
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/814c841e-af04-38ed-aeb1-da382f4e9896.roa
File: 814c841e-af04-38ed-aeb1-da382f4e9896.roa (raw, json)
Hash identifier: ey0kMjAr31Ue1ELGSOoB1iWy0NxUF39nVeyktmtHY/c=
Subject key identifier: E4:C3:70:DB:62:D8:79:30:48:2B:26:BD:36:93:8D:4F:DE:F7:FF:FF
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584F497375FE00256DD72273E180
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/814c841e-af04-38ed-aeb1-da382f4e9896.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 212238
IP address blocks: 104.253.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:75:fe:00:25:6d:d7:22:73:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=78ef7f89-5492-416f-8fcb-29f84e26dba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:d5:e5:4e:7c:31:5d:41:a0:ef:d3:ac:54:
2c:e3:dd:97:8b:fa:c2:00:30:de:0c:80:c9:3a:d9:
0b:43:10:ae:ec:69:b8:95:e7:24:bf:c8:2d:06:42:
01:9a:bc:fa:0c:12:80:e8:bb:41:eb:41:0a:67:e0:
55:1b:21:91:44:da:ca:c7:80:c1:72:a2:b2:6f:4f:
09:c7:69:80:5f:98:83:b6:80:ab:f5:bf:4f:8f:ea:
dc:9e:ba:2d:ab:19:55:dd:95:26:85:ea:75:05:27:
55:c9:36:9b:99:b9:df:65:be:52:61:f3:3e:36:4e:
c7:72:23:59:32:04:e5:3e:4a:4a:a3:39:e3:91:9c:
94:bb:74:32:f3:9b:2d:8b:75:c2:be:21:6b:ea:52:
8c:cb:2f:ea:11:b7:a3:11:c9:ba:da:d1:14:99:ef:
62:7b:9e:76:ea:b2:c7:4d:22:cb:28:01:02:ae:3c:
50:a7:57:39:c4:1b:f0:7b:dd:c1:52:38:d2:59:76:
24:1c:65:92:3f:8f:5a:76:62:27:42:1a:52:e1:86:
86:64:13:8e:d7:a3:35:0e:d9:6c:59:ea:15:f5:26:
af:69:69:c9:1b:e5:c0:34:d4:6b:69:38:11:8c:d8:
30:d6:df:21:14:64:ee:f1:9b:5d:93:b5:f4:f6:86:
04:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C3:70:DB:62:D8:79:30:48:2B:26:BD:36:93:8D:4F:DE:F7:FF:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/814c841e-af04-38ed-aeb1-da382f4e9896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:06:9b:40:60:cb:d2:f5:a9:e0:61:30:a0:90:89:be:df:c8:
11:7b:61:3d:13:e5:f0:af:b0:2f:37:a5:6b:08:02:29:77:63:
fd:94:38:9c:5a:3f:8b:84:0b:d8:fe:ac:1c:87:04:99:b1:9a:
9d:aa:1f:4e:88:a2:27:85:51:d4:2f:3a:51:36:2b:12:eb:36:
77:4f:71:54:1c:29:5a:64:f1:18:0a:a3:6f:2c:3f:06:a5:42:
ac:f3:df:75:3c:79:72:3d:93:6d:52:49:99:f5:6f:e0:6b:1f:
20:db:18:c5:5f:ce:15:ac:f3:c3:5c:cf:56:5c:06:08:bc:14:
e3:9e:a1:28:e4:5d:09:9b:81:73:59:c2:a8:e8:9a:b4:45:23:
a0:f9:e8:18:01:43:61:fa:ba:5d:0b:5a:15:57:78:9c:a0:85:
4a:8d:9b:59:bf:03:ed:5e:d6:42:ff:2f:ff:af:04:c6:b3:a7:
2c:88:57:73:7f:a1:96:36:c7:8c:5d:b3:e7:49:6f:7a:0b:c4:
c1:82:4a:77:f1:0b:76:67:c4:d6:45:7d:41:76:e9:60:59:00:
8e:58:88:dd:35:cb:c2:02:fb:1b:f5:c0:5b:07:70:38:6e:45:
f6:f6:2e:91:88:da:a8:f8:18:92:27:0c:d3:cd:92:00:85:7a:
7e:ef:fc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:18:21 2026 by rpki-client