
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8d21f230-8eb5-3ab1-86ff-251d9bdce152.roa
File: 8d21f230-8eb5-3ab1-86ff-251d9bdce152.roa (raw, json)
Hash identifier: 89CFK9DK2zQQUafh8H7k60FBXUHGedu1Zt84VO6DwZ4=
Subject key identifier: 50:F5:73:A4:28:80:D7:84:38:1F:D5:64:71:4A:9A:75:12:F9:BC:E5
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584E4DBA15192DACE79CBF436F00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8d21f230-8eb5-3ab1-86ff-251d9bdce152.roa
Signing time: Fri 26 Jun 2026 21:00:11 +0000
ROA not before: Fri 26 Jun 2026 21:00:11 +0000
ROA not after: Thu 24 Sep 2026 21:00:11 +0000
asID: 8881
IP address blocks: 104.253.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4d:ba:15:19:2d:ac:e7:9c:bf:43:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Jun 26 21:00:11 2026 GMT
Not After : Sep 24 21:00:11 2026 GMT
Subject: CN=da4eedd4-38a5-485d-9783-abf1ac66d883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b2:ff:41:9d:3b:33:5a:34:eb:2d:0d:95:83:
44:44:70:04:05:5b:6c:43:ed:ee:5e:cf:a5:3a:33:
20:b5:9d:ed:bf:3e:c3:22:d0:ef:41:78:23:f9:f3:
75:25:e8:78:35:e1:a7:68:87:99:8d:fe:1a:ed:d8:
21:99:38:63:5d:4a:47:c8:eb:69:49:06:14:aa:39:
09:04:86:9e:eb:09:b7:dc:54:09:d2:86:9a:91:18:
aa:f9:c6:55:d3:3f:07:f6:cb:a9:92:69:7d:11:a5:
3b:b3:d3:a8:76:cc:ed:ec:55:39:53:07:66:7f:ef:
09:9b:8b:54:fa:83:66:43:11:d5:6f:35:86:b3:ef:
76:03:fe:bb:1a:21:62:39:93:38:a1:81:f0:7c:31:
65:e8:5a:03:49:05:57:1d:c2:0d:7b:78:93:32:f5:
22:16:fe:65:a5:82:b5:96:8f:3e:80:b2:46:5d:aa:
c2:5d:d1:a4:1a:73:3b:b1:67:91:3f:d6:92:65:7c:
d2:db:06:68:af:46:d1:7c:3d:c1:0b:30:a4:54:79:
5d:99:c3:f9:c7:38:23:f4:0b:4e:f0:8a:f2:0d:3b:
68:1b:6f:90:ee:c8:90:a9:19:36:23:f5:2e:97:e2:
df:d1:5d:65:c0:b9:a7:d9:b9:fd:24:7e:b6:ac:70:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F5:73:A4:28:80:D7:84:38:1F:D5:64:71:4A:9A:75:12:F9:BC:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8d21f230-8eb5-3ab1-86ff-251d9bdce152.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:93:fd:2d:3a:a9:e9:4c:88:1d:85:1e:e3:8e:61:38:85:59:
87:c2:98:8f:39:4f:d0:1f:77:bf:e2:69:d7:56:6f:9c:6c:97:
1b:61:b1:c6:5e:9d:d5:c3:1e:ef:14:19:fc:ac:db:05:1d:be:
2d:04:8e:29:0f:15:9a:60:f5:b6:29:13:44:04:95:5f:18:02:
78:8f:bd:e1:c4:3d:44:3f:80:40:41:d6:da:9d:8d:13:c1:45:
92:04:f2:dd:c9:07:e2:5d:86:72:0e:de:74:a0:03:57:d0:c6:
5f:7a:8f:c6:19:71:62:16:39:3a:b1:d6:2b:9a:9f:4d:99:2b:
f8:7c:e6:40:c3:93:49:d0:c5:65:7a:1f:e8:b7:d0:52:95:25:
d6:45:52:f7:ff:82:5b:3d:3c:78:8d:10:b1:3a:e3:14:7c:a2:
20:bf:a6:1a:53:44:92:e6:c7:72:2d:be:85:9f:34:78:9b:14:
1c:fb:76:88:93:13:5a:ad:51:26:94:58:56:a4:f5:a8:ab:18:
08:6a:53:14:5b:a0:e2:48:36:9e:a7:b2:ca:38:5f:2a:07:39:
e7:07:bc:06:47:25:0e:5a:13:bf:1a:38:2d:b9:82:1e:8a:13:
bf:70:92:54:8c:b8:2d:fe:6b:40:00:c3:24:f4:0d:34:20:d2:
6b:8b:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:53:25 2026 by rpki-client