
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1be9fd6a-8e36-357c-8829-d15d57b62613.roa
File: 1be9fd6a-8e36-357c-8829-d15d57b62613.roa (raw, json)
Hash identifier: htobXLYwr+l16M6QhPjXG99/H5ZcmNuMPQCbJR3LZ4o=
Subject key identifier: 6C:9B:E8:CC:2B:B2:DC:4F:76:81:85:1F:1A:90:33:C0:CC:26:F1:7D
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EF01CAEB03AD4B37499D68100
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1be9fd6a-8e36-357c-8829-d15d57b62613.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 398781
IP address blocks: 172.252.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:ae:b0:3a:d4:b3:74:99:d6:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=99d8ac3d-56c7-47a5-92d5-6bff01bacc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:bb:b5:44:79:96:10:c5:cf:23:5d:5a:b0:
a3:03:88:40:9a:89:9c:dc:30:fe:d0:61:24:9f:0b:
49:e4:79:14:25:dc:31:c1:d3:c3:54:1d:fe:e2:2e:
87:ca:e0:9d:01:cd:7b:3b:0a:bc:83:ce:db:13:28:
34:0e:e3:34:70:96:ee:3c:e7:db:d4:ae:39:25:13:
5f:6c:39:39:27:ce:05:7d:54:b8:18:64:9c:32:77:
56:28:ba:d8:81:f5:d4:d3:db:58:cf:0f:11:55:50:
42:0b:57:eb:13:94:34:58:24:72:e8:16:a4:39:51:
dc:fc:da:44:2d:98:f2:22:f5:fd:0e:23:8b:55:60:
25:40:38:54:10:15:1c:c3:2e:ff:d0:6d:43:f5:9d:
ae:f7:61:2e:09:f8:27:74:12:a9:59:dd:88:4a:51:
92:da:26:88:c8:ef:96:a4:77:be:15:18:f4:c0:60:
7c:b8:5c:85:58:84:6e:0f:df:61:10:07:94:a9:aa:
06:03:8b:48:23:b6:6f:b4:c2:95:02:ce:78:20:a8:
f9:a5:94:52:fa:93:b4:30:8b:fa:cc:d2:de:3f:e6:
c4:49:87:d2:90:b2:36:82:dc:d8:27:b6:81:57:76:
b3:8d:38:d9:a0:be:91:34:a8:e0:d2:62:38:9c:ac:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:E8:CC:2B:B2:DC:4F:76:81:85:1F:1A:90:33:C0:CC:26:F1:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1be9fd6a-8e36-357c-8829-d15d57b62613.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:04:58:a9:f2:5b:3c:04:b0:62:46:5c:7f:f2:6f:a9:6d:44:
72:20:72:55:93:c0:50:ba:53:5a:99:35:f6:0c:be:d5:fa:3a:
76:e6:59:71:03:a0:76:ef:80:33:7b:f1:75:06:f2:8c:16:8f:
fd:49:2f:bf:62:a2:37:24:4c:02:ad:f5:b4:15:e9:60:69:57:
e6:93:25:ed:30:f9:26:df:0e:2b:6c:3f:f3:50:48:2a:c4:8c:
84:d7:67:b2:34:0f:9b:a1:6c:36:0b:93:4d:e2:16:a9:d1:b0:
4f:ed:8d:b7:05:22:8a:a8:62:27:44:49:84:75:85:b7:b6:16:
54:f5:b0:19:2f:85:f7:03:e4:62:11:39:0a:5a:9c:30:03:47:
fc:a0:53:77:76:e2:fc:65:fa:4b:73:28:73:0c:f3:fe:c9:d6:
21:f2:e0:5f:7a:7f:77:ca:31:c3:ca:04:06:96:16:7d:f9:9b:
bd:93:16:f3:d4:98:0e:0a:9f:92:d6:ad:50:25:69:63:95:ae:
11:ff:e9:52:40:3f:c3:46:6b:1c:0b:fa:97:3c:22:cf:77:e0:
54:0b:9d:71:88:64:b2:24:f0:a5:c4:49:9b:85:73:cd:2c:e6:
84:ce:41:e3:3f:43:64:b6:4c:76:c3:ac:b1:f9:16:62:42:72:
27:44:86:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:41:10 2026 by rpki-client