Oct 30 01:00:12 2026 GMT
Subject: CN=bd020e05-fa3d-4faa-a099-4193d6e2e23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3d:23:92:27:72:5c:64:44:18:32:80:b0:12:
37:f1:5c:57:78:cb:74:56:7c:c6:7d:67:81:7c:67:
52:f4:6c:7b:93:8c:87:b8:7e:00:da:e9:c9:57:cf:
e4:24:d1:b6:14:3d:e2:27:38:e2:24:23:1e:69:16:
7c:e3:6c:2b:25:27:2f:9b:a3:08:85:60:07:5e:c9:
08:e6:80:e3:1d:12:74:5e:49:ea:3f:ab:3c:86:5c:
2f:5c:6f:72:e5:bf:a4:42:8d:fd:03:82:32:58:57:
94:35:27:9c:31:fb:df:f2:31:13:06:23:6d:7d:45:
b9:03:4a:60:94:46:b3:4f:34:cc:6d:b5:3a:6f:93:
63:e9:3e:a6:60:12:e3:e4:c3:6d:08:ef:b2:be:a6:
db:9e:05:f1:af:45:01:01:ee:3e:90:a3:e4:39:89:
8d:3a:53:26:de:8b:9d:a0:a2:ab:2e:18:1f:0f:ac:
42:50:b5:78:76:17:90:a0:c2:a0:6b:c0:85:12:f5:
fe:f1:d6:82:10:ae:7b:a4:93:43:d3:c2:f8:0a:45:
78:fc:97:b8:11:52:14:b5:42:5b:b2:b0:f1:22:12:
f4:cc:14:39:f7:5d:a7:88:be:f5:04:00:fc:cd:e7:
fa:d0:d7:a0:76:4b:8d:24:bc:37:7e:65:0d:13:53:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:62:E2:EE:2D:24:5E:3E:44:FF:88:E7:25:51:61:2B:66:9A:7D:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/88bafaa8-19ee-3616-9dd9-613edc2e4a7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.252.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:a7:c9:96:ed:97:7f:cb:95:32:21:b3:0b:70:fc:f4:9f:5a:
e4:68:9d:d6:b1:56:4f:04:06:d7:bc:51:12:1e:59:4e:10:02:
b2:41:5e:af:ca:8a:34:c3:d8:45:4b:e2:ec:8a:e2:ef:cb:e4:
a3:48:9b:23:7c:e0:e1:79:9a:71:cc:7d:f6:ac:70:83:ef:2b:
0b:33:dd:41:55:8d:b5:5d:23:c0:df:ca:db:27:d4:a1:84:19:
f9:d0:78:fa:16:78:4e:0f:18:b7:f9:4c:44:a3:29:8f:81:70:
28:31:30:97:6c:9d:e2:96:47:77:5f:c0:1a:c0:17:50:9c:3f:
ec:87:4e:13:f2:b7:3c:a6:21:fe:af:53:0a:c7:ab:8f:9d:52:
ef:ec:c5:e5:c7:9a:42:19:86:10:9f:4c:4a:7f:e9:90:d2:84:
92:16:f5:a7:c7:36:48:fd:a3:eb:5d:d1:30:9f:35:be:0f:f6:
7e:ca:fe:0c:5e:12:7b:6b:9e:09:cc:d0:1f:23:c1:c1:dc:91:
4b:9b:75:e1:b9:3e:9c:b5:15:ab:de:a6:d1:4c:bd:a9:1b:18:
41:e8:f9:a5:14:7b:67:f8:8f:87:11:96:e5:f4:2b:d9:8a:e5:
4e:08:37:b4:49:d2:c6:39:9d:fb:2f:ae:57:bd:90:9f:5e:fc:
aa:d6:0c:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5uhI/u1loz/xlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk
YmQwMjBlMDUtZmEzZC00ZmFhLWEwOTktNDE5M2Q2ZTJlMjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT0jkidyXGREGDKAsBI38VxXeMt0VnzGfWeB
fGdS9Gx7k4yHuH4A2unJV8/kJNG2FD3iJzjiJCMeaRZ842wrJScvm6MIhWAHXskI
5oDjHRJ0XknqP6s8hlwvXG9y5b+kQo39A4IyWFeUNSecMfvf8jETBiNtfUW5A0pg
lEazTzTMbbU6b5Nj6T6mYBLj5MNtCO+yvqbbngXxr0UBAe4+kKPkOYmNOlMm3oud
oKKrLhgfD6xCULV4dheQoMKga8CFEvX+8daCEK57pJND08L4CkV4/Je4EVIUtUJb
srDxIhL0zBQ5912niL71BAD8zef60NegdkuNJLw3fmUNE1Nb/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB5i4u4tJF4+RP+I5yVRYStmmn2oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvODhiYWZhYTgtMTllZS0z
NjE2LTlkZDktNjEzZWRjMmU0YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPzLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCnyZbtl3/LlTIhswtw/PSfWuRondaxVk8EBte8URIeWU4QArJBXq/K
ijTD2EVL4uyK4u/L5KNImyN84OF5mnHMffascIPvKwsz3UFVjbVdI8Dfytsn1KGE
GfnQePoWeE4PGLf5TESjKY+BcCgxMJdsneKWR3dfwBrAF1CcP+yHThPytzymIf6v
UwrHq4+dUu/sxeXHmkIZhhCfTEp/6ZDShJIW9afHNkj9o+td0TCfNb4P9n7K/gxe
EntrngnM0B8jwcHckUubdeG5Ppy1FaveptFMvakbGEHo+aUUe2f4j4cRluX0K9mK
5U4IN7RJ0sY5nfsvrle9kJ9e/KrWDMc=
-----END CERTIFICATE-----
Generated at Thu Aug 13 03:49:41 2026 by rpki-client