
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fabe973d-e8cb-3e1e-8ffb-8c81eb1ac80d.roa
File: fabe973d-e8cb-3e1e-8ffb-8c81eb1ac80d.roa (raw, json)
Hash identifier: m3yqtnNrls3IWzcgv/TBiwEMHCh0AFbRs6hcf3yWmR8=
Subject key identifier: C5:F2:B4:2C:38:0D:ED:89:58:43:E8:21:BA:33:0A:AB:70:A6:50:D7
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584D6DDD3D39C4BCDD4C248A5E40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fabe973d-e8cb-3e1e-8ffb-8c81eb1ac80d.roa
Signing time: Tue 07 Apr 2026 16:30:27 +0000
ROA not before: Tue 07 Apr 2026 16:30:27 +0000
ROA not after: Mon 06 Jul 2026 16:30:27 +0000
asID: 398781
IP address blocks: 172.252.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:dd:3d:39:c4:bc:dd:4c:24:8a:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Apr 7 16:30:27 2026 GMT
Not After : Jul 6 16:30:27 2026 GMT
Subject: CN=f070bec8-d547-47d9-9d8f-52cda5b3b20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:ec:9c:d4:aa:ec:19:7a:c2:f1:09:80:0a:
e6:01:ce:34:35:95:16:1a:4a:10:81:b1:5b:a4:57:
50:98:07:a3:60:8b:2d:ef:6d:22:99:d7:75:4b:c0:
2e:c3:14:5a:50:48:04:43:d7:0b:7d:63:02:92:a8:
f2:21:32:97:3e:d4:e9:6e:ce:38:c2:97:aa:0f:06:
25:38:4f:b7:06:cb:4a:56:f3:d3:ed:52:7f:8c:fc:
01:f6:bd:c1:d4:45:43:36:a4:6e:57:a3:d5:36:04:
e9:b8:3c:fa:bb:a5:15:41:6a:aa:84:2e:73:20:91:
42:f3:75:6a:59:71:c6:7a:ad:66:ad:af:be:dc:9c:
42:83:a4:d1:98:44:25:d6:b5:3d:59:e1:ed:83:2f:
81:e6:78:9b:79:da:9e:bb:be:b4:b3:be:a1:1b:32:
eb:37:ea:1b:7f:24:5a:e5:59:11:fe:bf:71:9a:0e:
90:98:27:51:35:70:50:d7:6b:4c:13:67:2e:c2:84:
59:fd:3d:4f:26:ab:db:34:1f:36:14:14:c7:9f:4d:
59:3e:22:33:ba:ef:f6:05:64:51:27:1e:26:d5:a9:
41:46:a6:9d:40:49:69:2d:e3:3a:1a:e9:82:74:bd:
33:52:4e:d8:8f:d7:44:06:1e:fe:aa:2f:98:62:52:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F2:B4:2C:38:0D:ED:89:58:43:E8:21:BA:33:0A:AB:70:A6:50:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fabe973d-e8cb-3e1e-8ffb-8c81eb1ac80d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:94:70:6b:8e:94:e5:5a:6c:9c:59:5f:6f:41:5c:df:ce:47:
91:36:21:03:21:a2:3f:e1:8b:d7:b4:4a:68:f8:84:2d:74:00:
e9:24:3d:0f:6d:a9:72:a1:13:2f:e1:29:d2:0b:5d:36:26:b2:
83:10:76:01:2d:48:9b:e0:f5:85:06:b4:24:23:9c:79:c6:65:
fb:62:cd:e5:b4:35:c1:fc:f4:bc:24:6e:ef:a9:6c:13:eb:0c:
c8:ab:48:21:31:12:02:a5:02:5c:6b:3d:d9:97:ce:f6:28:22:
45:4c:4a:4b:f6:4c:76:37:53:0c:90:8f:9e:4d:b0:3a:27:90:
9d:4b:b3:5b:6f:5b:47:a3:78:a7:35:36:cf:07:2f:b8:e8:e2:
71:4c:29:98:dd:32:14:1a:93:e7:d7:65:31:12:01:fc:a2:c4:
7a:a4:6f:c7:60:2f:d7:fe:b8:81:ef:f2:c7:00:61:9d:7f:3e:
91:87:bf:5a:aa:78:95:61:59:61:b0:e9:74:13:d5:f9:55:14:
f4:12:c4:cc:a6:12:ac:6e:c9:18:eb:f2:c1:b7:45:7d:dd:d2:
67:39:65:3e:d9:e4:ad:f9:41:97:e3:3d:41:cb:99:9c:73:0a:
28:33:31:79:f2:18:bc:a6:9f:e4:e9:09:d3:4c:d5:0d:a4:f3:
a4:c3:8c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:09 2026 by rpki-client