
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/10de873b-03a7-3d3a-ad6f-09b23d16a463.roa
File: 10de873b-03a7-3d3a-ad6f-09b23d16a463.roa (raw, json)
Hash identifier: X3v87652WuGlzgGrGP+/qHsv77EtilNQFjrBe83rKss=
Subject key identifier: C3:C2:35:FD:5F:97:77:4D:51:FD:35:85:F6:44:BB:9B:50:17:91:0D
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EA797637256BA9D187406BB00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/10de873b-03a7-3d3a-ad6f-09b23d16a463.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 3561
IP address blocks: 104.253.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:63:72:56:ba:9d:18:74:06:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=1ad31f72-d909-41e6-bc3b-fc91298eeed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:c6:9d:6e:71:31:29:d2:90:23:7d:69:ba:
ed:14:22:97:86:b0:4b:fc:5e:dd:4e:78:b7:05:ac:
d2:7b:ca:52:c5:b5:ac:ac:6f:92:7b:31:7d:d4:9f:
97:78:b1:cc:18:31:4c:d4:d7:40:87:2c:59:7e:f5:
d0:35:3c:fb:b2:21:37:02:87:08:84:fb:f7:22:84:
8a:2f:94:50:ab:92:f9:1a:3c:87:20:d2:7d:86:fd:
40:67:60:82:b5:64:94:e1:d2:35:87:da:8d:6d:a9:
ac:ac:35:9a:26:70:b9:7f:15:6d:6a:08:8a:af:e4:
4f:4c:04:8c:da:e3:b4:23:89:75:86:63:14:ce:c3:
a7:8d:8b:6a:74:9c:f0:fa:a7:98:b5:34:58:41:d3:
40:ea:e5:d6:fc:2a:57:a2:da:2d:98:df:32:f0:8b:
cf:60:0e:08:f9:9c:d3:2f:fb:a6:d8:1a:ee:29:38:
53:51:5e:ca:83:0e:f5:1f:9c:de:f8:e9:cc:ee:01:
90:c2:a7:68:52:a2:60:46:90:c9:f7:7d:a7:7e:2b:
84:89:86:34:80:56:ba:2e:68:77:bc:22:78:4e:ac:
af:90:c4:26:e5:c5:04:df:74:7c:6e:a3:8b:23:7f:
58:20:e9:43:aa:8f:e1:1c:8c:3c:2e:e9:2c:00:2d:
25:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C2:35:FD:5F:97:77:4D:51:FD:35:85:F6:44:BB:9B:50:17:91:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/10de873b-03a7-3d3a-ad6f-09b23d16a463.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:ee:f0:23:76:76:0d:4a:13:48:e0:0d:2f:54:e8:39:79:9a:
79:e8:53:83:32:2e:9c:8a:ca:db:4e:cc:47:c0:e5:31:fb:3e:
9f:a2:2c:7b:92:ea:32:6c:74:fb:f2:f0:e4:31:ef:ed:85:c6:
7a:d7:4e:6d:5b:5c:0b:94:1d:61:d6:ad:66:30:0a:c2:dd:17:
40:09:3c:50:5d:6d:23:69:f3:90:33:73:30:cb:9d:e5:87:94:
d2:23:69:4e:3d:f3:7b:aa:7b:97:1f:40:65:be:52:cf:af:4a:
16:12:c6:a0:61:67:66:a6:93:70:e3:69:18:f1:36:c8:71:f7:
01:b8:9b:45:e9:5e:4f:12:e5:3f:33:0f:34:a5:d0:7e:a9:66:
59:0b:83:6e:98:c9:cd:35:1d:48:51:97:f2:2e:85:04:ad:11:
98:54:cc:ba:31:30:92:d5:5c:db:32:fb:0e:55:ce:31:d3:57:
97:5b:f8:14:ca:30:c7:5a:1e:ea:c6:d8:15:1b:b9:51:fa:7c:
86:dd:e2:1c:f1:ff:08:1f:b9:5d:ae:9c:12:8f:5f:02:a9:23:
a4:dd:25:bf:e5:74:61:25:23:7d:23:2c:29:b2:54:73:23:23:
60:83:d3:b0:a0:d4:27:d3:3e:89:d4:7d:88:74:53:b9:4d:37:
60:c9:f7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:36:08 2026 by rpki-client