
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3afec97c-65ca-375c-91bc-485c335688db.roa
File: 3afec97c-65ca-375c-91bc-485c335688db.roa (raw, json)
Hash identifier: dHjhL99U+wMxnRucbLvx0ZR7XOeHsMsK1MPbM3hPJp0=
Subject key identifier: 46:BA:2E:77:B4:C0:AD:43:B7:61:62:02:D5:19:2C:F0:0A:15:85:F2
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EA17A5DB51D6A9DEC7389FE00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3afec97c-65ca-375c-91bc-485c335688db.roa
Signing time: Sun 26 Jul 2026 21:00:11 +0000
ROA not before: Sun 26 Jul 2026 21:00:11 +0000
ROA not after: Sat 24 Oct 2026 21:00:11 +0000
asID: 153706
IP address blocks: 172.252.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a1:7a:5d:b5:1d:6a:9d:ec:73:89:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Jul 26 21:00:11 2026 GMT
Not After : Oct 24 21:00:11 2026 GMT
Subject: CN=442bb23c-16a2-40af-80d0-0aba673578e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c6:4e:58:3f:b8:5f:30:77:cb:78:fe:f1:1d:
85:27:85:b4:e9:9c:73:69:9f:86:b6:02:50:aa:67:
2b:ed:05:4e:98:25:c7:07:95:01:2a:e2:54:58:5c:
8d:ad:49:3e:4d:a9:f8:77:c2:92:94:e4:97:09:95:
52:32:c8:94:bd:4b:3a:98:7e:68:eb:31:c6:5f:20:
ab:28:ff:c0:5b:eb:c3:84:0e:d9:84:be:15:41:ec:
3f:f0:56:df:27:b1:03:c2:8d:d7:f0:f2:78:3d:24:
d5:86:29:f9:6f:d3:65:32:22:7a:4b:01:b5:ef:8d:
40:76:ac:d6:bf:62:a3:ee:3f:35:4d:1f:09:08:6f:
0c:cc:5e:48:8b:14:61:6c:9b:6b:97:8f:a6:29:ff:
0a:f9:1b:06:d8:83:c0:f1:51:42:6d:b8:f4:21:62:
81:7f:39:4d:98:53:89:ef:0e:9a:05:f7:aa:10:97:
67:1b:58:1a:f7:48:fe:de:91:22:d1:b0:93:c4:4b:
cc:2e:3f:22:0b:42:f7:de:71:71:fe:07:bd:e2:3c:
6e:d0:57:07:7a:e6:a4:7c:2a:8f:e1:0d:d4:9c:54:
82:26:8e:56:ed:00:40:3f:f5:d9:2e:65:4f:4f:5b:
58:c2:04:5a:d2:2a:58:65:6b:61:be:c3:47:29:bf:
d7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BA:2E:77:B4:C0:AD:43:B7:61:62:02:D5:19:2C:F0:0A:15:85:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3afec97c-65ca-375c-91bc-485c335688db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:8d:4b:73:e0:79:0a:c6:6e:b2:4e:71:06:11:35:79:ee:24:
38:f5:c7:1c:39:2a:e5:bf:80:cb:d6:f1:6c:5c:83:cf:b3:de:
2e:ec:03:b5:01:5d:57:92:ec:ec:c9:ec:b8:36:03:e1:52:26:
73:1d:65:f1:12:0a:86:33:a1:54:68:2a:7f:a1:34:a4:83:f8:
ee:96:4c:cb:de:af:8e:93:55:65:f2:dd:12:fb:b7:be:e5:e3:
f2:a7:98:74:74:1e:1b:f3:aa:92:84:18:01:e7:a1:6a:0e:3b:
8c:92:71:44:af:5e:ad:75:cb:20:e5:7d:49:fe:8f:ff:42:f3:
ba:68:2a:f2:f6:8f:e6:8f:92:72:57:55:0b:85:66:4a:92:b9:
18:39:cd:e0:fe:75:6b:62:df:86:54:44:ed:1f:80:cb:98:1e:
29:40:26:6f:25:02:cf:2b:83:b5:9a:2b:d5:d7:78:82:3c:8a:
33:6e:02:4e:73:25:f8:f1:69:09:29:f0:bc:3e:9d:97:09:27:
7b:54:1f:34:70:73:e2:1b:65:37:66:92:ac:08:0e:04:1d:f9:
91:14:10:45:72:65:95:99:d3:47:b2:97:25:f1:fa:1d:94:de:
64:87:51:d2:13:b4:85:e0:bd:d2:48:fd:19:ea:05:79:3a:1d:
e1:85:e6:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hel21HWqd7HOJ/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk
NDQyYmIyM2MtMTZhMi00MGFmLTgwZDAtMGFiYTY3MzU3OGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMZOWD+4XzB3y3j+8R2FJ4W06ZxzaZ+GtgJQ
qmcr7QVOmCXHB5UBKuJUWFyNrUk+Tan4d8KSlOSXCZVSMsiUvUs6mH5o6zHGXyCr
KP/AW+vDhA7ZhL4VQew/8FbfJ7EDwo3X8PJ4PSTVhin5b9NlMiJ6SwG1741AdqzW
v2Kj7j81TR8JCG8MzF5IixRhbJtrl4+mKf8K+RsG2IPA8VFCbbj0IWKBfzlNmFOJ
7w6aBfeqEJdnG1ga90j+3pEi0bCTxEvMLj8iC0L33nFx/ge94jxu0FcHeuakfCqP
4Q3UnFSCJo5W7QBAP/XZLmVPT1tYwgRa0ipYZWthvsNHKb/XAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEa6Lne0wK1Dt2FiAtUZLPAKFYXyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvM2FmZWM5N2MtNjVjYS0z
NzVjLTkxYmMtNDg1YzMzNTY4OGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIONS3PgeQrGbrJOcQYRNXnuJDj1xxw5KuW/gMvW8Wxcg8+z3i7sA7UB
XVeS7OzJ7Lg2A+FSJnMdZfESCoYzoVRoKn+hNKSD+O6WTMver46TVWXy3RL7t77l
4/KnmHR0HhvzqpKEGAHnoWoOO4yScUSvXq11yyDlfUn+j/9C87poKvL2j+aPknJX
VQuFZkqSuRg5zeD+dWti34ZURO0fgMuYHilAJm8lAs8rg7WaK9XXeII8ijNuAk5z
JfjxaQkp8Lw+nZcJJ3tUHzRwc+IbZTdmkqwIDgQd+ZEUEEVyZZWZ00eylyXx+h2U
3mSHUdITtIXgvdJI/RnqBXk6HeGF5so=
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:17 2026 by rpki-client