
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1a40aea3-2635-3035-9d09-61e51708f9a8.roa
File: 1a40aea3-2635-3035-9d09-61e51708f9a8.roa (raw, json)
Hash identifier: BWh8lJ9cySpRX6FQFZ478A+rxzCBuZE7Ql+5AV66rcc=
Subject key identifier: 1F:59:31:41:F9:48:7E:46:8D:18:8F:D6:6D:C7:71:04:65:9E:43:ED
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EF01CC70AEC0719431EA0EBC0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1a40aea3-2635-3035-9d09-61e51708f9a8.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 18779
IP address blocks: 172.252.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:c7:0a:ec:07:19:43:1e:a0:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=ad2105e1-6a60-474e-85c3-b9021d62c396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:f0:70:13:c1:d5:33:5b:25:43:c7:b3:37:
dc:27:72:e3:a5:97:cd:eb:13:48:a7:1e:d2:86:94:
e0:2b:51:33:83:3d:17:86:10:fc:7f:3c:15:53:4b:
a4:55:40:c1:5b:91:13:df:87:97:77:44:c0:81:21:
ed:11:c0:d8:1c:52:d5:44:3e:51:f4:da:57:e6:dc:
50:12:19:c0:9e:b9:9f:61:c8:58:9c:f0:03:64:c2:
10:19:44:a3:81:d0:ea:aa:e3:98:cb:fb:5a:82:b9:
f5:89:d2:52:4b:5a:b0:5b:41:ae:c3:90:7b:7b:fa:
df:34:51:35:cf:c4:e9:a4:3e:42:88:91:e2:92:d8:
fe:20:2f:c9:71:9d:be:dd:1f:45:5e:a3:8c:02:fe:
fa:8a:3c:e4:9a:f9:30:fb:99:d8:cc:9a:9f:85:0a:
6e:d6:49:f8:e9:49:ce:90:66:06:2f:b5:7e:d1:9c:
6a:df:9b:eb:54:76:da:af:23:af:f5:5d:df:d6:b7:
99:49:f0:6d:ba:4d:d9:8f:9c:5a:91:b2:19:5e:8c:
e4:c3:c2:f4:d2:dc:2c:63:7e:41:c6:79:c0:7d:78:
47:02:7a:ee:f0:c9:3d:fb:ca:30:7c:ac:d2:c6:ac:
db:d4:6a:73:a1:c6:df:82:e6:dd:ac:7d:f9:ef:ed:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:59:31:41:F9:48:7E:46:8D:18:8F:D6:6D:C7:71:04:65:9E:43:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1a40aea3-2635-3035-9d09-61e51708f9a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:c5:ad:ba:a6:da:04:88:89:51:ad:cb:e6:fd:a6:0c:16:fb:
14:c3:21:4a:a9:f6:83:4e:9e:de:3a:46:51:00:c9:ef:3c:ec:
b1:a1:23:79:bc:a6:b4:a9:72:15:7b:19:18:f1:67:89:b8:49:
f1:85:6b:63:84:8f:a2:82:db:3d:13:a1:df:1e:cf:9f:4a:25:
b8:b7:be:aa:28:9c:bf:45:2a:43:a8:fd:38:8d:40:04:b1:c1:
03:3f:f2:27:b3:34:20:1e:92:62:21:24:e0:c8:9b:58:75:89:
f8:41:4e:73:10:8b:76:22:71:3a:53:49:43:0a:56:45:67:69:
fc:01:8b:22:bd:78:40:70:54:37:84:cd:95:cc:80:99:d0:81:
ec:ce:af:1c:cc:56:c1:98:09:1b:6d:bc:89:3f:dc:74:74:d0:
c0:d0:af:dd:b6:a1:70:87:d8:02:de:7f:92:00:a4:f9:b2:24:
16:c3:c4:6b:d9:e5:38:8a:1e:f4:55:f2:3c:2b:50:ff:95:f3:
2c:76:f0:69:72:91:9f:7d:d9:73:3c:c9:7f:32:e4:8c:86:28:
10:72:45:73:27:03:f3:ef:20:92:a0:3d:df:c5:7f:b3:e0:a9:
ab:c4:32:ab:73:fe:c0:e1:5a:43:6d:be:de:69:2b:da:a4:ba:
12:2b:f6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:03:51 2026 by rpki-client