
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b1f53ea0-4a28-3fd0-b880-90a8160a1438.roa
File: b1f53ea0-4a28-3fd0-b880-90a8160a1438.roa (raw, json)
Hash identifier: bdxGkknkA37wbSvwwU/2YGoEK2enqflWsOvxDv1GuV8=
Subject key identifier: 28:0C:0B:B0:28:4A:1B:14:AD:44:AE:16:ED:AD:81:0F:A8:98:28:5B
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDCFE3D84613CE4A7D399C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b1f53ea0-4a28-3fd0-b880-90a8160a1438.roa
Signing time: Tue 07 Apr 2026 16:29:58 +0000
ROA not before: Tue 07 Apr 2026 16:29:58 +0000
ROA not after: Mon 06 Jul 2026 16:29:58 +0000
asID: 18779
IP address blocks: 172.252.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:dc:fe:3d:84:61:3c:e4:a7:d3:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:29:58 2026 GMT
Not After : Jul 6 16:29:58 2026 GMT
Subject: CN=d965da5d-18ea-4d58-9ec6-ef56c63968fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:06:c8:d8:2b:f5:34:08:e3:c8:e4:ff:ca:
60:bc:7f:cb:f4:f7:41:09:79:4c:65:74:07:0a:78:
e9:1b:b5:27:07:e3:2f:0d:cd:89:79:a4:86:fc:d9:
5b:72:78:09:6b:a6:76:92:8f:4a:84:16:bf:38:09:
64:39:67:6a:06:b4:e2:cf:04:30:2e:ff:03:b7:5d:
b1:09:7d:d6:b4:03:03:36:2f:b7:94:8a:92:37:86:
9a:56:c3:d2:5c:7d:c5:80:a9:4b:3c:67:a1:30:78:
dc:e6:2c:39:3f:1d:da:72:02:f5:c6:82:26:b2:26:
cb:ed:98:6d:f3:24:c2:4b:5c:48:35:4b:0c:a4:95:
0a:c9:84:c0:4e:ba:9d:48:2d:de:15:d3:3a:7f:b9:
70:43:61:7e:18:f0:90:64:38:96:fd:ae:e2:d0:3b:
9d:18:f7:e4:22:35:ff:90:1e:7d:de:2e:87:da:57:
28:4a:72:8d:e3:3d:d2:04:10:ea:31:82:ba:9e:d3:
41:cc:e9:cd:94:18:41:6b:17:09:cf:dc:1c:79:c2:
23:66:49:38:af:90:64:0d:31:47:98:6d:4e:f1:3c:
bf:fd:e8:2e:a9:e7:20:f6:7c:64:e8:d4:f7:b1:3a:
7d:a9:3a:12:72:49:54:2c:4d:e9:52:f8:4a:3a:36:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0C:0B:B0:28:4A:1B:14:AD:44:AE:16:ED:AD:81:0F:A8:98:28:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b1f53ea0-4a28-3fd0-b880-90a8160a1438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:c7:50:12:39:02:f8:d7:8c:28:6c:2c:4d:02:2c:b3:71:ad:
f6:79:16:76:ec:f8:b8:60:28:de:a0:ef:e3:c8:ee:c1:84:90:
c9:c9:91:bc:99:8e:21:0c:1f:1e:ab:ea:c6:b6:88:46:ab:b3:
80:6e:39:f3:25:54:f5:af:0a:a7:65:5e:89:c8:1f:2b:b8:56:
5f:b9:42:df:1a:b5:97:d0:66:33:52:ac:09:bb:f5:65:e3:ca:
0c:ce:0a:4f:68:7a:85:ec:78:2f:da:70:13:22:c0:e0:75:b5:
5f:16:38:37:93:6c:ef:5a:d2:37:8b:c1:44:8c:c0:dc:c8:cb:
ee:20:d9:2b:90:f5:ea:0d:a7:c7:0d:2a:df:11:73:72:0a:a1:
99:05:2f:db:57:ec:11:54:99:9a:2b:db:f4:c2:6f:85:a4:c4:
a8:1d:fd:51:30:36:e6:af:1e:75:2d:64:e3:a6:5d:cc:6f:b2:
6a:a5:6d:c1:10:ea:37:16:04:22:46:53:9f:3e:1e:99:d2:7e:
6c:3e:84:7e:88:c8:bf:c4:6f:d7:ca:45:34:b5:22:be:fb:de:
da:c9:b6:51:56:70:d8:98:74:ae:97:87:de:60:3b:e5:27:53:
22:66:3e:d1:a4:f3:89:56:d5:12:b6:2a:47:1a:e4:7a:30:28:
05:18:c0:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3P49hGE85KfTmcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2Mjk1OFoXDTI2MDcwNjE2Mjk1OFowLzEtMCsGA1UEAxMk
ZDk2NWRhNWQtMThlYS00ZDU4LTllYzYtZWY1NmM2Mzk2OGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/MGyNgr9TQI48jk/8pgvH/L9PdBCXlMZXQH
CnjpG7UnB+MvDc2JeaSG/NlbcngJa6Z2ko9KhBa/OAlkOWdqBrTizwQwLv8Dt12x
CX3WtAMDNi+3lIqSN4aaVsPSXH3FgKlLPGehMHjc5iw5Px3acgL1xoImsibL7Zht
8yTCS1xINUsMpJUKyYTATrqdSC3eFdM6f7lwQ2F+GPCQZDiW/a7i0DudGPfkIjX/
kB593i6H2lcoSnKN4z3SBBDqMYK6ntNBzOnNlBhBaxcJz9wcecIjZkk4r5BkDTFH
mG1O8Ty//eguqecg9nxk6NT3sTp9qToScklULE3pUvhKOjajPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCgMC7AoShsUrUSuFu2tgQ+omChbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYjFmNTNlYTAtNGEyOC0z
ZmQwLWI4ODAtOTBhODE2MGExNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnHUBI5AvjXjChsLE0CLLNxrfZ5Fnbs+LhgKN6g7+PI7sGEkMnJkbyZ
jiEMHx6r6sa2iEars4BuOfMlVPWvCqdlXonIHyu4Vl+5Qt8atZfQZjNSrAm79WXj
ygzOCk9oeoXseC/acBMiwOB1tV8WODeTbO9a0jeLwUSMwNzIy+4g2SuQ9eoNp8cN
Kt8Rc3IKoZkFL9tX7BFUmZor2/TCb4WkxKgd/VEwNuavHnUtZOOmXcxvsmqlbcEQ
6jcWBCJGU58+HpnSfmw+hH6IyL/Eb9fKRTS1Ir773trJtlFWcNiYdK6Xh95gO+Un
UyJmPtGk84lW1RK2Kkca5HowKAUYwP8=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:43:48 2026 by rpki-client