
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bf432dab-122e-3522-abf9-9fc6d25b3da0.roa
File: bf432dab-122e-3522-abf9-9fc6d25b3da0.roa (raw, json)
Hash identifier: I0qX6bpHvZoz1unLLG8azeaK9OeriF9dc/JpAP8snJY=
Subject key identifier: 39:38:F0:3A:0E:E6:51:CE:C3:67:3D:44:8B:AE:5B:6A:32:74:01:BD
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDD50FB0CA91663D8866B00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bf432dab-122e-3522-abf9-9fc6d25b3da0.roa
Signing time: Tue 07 Apr 2026 16:30:37 +0000
ROA not before: Tue 07 Apr 2026 16:30:37 +0000
ROA not after: Mon 06 Jul 2026 16:30:37 +0000
asID: 398781
IP address blocks: 172.252.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:dd:50:fb:0c:a9:16:63:d8:86:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:30:37 2026 GMT
Not After : Jul 6 16:30:37 2026 GMT
Subject: CN=eab0c502-85ec-4b17-a306-2b1f2989086d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:89:ca:a5:bb:65:af:4a:c0:4d:e8:61:bc:3e:
fa:14:58:74:5c:e7:de:76:2f:94:8f:c3:02:76:40:
70:c4:fb:9e:f7:a9:db:88:db:db:a1:f9:c0:1a:9a:
ec:6b:41:20:36:a8:19:8e:2f:3f:75:96:ed:c7:90:
5b:e3:26:f9:6b:32:86:86:73:d4:68:02:1b:84:b5:
9d:0e:06:f7:59:ee:89:e4:d9:8b:40:51:cb:11:60:
6b:11:cb:49:47:2b:82:29:d3:2f:b9:21:02:14:a9:
e3:f9:4c:56:23:c5:16:ca:b5:d6:b2:cc:64:56:de:
5e:c5:7c:26:22:e5:3a:ef:3f:64:3b:9c:65:f2:bf:
e0:b6:4f:af:59:66:0a:04:ea:34:a7:3d:c7:65:28:
ae:71:94:4a:ca:22:25:48:cb:8c:d5:9f:91:03:7f:
79:b1:ce:67:8a:be:64:b9:e5:84:0c:1e:7b:c8:74:
65:18:c3:7d:77:d1:d5:74:8e:38:f0:94:2b:73:dc:
bd:d3:6a:40:ea:f4:03:cd:00:7e:da:7b:03:34:9a:
b6:19:f8:c5:a7:1f:7c:5e:eb:f8:7d:bf:49:ee:7d:
76:d7:a2:fc:00:b5:af:8a:9a:bf:22:e0:76:9f:87:
62:e3:11:d5:d2:6a:95:c8:3b:10:cc:b0:3f:47:02:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:38:F0:3A:0E:E6:51:CE:C3:67:3D:44:8B:AE:5B:6A:32:74:01:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bf432dab-122e-3522-abf9-9fc6d25b3da0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:9a:e4:f5:3f:a7:50:8b:7e:ff:97:76:7a:10:b0:28:bb:f2:
a0:6c:03:a8:d1:8a:3c:1d:a8:e3:29:de:83:53:5e:0b:7f:57:
b6:1b:a7:bc:8c:5a:c4:38:b7:62:8f:f6:2e:d0:24:7c:53:3a:
98:b3:8b:dd:b3:75:0a:5a:7a:6f:7e:a7:ca:77:e3:1a:44:9f:
9e:b3:b0:4d:a0:42:f2:3a:6e:81:8e:a4:0a:0c:84:ba:61:e7:
93:74:33:0c:2f:37:55:83:ca:49:7f:f2:3d:4d:62:34:66:63:
ab:5d:35:ea:b5:60:a2:ee:ca:bf:29:65:ee:05:7d:1f:e9:ec:
c9:80:da:4a:68:0d:7b:92:32:24:44:31:6c:5e:3e:d0:70:18:
c7:2b:29:a0:e0:c2:05:58:27:2f:b6:6f:19:0f:6e:98:83:6a:
fc:66:1c:5f:56:eb:db:1e:a7:bf:db:17:2f:b7:69:17:f6:c5:
7e:b0:f9:da:cd:f8:b0:56:a5:0c:bc:a6:46:24:c9:0b:b1:b2:
16:04:16:12:dd:1f:1c:49:fa:6e:1d:51:b4:bc:14:5b:82:38:
ab:af:12:62:81:d6:82:82:c6:b4:bc:a8:f6:75:6b:3b:fd:d0:
cd:5d:11:e2:ed:3c:d2:d7:42:89:85:67:b2:87:33:d8:3f:d7:
e1:34:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:41:07 2026 by rpki-client