
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/20e221c6-7482-3eb3-b592-fedf1f25b398.roa
File: 20e221c6-7482-3eb3-b592-fedf1f25b398.roa (raw, json)
Hash identifier: NKcwCLX9oVU34JKOhOf33GVTE+5MoMGBK9uZE8hNy8s=
Subject key identifier: DC:FB:C5:4D:50:BE:4C:E2:5F:E6:C0:00:C2:F6:C3:16:61:EE:A7:68
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EF01CC8F09E4DA598D22A3D2A
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/20e221c6-7482-3eb3-b592-fedf1f25b398.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 206092
IP address blocks: 45.39.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:c8:f0:9e:4d:a5:98:d2:2a:3d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=46c6a8e3-ecdb-461f-97d5-e1596d93a6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:2e:97:8e:5d:40:97:a1:98:a2:d2:87:8d:
4d:e0:90:35:8e:ce:a0:06:e9:99:fe:4b:71:53:a1:
3c:8f:10:c2:3d:3d:f4:0b:4b:8a:92:5d:48:e3:47:
d6:df:2e:55:cb:e6:18:f6:18:0e:4f:0e:73:7b:71:
36:9b:1c:53:08:0f:66:e2:19:2e:59:18:8c:75:d2:
9e:f8:95:3b:59:5d:0d:24:c5:a4:43:6c:8d:8b:12:
d4:e6:db:67:17:c9:bd:86:f4:52:88:89:9f:23:3c:
88:7e:a7:3d:2f:6b:f3:7e:61:7a:45:30:91:4e:ef:
4a:c8:16:ba:b8:22:c7:b2:ae:b2:90:17:ad:b1:48:
b7:e9:80:0f:6b:dc:ef:c0:89:db:68:6f:4a:0b:06:
52:7a:16:96:43:32:37:d1:36:01:aa:8d:52:a8:69:
e2:c4:90:88:2f:17:53:cb:20:12:e4:15:32:58:0a:
5c:03:f0:b5:02:fc:e2:91:47:c3:70:b3:77:f4:c6:
01:2e:59:64:e8:f1:25:b8:1c:2e:2a:75:84:59:42:
b1:00:ed:4a:09:3c:2a:70:15:f5:19:3c:15:79:4d:
83:07:9c:36:ef:0f:88:3c:43:f9:b1:27:11:ea:e9:
09:48:b0:d5:45:73:6c:6a:c4:06:71:12:60:37:75:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:C5:4D:50:BE:4C:E2:5F:E6:C0:00:C2:F6:C3:16:61:EE:A7:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/20e221c6-7482-3eb3-b592-fedf1f25b398.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
45.39.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:3f:e7:4f:a6:a5:a3:dd:28:4e:09:94:a0:db:a1:10:36:96:
8b:1b:de:55:9e:f8:8b:69:35:bc:19:60:b1:af:3c:01:f8:1a:
0b:6d:6d:43:8d:7c:03:1f:61:b6:44:98:21:bc:b1:bd:5e:0c:
2f:d6:8e:15:c2:09:5d:35:f2:0f:3e:30:02:8a:bc:9f:ca:a1:
38:35:66:aa:2d:a5:a2:6e:54:46:1e:0a:d5:c2:a5:83:f9:c8:
ba:90:db:e5:ab:b5:ba:a1:88:aa:d1:8e:8c:a2:2c:91:3c:ef:
60:29:09:e0:76:7c:6f:51:bc:d9:ad:13:fd:ad:c5:d3:4b:af:
66:f4:5c:c2:a5:12:09:f3:ff:2f:81:58:f1:32:18:34:e9:37:
c7:aa:61:76:0f:60:0e:40:d5:1d:c9:1f:9c:f1:17:a6:f1:c3:
9f:94:4d:e8:89:46:a9:00:a9:3e:e3:42:33:c5:75:e7:78:af:
81:28:84:ca:74:c2:7c:b5:de:29:38:16:36:31:b7:98:41:e1:
c5:52:95:25:d6:a8:4d:47:4b:ce:e5:58:21:33:5b:c3:28:c4:
d8:b1:83:83:3a:e8:34:96:04:36:ea:05:97:3a:49:49:ac:65:
8e:63:7c:23:22:a8:d8:18:44:1c:81:5e:9a:0f:03:c5:b7:2c:
e0:ef:19:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:20:12 2026 by rpki-client