
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fcf8d665-52d0-3800-957f-4d53a0582200.roa
File: fcf8d665-52d0-3800-957f-4d53a0582200.roa (raw, json)
Hash identifier: HLhSG3k6NhmzZp07XxtsS7Z5jYWto9GMcNhG6KBsPg4=
Subject key identifier: B2:1E:14:02:81:05:51:A5:7A:B4:DD:ED:7A:C8:F1:10:4B:ED:E0:35
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584F49735D1AACB5BF7B49F00580
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fcf8d665-52d0-3800-957f-4d53a0582200.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 9009
IP address blocks: 104.253.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:5d:1a:ac:b5:bf:7b:49:f0:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=24336c81-5297-43c0-9257-83f3d5dd2f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:00:37:15:f4:24:20:02:a1:53:02:a6:ce:f5:
cc:54:81:95:6a:66:da:50:fe:c2:0b:08:94:f5:12:
5b:b6:40:44:bb:b6:3d:cf:90:32:b5:58:90:67:96:
f2:86:c5:49:e5:bf:a5:8d:a5:2d:15:62:60:83:31:
53:a8:e4:8c:5d:02:bf:1f:7d:14:3f:da:c9:55:44:
6d:8a:9b:d8:d8:d1:e3:d3:34:c4:08:40:17:9b:d0:
f5:65:ee:70:c7:ed:51:6f:eb:ef:bb:84:7e:86:60:
5c:2a:c8:65:8a:dd:7c:0e:95:db:82:34:3c:11:49:
80:ac:24:b2:6a:df:9a:23:79:9a:4a:d2:6c:d6:e7:
b9:e7:b7:db:fd:24:7c:90:10:c2:fb:a2:14:ac:50:
cd:44:ea:30:be:3d:61:15:dd:5b:42:6b:8b:3a:29:
f4:f7:d9:37:84:b4:b4:6b:69:bd:e7:45:7e:96:37:
8d:92:00:1e:c2:91:29:66:ce:20:ff:44:10:51:70:
10:29:bc:5e:79:ec:46:5f:70:5c:63:2b:01:f8:97:
0d:d1:36:f9:15:54:9b:dd:1f:6a:04:85:73:1b:c7:
af:5a:25:ab:f7:d5:be:f0:dc:0f:e9:a1:32:a6:68:
45:20:be:de:36:ad:0f:03:18:9a:30:30:80:e5:da:
f3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1E:14:02:81:05:51:A5:7A:B4:DD:ED:7A:C8:F1:10:4B:ED:E0:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fcf8d665-52d0-3800-957f-4d53a0582200.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:d9:c3:da:63:97:9a:4e:64:40:4e:78:7e:0b:28:49:f0:8c:
a7:cb:b1:30:cb:fe:42:48:18:3a:1a:fa:46:1e:34:f3:f5:05:
6d:49:f4:94:0f:a4:69:ec:90:3a:e0:1e:83:7c:9d:f1:c0:73:
e9:77:1c:90:68:9b:f1:4d:a8:4d:28:79:ed:6e:fa:3d:f6:10:
c3:71:3a:51:c2:ee:15:a8:a3:b6:23:4d:83:4e:3b:0b:0d:5c:
e5:19:b8:b2:2d:92:62:18:c5:03:6b:b3:68:84:42:9c:c9:24:
79:0e:98:35:22:1f:91:91:80:c9:dc:c6:1c:b3:03:8a:74:df:
5c:e4:3c:e9:f7:91:d5:23:57:3f:e2:09:cc:ce:fb:47:2b:52:
73:5d:84:4c:e6:03:f1:ec:1f:57:ed:e9:02:3f:df:9c:c0:2a:
9d:0f:13:30:4c:61:87:f0:e1:4b:59:cd:e8:d9:f2:a3:a0:12:
0a:0e:53:18:32:09:4e:29:df:fd:9e:ef:12:84:0f:73:5e:63:
9f:01:6b:50:68:12:1d:28:e1:ff:10:16:54:17:88:8a:80:34:
42:29:53:b4:d8:d6:38:c8:85:e1:9d:11:c1:91:38:b3:45:9c:
a8:5b:95:4a:dc:e2:fb:e5:84:4d:35:52:d3:7e:ed:a3:01:9e:
5b:d7:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:06:27 2026 by rpki-client