
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/aa19eea1-48d0-3e65-81d4-1f2fbf9021ae.roa
File: aa19eea1-48d0-3e65-81d4-1f2fbf9021ae.roa (raw, json)
Hash identifier: XGbAEclepDEqc7TLIwSFKgknW8EmHkEw8/gYbi0P/DM=
Subject key identifier: 51:DB:91:A5:2C:3B:4F:DA:6A:DD:2C:81:34:40:CB:87:D3:24:A1:72
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDD1053A0A7E73DCB164E80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/aa19eea1-48d0-3e65-81d4-1f2fbf9021ae.roa
Signing time: Tue 07 Apr 2026 16:30:06 +0000
ROA not before: Tue 07 Apr 2026 16:30:06 +0000
ROA not after: Mon 06 Jul 2026 16:30:06 +0000
asID: 18779
IP address blocks: 172.252.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:dd:10:53:a0:a7:e7:3d:cb:16:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:30:06 2026 GMT
Not After : Jul 6 16:30:06 2026 GMT
Subject: CN=939f128b-961b-4000-981c-ea448abb1e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7f:64:d8:79:ec:79:19:d0:b8:2a:15:cc:a2:
da:2f:44:bc:91:17:9a:5b:dd:ee:ca:f4:2a:d3:16:
1b:49:f8:35:82:8b:fe:24:d9:97:eb:81:80:69:9c:
42:96:71:d0:0e:41:13:8d:73:b0:4e:f3:91:07:e8:
c1:25:f9:2b:41:7e:a4:c5:5e:56:e2:e2:9e:49:8b:
fb:12:83:ea:21:81:4a:99:09:c6:85:81:6c:60:8a:
31:6b:41:f6:f8:3f:86:67:56:77:9c:21:7f:e3:52:
8f:61:dd:a2:42:cd:7e:1e:3e:af:98:c2:93:db:09:
0a:78:cb:f6:17:04:e2:7d:cc:31:30:4e:af:4a:f9:
43:a5:34:55:c1:05:c4:cb:4a:ae:6d:6a:01:5a:ee:
b1:49:18:e0:09:6f:9f:d9:b6:b6:f5:f0:72:8b:22:
e0:0a:ff:7f:79:d2:f6:5c:4c:c4:9a:63:0f:e1:b8:
d7:a9:b6:ca:a2:3a:c9:dc:09:fa:37:c9:dc:61:b6:
09:07:10:a3:42:cf:a8:ca:53:e6:a7:47:f4:6d:21:
1f:69:c9:fe:cc:71:e8:63:f7:08:41:40:7d:20:23:
33:81:c2:f7:b8:bb:1b:7a:f4:1c:38:f5:7f:65:a4:
ef:cc:f9:b8:55:6b:cc:7c:ea:3f:fb:0d:e0:f4:81:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DB:91:A5:2C:3B:4F:DA:6A:DD:2C:81:34:40:CB:87:D3:24:A1:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/aa19eea1-48d0-3e65-81d4-1f2fbf9021ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:2b:93:b0:06:45:60:01:e9:cb:d0:5a:f7:06:76:09:4c:02:
88:a5:71:9d:05:55:b6:75:f8:09:4d:1e:ce:f3:bc:c0:44:5b:
ba:fc:9d:7d:75:6d:4b:c3:53:70:9a:9b:6b:52:74:3d:af:fd:
d5:5d:61:8b:65:3e:ba:49:fb:b3:1a:43:c2:96:70:7f:d2:4e:
59:77:18:08:89:06:41:ff:a0:b6:80:c2:8c:dc:76:b5:bc:d4:
fa:c6:f9:9f:9d:c9:da:22:34:1f:bc:51:07:ad:0f:3e:51:1c:
7a:07:90:96:d5:fd:bf:19:84:4d:4b:8d:12:57:90:32:a5:73:
e9:0d:97:28:b1:63:aa:3d:52:17:16:78:86:86:7c:f1:f3:1a:
35:29:ca:88:b9:5b:4e:48:07:29:ec:7c:cc:ab:2a:af:2d:e5:
f2:3c:89:a9:43:ac:65:c1:18:33:db:cc:d6:b9:cd:25:e0:1a:
83:79:cc:03:41:91:6a:bd:47:91:62:cb:c1:f4:2f:73:3f:62:
54:0a:90:62:0e:b1:c0:0e:f4:33:b3:11:03:4f:72:b0:03:53:
6e:79:e0:98:75:eb:69:2b:91:c6:a9:18:04:fb:03:7a:da:87:
5e:b4:b6:67:65:c8:b3:e2:23:1e:5f:c2:cf:6e:b8:1a:34:58:
11:3b:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:31 2026 by rpki-client