
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/afcab7cf-1ebf-31b0-b765-510dc1e7955e.roa
File: afcab7cf-1ebf-31b0-b765-510dc1e7955e.roa (raw, json)
Hash identifier: fWO8V7d06X00hPgOJS/jqgiqWD1XuPPTUWXLIP84VTU=
Subject key identifier: 76:0A:89:69:61:0F:62:BB:A1:97:71:C3:24:5A:AC:E2:12:19:86:1C
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584F498B2B97437CC1A966C78BE0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/afcab7cf-1ebf-31b0-b765-510dc1e7955e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 3561
IP address blocks: 172.252.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8b:2b:97:43:7c:c1:a9:66:c7:8b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=f00e3d4a-a904-4c53-ac70-cc6c2123f0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:ff:43:e5:fe:39:49:a0:d9:03:21:54:76:
e0:ed:23:a1:13:ee:e7:7d:a7:02:ba:9c:14:1c:61:
7b:9d:78:52:b6:75:0b:d4:6b:77:88:ff:a7:1a:36:
79:48:88:db:ff:af:b2:59:ac:2f:fd:d6:24:bf:37:
66:e0:d4:76:0b:fe:4c:00:b2:90:3a:1c:2d:2f:0f:
a3:d4:df:ab:fd:6a:c3:df:52:01:ef:7c:64:4c:df:
1a:3f:7d:c7:44:cd:1e:44:93:24:47:8d:24:31:c0:
ce:6e:2d:29:88:c1:3f:00:4a:dc:4a:70:3b:9e:16:
a8:e6:d5:df:34:58:d1:cb:04:93:c3:e7:a4:b1:df:
b0:b4:8f:58:8f:e7:56:3b:55:90:70:ca:cc:3c:92:
66:ec:14:e0:3f:01:cc:e3:b7:73:52:e7:2e:b6:d9:
57:f1:0a:ff:a4:18:10:9b:d5:30:2e:23:4e:4a:b2:
71:2e:03:8c:ab:a3:59:9f:4e:fe:8d:1c:e6:ca:44:
16:3f:f8:c2:ee:e8:e1:f5:07:d8:c2:0d:9c:86:6c:
44:26:5a:f8:5e:88:1f:a7:51:a5:a0:ec:6f:a5:0c:
65:1f:82:ca:6b:20:87:40:cb:79:aa:87:aa:e2:b3:
85:0c:69:a1:a2:fb:fa:f1:04:4c:34:ed:fb:d8:1f:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0A:89:69:61:0F:62:BB:A1:97:71:C3:24:5A:AC:E2:12:19:86:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/afcab7cf-1ebf-31b0-b765-510dc1e7955e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:a5:bb:a6:10:0a:b1:78:89:a9:36:6a:f1:0a:f9:bb:48:83:
3d:a4:ad:0f:58:8f:8c:2f:3c:88:a6:71:41:74:da:bf:21:2f:
f8:ef:93:12:41:6c:96:95:a5:87:f8:27:0a:6b:60:4c:30:21:
fb:f3:9e:ef:07:33:83:24:ec:46:84:17:09:60:62:6d:fe:6f:
8d:03:6c:29:4a:7c:8e:28:11:2b:06:52:3c:cb:94:c0:34:63:
40:a2:b3:6f:8f:5f:fc:52:1a:9f:8f:fd:be:e3:fa:e4:83:1b:
35:b3:45:0f:68:f9:e8:fc:61:aa:0f:84:de:31:9a:fd:c1:a8:
69:de:e0:f0:00:4f:75:56:93:53:9a:30:a0:89:f8:5b:9e:58:
e8:3d:87:9a:30:b4:43:c4:ca:fc:c6:f1:9c:a1:01:be:c0:8b:
bc:5d:5e:03:c8:64:fe:bc:9e:74:82:29:a1:ef:e6:44:34:ef:
2a:d3:ac:6d:62:fb:41:8c:44:29:4f:28:0d:f9:56:3a:6f:5f:
33:e3:ee:e2:17:e6:fc:3c:ca:b1:85:f3:e1:c0:8c:e8:5d:54:
99:f6:73:d3:38:cf:32:0a:22:97:72:4f:e4:0b:10:d3:60:e1:
9d:95:91:28:4d:f6:f9:01:a7:91:c6:b8:41:22:50:e5:64:56:
23:a7:d3:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiyuXQ3zBqWbHi+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjAwZTNkNGEtYTkwNC00YzUzLWFjNzAtY2M2YzIxMjNmMGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7f/Q+X+OUmg2QMhVHbg7SOhE+7nfacCupwU
HGF7nXhStnUL1Gt3iP+nGjZ5SIjb/6+yWawv/dYkvzdm4NR2C/5MALKQOhwtLw+j
1N+r/WrD31IB73xkTN8aP33HRM0eRJMkR40kMcDObi0piME/AErcSnA7nhao5tXf
NFjRywSTw+eksd+wtI9Yj+dWO1WQcMrMPJJm7BTgPwHM47dzUucuttlX8Qr/pBgQ
m9UwLiNOSrJxLgOMq6NZn07+jRzmykQWP/jC7ujh9QfYwg2chmxEJlr4Xogfp1Gl
oOxvpQxlH4LKayCHQMt5qoeq4rOFDGmhovv68QRMNO372B9g6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYKiWlhD2K7oZdxwyRarOISGYYcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYWZjYWI3Y2YtMWViZi0z
MWIwLWI3NjUtNTEwZGMxZTc5NTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2lu6YQCrF4iak2avEK+btIgz2krQ9Yj4wvPIimcUF02r8hL/jvkxJB
bJaVpYf4JwprYEwwIfvznu8HM4Mk7EaEFwlgYm3+b40DbClKfI4oESsGUjzLlMA0
Y0Cis2+PX/xSGp+P/b7j+uSDGzWzRQ9o+ej8YaoPhN4xmv3BqGne4PAAT3VWk1Oa
MKCJ+FueWOg9h5owtEPEyvzG8ZyhAb7Ai7xdXgPIZP68nnSCKaHv5kQ07yrTrG1i
+0GMRClPKA35VjpvXzPj7uIX5vw8yrGF8+HAjOhdVJn2c9M4zzIKIpdyT+QLENNg
4Z2VkShN9vkBp5HGuEEiUOVkViOn09s=
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:14:09 2026 by rpki-client