
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/875aaf5a-4d4d-3e9f-9542-4861e3bcde5f.roa
File: 875aaf5a-4d4d-3e9f-9542-4861e3bcde5f.roa (raw, json)
Hash identifier: OcWcDjSMa6fewDkhMLjbzDgA6z1Xpz9TytxGgtxtuo4=
Subject key identifier: 67:B9:F5:EB:29:47:9E:B4:7C:DF:87:5A:9B:05:6D:36:2A:14:19:A9
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDCFDE2FAD9A6782CDA37C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/875aaf5a-4d4d-3e9f-9542-4861e3bcde5f.roa
Signing time: Tue 07 Apr 2026 16:29:57 +0000
ROA not before: Tue 07 Apr 2026 16:29:57 +0000
ROA not after: Mon 06 Jul 2026 16:29:57 +0000
asID: 59253
IP address blocks: 172.252.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:dc:fd:e2:fa:d9:a6:78:2c:da:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:29:57 2026 GMT
Not After : Jul 6 16:29:57 2026 GMT
Subject: CN=ab70b9c7-a65d-4fe3-90a7-db35a0109c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:a2:0f:0f:68:b7:58:b3:4c:da:c6:20:87:
bf:90:0b:87:70:4b:d4:74:8f:49:e7:ac:b7:c0:6b:
7f:f6:15:80:fc:62:48:33:db:3e:3f:6f:32:3b:4d:
e6:eb:ff:a1:48:45:61:99:e0:5f:0c:22:fa:a3:cb:
e3:37:69:65:31:aa:8d:c6:73:ff:0a:68:f0:05:a6:
6a:09:b8:3d:b2:d8:10:bb:c8:8c:a6:43:32:fa:10:
6d:4c:48:73:ae:ce:a3:f1:c1:45:ce:ce:c0:12:0c:
07:bf:5e:22:4e:83:fa:fb:9a:76:b8:50:9e:06:37:
f8:c1:31:e7:66:b6:ab:2e:3e:0a:27:4b:e1:9b:3f:
6b:03:56:db:8c:df:69:c9:ad:93:5f:2e:37:d5:32:
e1:d1:be:be:bf:61:2b:f0:23:ec:d3:f6:ac:f9:1a:
80:75:62:db:bd:8a:31:ad:fb:2d:b0:99:0f:1c:21:
bf:27:26:34:36:88:87:99:47:84:8a:a0:05:84:da:
2c:42:ec:ac:4a:95:69:da:99:fd:3d:0e:a3:19:26:
aa:2c:3e:2d:8f:6c:78:03:3f:9c:b3:f6:5e:46:92:
66:01:a1:1c:cb:f4:0b:aa:02:c4:ea:1e:fa:4c:4f:
73:e1:2e:21:68:35:cd:80:53:61:18:c8:74:f8:00:
cb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B9:F5:EB:29:47:9E:B4:7C:DF:87:5A:9B:05:6D:36:2A:14:19:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/875aaf5a-4d4d-3e9f-9542-4861e3bcde5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:9a:40:a4:31:e8:a0:bb:b3:4d:21:c9:ca:39:53:e1:f9:de:
c5:48:2c:69:c9:d3:5a:4e:6c:f6:ba:6f:13:93:f9:04:83:b6:
2c:3e:b5:b9:49:17:68:60:1d:9f:ec:b8:f8:30:db:56:6c:cf:
c6:7b:a5:37:07:17:a7:bb:8e:05:71:eb:e8:15:a1:c2:a4:27:
8f:7a:d9:35:5f:ec:5e:e8:c8:0d:80:08:77:b1:69:94:e2:2b:
70:45:96:af:ce:7d:74:0c:fb:22:75:cf:71:dd:ac:e5:b9:1a:
34:35:9b:b0:39:3e:55:f1:3d:c2:bb:3c:79:cb:e9:e4:fe:67:
98:8c:c5:49:df:0c:77:2e:28:f2:6e:d8:d2:a0:01:96:e3:7d:
ba:b9:db:09:bf:a5:46:3c:81:a2:ab:f6:9b:b7:31:9a:61:20:
c3:9d:66:64:ec:04:85:23:4b:65:e5:d8:18:4b:ca:10:8a:37:
82:2a:43:36:c0:c7:42:c9:5e:81:6b:b9:ec:19:b8:0f:49:12:
a8:91:56:d0:86:18:72:a2:e7:5b:be:90:df:25:6a:d6:31:3b:
82:91:97:48:99:1f:a3:4f:b7:f8:c8:3c:1b:ba:c6:dd:f7:6d:
fd:44:6f:3e:68:75:19:40:c1:c1:27:49:f6:48:54:1a:b1:89:
9e:fa:df:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:34 2026 by rpki-client