
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bf5033d6-b891-3235-92f8-7c0e7eedd24e.roa
File: bf5033d6-b891-3235-92f8-7c0e7eedd24e.roa (raw, json)
Hash identifier: 8uIpotUUOxAbRTFy4PjzoYMyrkvBvZedJboQne/eekI=
Subject key identifier: 0D:3D:5A:9E:8B:39:A8:7D:C3:4F:55:FD:07:65:6F:0E:4D:43:D9:95
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EF01CD33E7D5C116F8D32C180
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bf5033d6-b891-3235-92f8-7c0e7eedd24e.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 56971
IP address blocks: 45.38.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:d3:3e:7d:5c:11:6f:8d:32:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=a29622e2-3269-4f66-88a1-f48ac910a026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:0f:5d:5c:75:6b:ab:29:1b:b0:7d:89:dc:
95:ae:26:b2:8b:65:ea:39:13:72:12:ef:8a:2b:f3:
1c:05:9c:6b:5f:9e:19:ca:35:4a:cc:08:18:e4:8a:
a7:2e:6c:2a:55:66:fe:4c:99:fe:2e:cd:4c:2d:d8:
e6:54:de:e6:a0:00:44:ca:49:10:97:f6:86:38:71:
97:60:b6:54:a5:23:1e:08:83:8e:04:d2:79:e1:59:
67:27:f9:b3:77:fb:04:bc:3b:2e:cc:bf:93:6d:4c:
e3:7f:98:b8:b3:65:6d:ec:f7:ca:7a:bc:a6:66:1d:
8c:88:c4:6c:6a:ab:a1:91:99:45:17:c5:9f:04:ad:
08:76:0b:b8:d1:1b:c1:81:be:15:df:90:2d:8a:73:
a4:f1:41:80:31:43:3c:bf:c2:56:04:1c:83:f6:07:
1a:7f:84:6a:71:a0:49:ae:b7:43:84:99:22:cb:db:
a9:f6:26:96:00:22:5e:c8:eb:5e:ab:d2:78:42:f3:
f4:cb:35:9a:22:37:57:d6:fc:7a:c4:2e:d0:39:17:
81:58:ba:fe:6b:6b:37:06:6e:83:b6:d6:91:e1:7d:
1b:d1:b4:ef:69:32:34:eb:56:8e:6a:07:96:37:56:
33:9e:ac:83:a5:ce:f6:0c:a4:01:89:17:60:76:79:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3D:5A:9E:8B:39:A8:7D:C3:4F:55:FD:07:65:6F:0E:4D:43:D9:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bf5033d6-b891-3235-92f8-7c0e7eedd24e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:02:9c:e6:e0:dd:a5:f3:dd:7c:88:be:53:2f:ee:7c:a4:48:
71:e6:8a:72:79:79:af:bc:21:4e:c5:57:9a:d6:a5:34:1b:4f:
1b:4d:27:16:79:b2:88:8c:88:f2:2b:f2:82:de:97:94:a8:bd:
52:16:76:b8:1a:3a:3b:51:19:ae:e6:62:f4:06:42:cf:fc:66:
a9:4d:07:e1:14:e2:67:c2:e7:20:e0:93:ec:57:25:7a:8e:c7:
93:40:16:71:c8:a1:3a:73:22:cf:1e:d5:98:bc:ff:f9:32:59:
cb:6d:e1:6b:dd:88:43:9a:42:58:2f:a3:9e:43:48:21:77:39:
0b:6d:77:9f:38:05:4a:5f:b4:5f:61:17:ce:66:56:04:8e:22:
c0:f3:16:da:19:87:5b:c1:2d:a6:f5:58:28:e4:a7:32:ca:c4:
84:51:96:49:29:28:a2:4b:7f:f6:27:31:a0:cd:72:1f:4d:e9:
61:39:1b:52:da:a3:64:a9:c1:76:cf:0a:63:9f:06:e9:e0:c0:
5b:31:38:f7:cb:93:ca:42:47:fb:29:8c:66:ae:71:02:af:f3:
3d:28:ff:ae:01:bf:5a:10:e4:82:ea:2d:79:50:81:1b:cf:f7:
04:24:03:43:99:34:43:5c:b7:bf:8d:b1:bf:1f:8c:09:e2:2e:
df:6d:78:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:41:55 2026 by rpki-client