
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/32023f4f-c143-3700-8b75-d46bae918f26.roa
File: 32023f4f-c143-3700-8b75-d46bae918f26.roa (raw, json)
Hash identifier: pSuyfrAt7FaV342g0EWm6NXT9I8z25Pb+pXThBUDYvU=
Subject key identifier: 36:3A:A3:83:F6:C8:EF:9B:9B:1D:B3:46:67:09:28:29:9D:37:B1:E5
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDD3BCA349163C7AA98C8A0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/32023f4f-c143-3700-8b75-d46bae918f26.roa
Signing time: Tue 07 Apr 2026 16:30:27 +0000
ROA not before: Tue 07 Apr 2026 16:30:27 +0000
ROA not after: Mon 06 Jul 2026 16:30:27 +0000
asID: 18779
IP address blocks: 172.252.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:dd:3b:ca:34:91:63:c7:aa:98:c8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:30:27 2026 GMT
Not After : Jul 6 16:30:27 2026 GMT
Subject: CN=6176013e-1aa5-4844-9bf4-8d665df95e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:e9:f2:bd:bd:8b:ab:61:07:b4:38:9a:fd:
27:2c:c8:74:96:77:7f:e7:2a:a9:c1:fe:fd:71:bc:
21:73:ad:6a:14:65:1d:ca:14:41:1c:73:e8:f7:06:
41:00:6f:7a:cf:d9:c3:2b:a4:21:6f:14:ce:7f:ed:
8e:3d:e6:f7:52:61:7b:0b:5a:2e:cb:92:4f:07:50:
31:89:80:34:65:4a:09:6b:0a:01:36:d9:97:a4:05:
26:c8:a7:29:c0:ba:9d:b8:6c:4a:03:40:2b:84:24:
33:d9:86:ca:a3:70:9b:54:51:30:7a:9e:80:07:e2:
d7:16:6e:db:6b:c5:22:42:bc:86:68:41:10:a5:1a:
49:12:f4:56:02:21:bb:b2:6e:a7:49:59:d3:23:53:
08:c7:c9:71:dc:1e:6b:b3:89:78:40:15:cc:b6:cc:
2d:0d:0a:fb:8e:2b:ca:95:6b:e3:0b:c3:7a:a1:08:
80:f9:c0:d5:3b:d3:7a:bf:89:bb:ee:dc:eb:45:6a:
45:32:b6:43:ce:a6:9f:70:96:39:6c:9c:72:4e:93:
67:27:ab:c2:86:c3:01:83:13:46:0c:b3:95:e4:af:
22:25:fc:75:af:ae:cc:e2:af:87:1a:73:c9:c6:a0:
96:79:77:2d:28:01:28:87:36:5e:5f:51:c2:c2:17:
3a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3A:A3:83:F6:C8:EF:9B:9B:1D:B3:46:67:09:28:29:9D:37:B1:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/32023f4f-c143-3700-8b75-d46bae918f26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:4c:38:9b:d4:0c:05:f1:4e:5e:9b:8e:f6:78:7a:a8:6a:a1:
39:6b:82:08:d4:47:ae:70:18:f2:bf:9f:1d:5e:15:e9:54:e8:
26:09:b9:e1:f7:50:80:db:bb:a1:7e:8d:44:74:b9:02:bc:7d:
f3:3d:e1:38:d9:2f:ba:d4:ab:74:cd:3f:86:43:80:3d:ad:de:
7c:30:cf:b3:a2:c1:83:2d:cc:e2:d0:8c:42:ba:75:57:86:5d:
87:94:6b:02:a5:e9:7e:c4:8d:9c:cd:bf:a4:85:74:04:4e:fc:
b0:fe:59:bd:6d:4c:1b:75:6b:e9:9a:9d:2a:0f:ba:41:22:77:
13:31:1f:c3:cb:13:5c:bb:7a:45:03:be:f3:da:0b:2b:41:7c:
dd:dd:8c:11:0f:6e:70:0a:5d:e3:7f:f7:17:75:29:b4:0f:43:
d8:aa:0c:36:24:ae:80:83:2f:14:73:d7:16:a3:06:33:b6:db:
54:b7:4a:fa:0c:38:cf:71:f2:49:bb:15:e0:bf:2f:41:62:a5:
46:a5:65:3f:77:e3:1b:bd:78:75:99:84:83:43:ed:ed:13:33:
d5:ce:8b:dd:9b:0e:e9:08:63:1c:5f:52:0c:b4:85:f9:bf:59:
40:85:37:06:5d:28:f2:31:6d:83:ed:ce:9f:1e:a0:4f:85:1c:
ea:f3:10:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:26 2026 by rpki-client