
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3b8f88b9-ea2b-3d58-a637-f986fbd87955.roa
File: 3b8f88b9-ea2b-3d58-a637-f986fbd87955.roa (raw, json)
Hash identifier: MHh7Mky0g2j+WkayJQ+qvA5W3QT05/yGmuDZLRLaozo=
Subject key identifier: 8A:2B:AB:9A:E1:68:19:96:B0:3F:4D:81:EF:E5:EE:B5:1C:EF:93:12
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EF01CD2DC667CDDA4CD0C2280
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3b8f88b9-ea2b-3d58-a637-f986fbd87955.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 200239
IP address blocks: 104.252.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:d2:dc:66:7c:dd:a4:cd:0c:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=2e57c79d-847e-492f-9b97-ce49e48f523b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:03:d5:29:49:01:3f:2b:b0:38:c1:61:80:74:
71:63:50:b3:32:9b:af:4d:3c:89:2b:51:75:cb:d1:
8c:f7:4b:39:34:9f:d0:d2:f8:c6:cf:e9:21:e0:74:
af:fc:78:d1:b2:0f:45:07:69:aa:f0:97:64:c2:d1:
ab:1e:96:61:17:c0:19:fd:21:fa:ea:bc:83:7d:a5:
4a:8f:e0:a0:20:67:be:fb:98:9a:8c:ec:85:98:0c:
6a:a3:de:d7:f9:43:cc:c1:18:fd:1a:9b:0e:89:28:
f2:93:87:54:fc:0e:93:35:f6:08:46:88:b1:4e:81:
58:ae:be:58:85:6e:5a:71:87:db:68:84:a5:69:40:
31:d2:80:dc:d1:35:76:1d:ff:e6:85:18:88:1a:80:
e8:02:33:05:30:70:24:35:99:1d:6a:48:57:56:77:
f2:50:03:68:0b:b1:a8:18:76:68:bb:80:04:73:66:
c3:26:58:ee:e3:42:92:1b:f8:56:19:50:9b:bd:2b:
a6:82:cc:f3:0d:fa:6d:18:0e:26:d7:2d:fb:3c:7c:
31:8b:87:a1:68:0d:62:cd:72:35:91:73:d5:0e:e2:
bb:bd:86:d0:8c:85:9f:4e:6b:34:21:c7:c1:a7:c0:
f2:73:41:bf:40:24:78:fe:61:7b:e8:0d:e4:5b:1a:
d0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2B:AB:9A:E1:68:19:96:B0:3F:4D:81:EF:E5:EE:B5:1C:EF:93:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3b8f88b9-ea2b-3d58-a637-f986fbd87955.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.252.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:d4:21:5a:1e:8a:c0:ff:2e:7e:30:a6:3e:3b:31:63:c2:c5:
cf:04:d5:70:b0:cd:5d:4a:e4:1f:30:dd:fa:a6:0c:5c:1d:18:
25:7a:99:e6:15:1a:23:03:6c:b6:1d:03:22:42:10:ff:67:d3:
d4:83:0c:58:0c:ad:94:57:41:b2:84:b1:e5:f1:43:bf:d2:81:
2f:31:20:ab:67:64:a0:93:97:f2:a8:18:6e:db:54:be:bb:99:
d7:4a:e6:40:10:84:f2:61:c4:9a:47:f1:9b:19:eb:b9:43:37:
4d:8a:87:f8:ae:48:f6:39:ba:43:d4:01:73:f5:a3:05:96:45:
bc:99:3f:8d:3e:16:96:1c:74:8a:fc:dd:b2:51:51:4d:df:44:
8a:22:91:37:88:67:6f:bb:20:84:75:d2:7f:64:a9:2b:20:79:
c8:74:6b:8d:81:6e:3c:4a:9f:60:ee:34:94:85:92:0b:2b:87:
f1:da:7d:93:bb:83:d9:16:34:d2:96:dc:c4:98:ba:64:81:67:
6f:c7:cc:f1:4e:b3:1c:35:2f:0b:b2:81:1f:a1:c6:4a:16:f6:
4b:a0:1f:81:b2:8f:ed:9a:48:c8:64:bf:c6:48:d3:52:67:c6:
df:b6:86:c8:d3:ca:57:87:aa:90:6d:36:38:39:0f:79:18:73:
5d:1b:0a:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHNLcZnzdpM0MIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
MmU1N2M3OWQtODQ3ZS00OTJmLTliOTctY2U0OWU0OGY1MjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgPVKUkBPyuwOMFhgHRxY1CzMpuvTTyJK1F1
y9GM90s5NJ/Q0vjGz+kh4HSv/HjRsg9FB2mq8JdkwtGrHpZhF8AZ/SH66ryDfaVK
j+CgIGe++5iajOyFmAxqo97X+UPMwRj9GpsOiSjyk4dU/A6TNfYIRoixToFYrr5Y
hW5acYfbaISlaUAx0oDc0TV2Hf/mhRiIGoDoAjMFMHAkNZkdakhXVnfyUANoC7Go
GHZou4AEc2bDJlju40KSG/hWGVCbvSumgszzDfptGA4m1y37PHwxi4ehaA1izXI1
kXPVDuK7vYbQjIWfTms0IcfBp8Dyc0G/QCR4/mF76A3kWxrQyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIorq5rhaBmWsD9Nge/l7rUc75MSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvM2I4Zjg4YjktZWEyYi0z
ZDU4LWE2MzctZjk4NmZiZDg3OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPyHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrUIVoeisD/Ln4wpj47MWPCxc8E1XCwzV1K5B8w3fqmDFwdGCV6meYV
GiMDbLYdAyJCEP9n09SDDFgMrZRXQbKEseXxQ7/SgS8xIKtnZKCTl/KoGG7bVL67
mddK5kAQhPJhxJpH8ZsZ67lDN02Kh/iuSPY5ukPUAXP1owWWRbyZP40+FpYcdIr8
3bJRUU3fRIoikTeIZ2+7IIR10n9kqSsgech0a42BbjxKn2DuNJSFkgsrh/HafZO7
g9kWNNKW3MSYumSBZ2/HzPFOsxw1LwuygR+hxkoW9kugH4Gyj+2aSMhkv8ZI01Jn
xt+2hsjTyleHqpBtNjg5D3kYc10bCjo=
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:38:28 2026 by rpki-client