
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b68b35b2-3818-3aa8-8a20-0c451f780dba.roa
File: b68b35b2-3818-3aa8-8a20-0c451f780dba.roa (raw, json)
Hash identifier: 4nkdrg9U4YUjIvpOtKMYu8lmDvm2wQjxqxhE3vfRgE4=
Subject key identifier: 1F:EA:AA:1C:E1:EC:D4:FB:A6:8C:9E:B1:47:F1:54:B2:20:CB:53:D9
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584E4DB9FD012450775D0E7C7380
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b68b35b2-3818-3aa8-8a20-0c451f780dba.roa
Signing time: Fri 26 Jun 2026 21:00:11 +0000
ROA not before: Fri 26 Jun 2026 21:00:11 +0000
ROA not after: Thu 24 Sep 2026 21:00:11 +0000
asID: 56971
IP address blocks: 45.38.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4d:b9:fd:01:24:50:77:5d:0e:7c:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Jun 26 21:00:11 2026 GMT
Not After : Sep 24 21:00:11 2026 GMT
Subject: CN=659d48fe-0606-4a3c-9756-8425d138a009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:70:37:25:64:89:a9:58:53:13:6a:40:b9:
da:d5:46:0f:24:78:81:9a:ef:b8:43:e6:20:e8:61:
55:d3:75:da:39:c8:e6:09:82:52:fa:0d:0e:21:ec:
f4:d6:7b:07:df:a6:03:4b:ee:0b:d4:bb:08:70:96:
fe:f1:17:cd:44:ee:49:c2:e9:a0:22:23:58:37:97:
27:e3:9a:63:fa:79:0c:36:3a:53:35:16:c3:18:d4:
1b:2e:31:65:ca:f7:86:05:fd:64:05:dc:ad:c4:21:
dc:ab:0a:a6:1a:c2:a0:3f:ca:ee:70:ab:6d:27:5d:
56:4b:3d:e7:5c:8e:46:44:5c:c3:3c:2e:b6:a9:0c:
8c:f3:42:17:e9:14:a9:26:c0:83:57:63:03:19:38:
24:44:6f:f9:09:2b:c4:34:f7:34:ce:7d:84:24:0e:
91:65:6a:64:7d:1d:a4:81:3b:41:3e:9a:58:46:90:
a8:ab:d3:7f:e2:bc:59:70:df:5d:07:c8:d7:46:79:
19:70:7a:68:88:29:9d:8f:ac:a2:24:54:08:51:0d:
d6:2c:d8:02:5e:46:77:f2:4a:de:e5:65:56:c7:1b:
eb:75:2b:23:97:f8:b7:c3:e5:86:62:e5:b8:5e:8e:
b9:91:0e:83:eb:1a:82:4e:0b:86:a9:f1:c7:b7:c4:
a4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EA:AA:1C:E1:EC:D4:FB:A6:8C:9E:B1:47:F1:54:B2:20:CB:53:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b68b35b2-3818-3aa8-8a20-0c451f780dba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:e9:46:ad:48:06:84:66:cf:48:30:60:87:53:2e:c1:ce:4a:
e1:c9:04:d8:e8:ce:03:ed:ba:4b:f6:a3:8f:3b:7b:17:51:c1:
8a:82:ad:b0:49:73:4d:aa:90:44:04:d8:df:5a:1e:62:3a:90:
10:41:ab:3a:1d:84:57:3c:af:71:6c:7f:5a:c6:14:6a:85:8a:
25:d2:94:b0:d2:04:b6:e2:7f:83:75:51:ae:6a:9a:96:31:53:
77:e9:24:fb:0d:98:90:fe:df:a0:47:c0:75:ea:d4:88:4b:ae:
56:52:3b:ff:e9:1a:7b:e5:15:cf:03:d7:04:5c:5b:7b:c3:ea:
14:3b:90:f6:26:54:2e:22:1f:f4:57:46:f1:a9:78:ed:28:b1:
c6:0c:f5:10:ab:aa:c8:fa:d5:57:ea:0a:64:07:2e:8d:89:84:
ed:99:7c:1a:4c:a0:de:67:c0:aa:83:66:08:a4:51:fd:29:b1:
ec:61:31:ad:ee:e6:ac:ff:88:7f:ff:ea:45:e0:59:79:66:fa:
58:1d:46:8c:27:83:4f:6d:aa:64:ee:4c:67:ef:14:d6:49:79:
f2:b4:ab:46:52:09:d9:b4:7d:11:c5:4e:88:e2:cf:56:26:f0:
72:8e:fb:45:84:8b:14:40:4f:da:fb:5f:49:d0:99:7c:d9:70:
26:a9:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:52:37 2026 by rpki-client