
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ba5f151a-9abe-36e4-a90b-90cebd577885.roa
File: ba5f151a-9abe-36e4-a90b-90cebd577885.roa (raw, json)
Hash identifier: NaE2mpojBWIHKMUBVvzCKuybf3VtJHD3EQwxSZZVdQQ=
Subject key identifier: 87:EC:7D:BD:33:69:4C:C1:E5:A1:98:9C:B6:ED:45:11:96:87:AA:CE
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EA7922FD8EF222C8373BCB700
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ba5f151a-9abe-36e4-a90b-90cebd577885.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 20738
IP address blocks: 104.252.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:92:2f:d8:ef:22:2c:83:73:bc:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=6d5d620a-fb7d-4e7d-be17-1c70ec5b2b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:0f:fd:52:5c:9d:2f:40:3e:ab:3e:92:65:
7d:09:4b:b1:95:3b:5f:00:75:6f:25:a4:6b:02:98:
0e:8e:67:ed:63:12:07:8b:c7:b6:4b:fd:70:63:7a:
a8:92:69:10:53:a1:cc:ab:65:a6:47:ae:51:40:fe:
4a:0d:83:55:ab:a6:db:88:02:94:00:c8:43:58:50:
f9:a5:e4:e7:29:84:c0:3c:24:2a:fe:de:fd:dd:50:
2a:dd:39:eb:12:1d:09:5a:52:7a:d9:55:28:cf:6b:
44:1d:ea:f2:83:83:93:b7:c1:fb:b6:88:b3:6b:55:
cd:2f:e0:9a:75:13:1c:58:f1:70:e8:6d:f6:f6:55:
2f:66:fe:9d:8e:e6:3f:6d:ba:b4:2e:e4:93:cb:2a:
01:2c:b7:26:73:3b:c6:d0:ed:07:d1:1a:d0:98:f8:
95:26:06:9f:41:96:b4:07:24:4f:7b:06:78:e4:5e:
4b:90:5a:c0:20:52:2a:a5:c2:9d:47:0e:d1:a3:b4:
e5:f9:a4:08:f5:ab:79:86:8a:80:a4:7d:b5:1a:c2:
af:e1:ed:d3:19:ab:06:e5:3d:43:59:5c:23:c9:d1:
01:9d:49:7b:cc:4c:d4:f0:3b:f5:f6:2a:6c:a2:bd:
24:87:37:c7:30:4e:ce:8e:2f:52:5f:02:20:b4:d0:
00:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EC:7D:BD:33:69:4C:C1:E5:A1:98:9C:B6:ED:45:11:96:87:AA:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ba5f151a-9abe-36e4-a90b-90cebd577885.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.252.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:eb:9e:f2:a2:1a:04:c8:b4:65:7c:44:f3:71:62:f3:10:59:
94:4d:35:8f:7a:ee:cc:0a:1e:78:72:18:ef:50:c5:e7:e9:a1:
e0:7f:d4:4f:13:11:de:22:22:70:39:ce:7e:a7:ac:66:f9:89:
63:7c:77:50:b2:7e:18:c3:1d:55:1c:ed:99:2b:63:40:bf:3d:
17:2e:d1:eb:be:6b:68:72:0c:e4:16:39:4f:08:c0:6e:f3:1a:
ff:70:d3:a8:43:a9:34:07:36:67:ac:4a:79:dd:c6:58:d1:7a:
e7:64:bc:05:b6:ee:7c:b3:a1:46:55:dc:0f:53:66:e0:2d:3c:
7a:37:7e:ed:c2:10:e9:0f:8c:72:48:9b:9f:50:38:d2:41:ea:
12:86:97:0b:fb:ae:42:2f:de:77:b4:a8:b2:6b:fe:8c:95:a1:
77:e2:05:a5:56:ae:25:24:72:61:58:db:35:f5:54:91:55:21:
fc:01:13:49:93:3c:39:83:c4:37:a5:0d:eb:6a:3b:8a:d0:ee:
54:34:5e:c4:3e:fe:bf:d9:60:43:b9:ef:7b:7c:72:72:31:d1:
fe:b2:56:c0:be:aa:54:dc:77:2d:fd:6a:de:98:d8:f1:56:dc:
95:a5:03:f4:26:d4:01:6b:83:25:67:57:e1:2c:4d:5a:e4:77:
ba:b2:f1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:33:49 2026 by rpki-client