
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b31a2472-352f-3dd6-8634-1dee080fee4d.roa
File: b31a2472-352f-3dd6-8634-1dee080fee4d.roa (raw, json)
Hash identifier: 2ol20fsIwybSgaE7jbge8jZZyyWcYdvG838DoFtTqG0=
Subject key identifier: 70:66:5A:64:B3:DA:49:94:62:17:CF:69:29:1B:A3:25:8E:9E:1C:F6
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDCFE7925CBB18E00CC0F40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b31a2472-352f-3dd6-8634-1dee080fee4d.roa
Signing time: Tue 07 Apr 2026 16:29:58 +0000
ROA not before: Tue 07 Apr 2026 16:29:58 +0000
ROA not after: Mon 06 Jul 2026 16:29:58 +0000
asID: 18779
IP address blocks: 172.252.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:dc:fe:79:25:cb:b1:8e:00:cc:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:29:58 2026 GMT
Not After : Jul 6 16:29:58 2026 GMT
Subject: CN=0f0dacc6-409a-4e68-9fd4-411ddf5e46d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:f8:f7:c6:a1:ed:91:a2:30:c4:98:de:7a:
9b:38:98:3a:7f:4c:0f:23:53:85:db:89:2e:77:bd:
ad:be:26:01:7c:02:7b:4f:93:ac:e0:80:e2:58:e9:
e4:d0:0f:6c:1c:05:36:2c:df:8b:dd:34:77:d8:15:
bb:a3:e3:8e:ed:8a:b5:fb:3a:bb:12:df:77:67:06:
dd:11:a5:55:80:f5:f2:a0:29:8b:1e:40:22:75:e8:
8a:b2:01:34:a1:f7:c2:b0:40:71:cd:2e:37:09:9b:
5f:a5:41:8a:f6:98:5b:52:e7:da:a9:73:2c:ab:39:
33:cd:36:66:bf:a4:1e:7a:6e:1a:63:98:c5:02:7c:
ac:e0:cf:11:4a:5e:d1:e8:57:29:43:b4:4e:30:76:
95:09:09:a1:e1:cd:36:cd:48:2e:a6:76:34:f5:01:
2a:d2:27:b2:a5:79:ce:6e:d9:f0:c0:5b:74:4b:a1:
89:39:b1:cb:f1:81:92:59:d7:36:55:6c:09:df:93:
ee:1e:9a:61:c4:41:40:4d:5f:10:ff:b0:34:7a:e0:
ec:1d:6b:e5:b5:e5:b2:76:0d:50:7d:39:6e:cf:17:
e3:df:b4:cd:3f:39:75:70:de:1c:35:da:88:da:c8:
af:13:0d:23:46:1f:51:23:8e:0c:dc:8c:70:56:4e:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:5A:64:B3:DA:49:94:62:17:CF:69:29:1B:A3:25:8E:9E:1C:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b31a2472-352f-3dd6-8634-1dee080fee4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:6f:a2:db:2b:98:3b:68:ea:a8:3d:c7:fb:b0:8f:ee:4b:d3:
33:20:c1:3e:f7:50:43:62:ce:ae:60:b1:a3:0d:0a:21:8e:89:
3e:12:e0:db:93:b7:db:83:77:9b:20:7f:c5:90:6e:77:47:f0:
d1:8c:22:7c:b3:9c:da:28:c6:c2:09:c7:c7:54:88:09:7e:e4:
12:81:97:4b:47:c2:84:76:64:ab:af:dd:dc:8a:6a:58:60:3f:
f6:25:5f:61:db:52:85:a7:d5:6a:dd:66:02:45:06:57:a2:23:
f4:b6:72:e5:d1:97:a1:1b:ff:96:a6:6a:ba:67:0b:18:11:1e:
58:84:bf:a9:e8:0e:2f:92:08:f7:be:82:d5:51:3b:13:7d:d4:
2e:23:70:ae:0b:a5:82:c8:7e:33:86:1f:c3:aa:cb:9f:b2:eb:
6e:10:a4:20:da:6d:22:27:23:f6:20:7b:a1:3a:f1:f7:cd:19:
1c:9c:40:d2:04:de:ce:9a:ee:dc:6d:f8:ff:e2:8a:91:da:2b:
53:9e:0a:39:fe:69:ef:50:b9:ab:71:99:86:bb:96:30:71:e5:
e7:d7:f8:78:c2:38:f7:e1:7d:0e:f2:9f:60:e6:92:12:ab:94:
64:8d:a5:75:f1:67:fe:b3:7c:e0:b7:38:c7:ff:5e:97:c1:a8:
fb:9d:a6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:40:50 2026 by rpki-client