
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4a3a1932-3239-3ef7-9bd9-8186573871ad.roa
File: 4a3a1932-3239-3ef7-9bd9-8186573871ad.roa (raw, json)
Hash identifier: QUa332j1I//5XTFP4Fwa235m9oj+55efvyYJ6IVGrgM=
Subject key identifier: 65:C3:7A:1B:1F:08:2D:24:0D:58:0A:E8:EC:D8:C9:57:85:13:A5:3D
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EA79249E664C785AC4E824780
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4a3a1932-3239-3ef7-9bd9-8186573871ad.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 9009
IP address blocks: 172.252.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:92:49:e6:64:c7:85:ac:4e:82:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=23bca4bd-5fe9-47bf-808c-3f0f696a7361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:04:59:90:9f:06:ee:9b:ba:4c:ac:be:46:
2f:15:70:cd:30:35:74:0c:e5:c3:8a:8f:13:20:a1:
38:49:5f:9b:81:6f:e6:c8:20:dc:0b:27:fa:df:27:
94:41:bb:4e:d0:c8:fd:ac:b4:d4:18:26:98:c6:0b:
d7:d9:27:a6:d3:72:9d:08:c1:fe:c1:c3:3e:2c:e1:
b3:77:d2:9b:83:ac:27:7e:f7:06:c3:1c:a2:e3:cf:
4f:39:cb:a2:b5:b0:9f:7d:4f:4d:bd:b1:a7:50:dd:
02:37:cd:d1:d6:78:14:b5:1e:fb:59:75:fa:2f:1f:
db:58:df:34:8c:83:3c:8d:53:df:40:43:aa:32:9a:
a9:e7:ce:a7:32:0b:9e:b0:2b:93:21:df:c9:eb:e0:
81:23:d7:0d:3f:e3:06:e0:0a:47:78:eb:d4:0a:0e:
72:91:51:27:a0:77:85:7b:8c:80:2e:11:67:bc:87:
0d:8a:fa:77:16:30:7f:07:3a:f7:18:7b:98:06:ef:
61:24:a1:03:b6:59:a1:32:2d:37:e2:8c:07:89:35:
de:df:ba:c4:cd:67:79:45:6a:c3:4d:3b:63:18:94:
46:56:4a:78:54:fd:1e:94:7b:61:3e:f0:f0:38:17:
ee:47:ce:82:b2:47:7d:3f:24:3d:aa:49:d9:7e:08:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C3:7A:1B:1F:08:2D:24:0D:58:0A:E8:EC:D8:C9:57:85:13:A5:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4a3a1932-3239-3ef7-9bd9-8186573871ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:cf:e0:6d:09:7f:67:ab:1b:9e:bb:0e:0c:87:01:7a:85:37:
bc:a4:68:98:dc:65:6c:43:be:fe:89:ac:1d:72:29:5c:d9:f3:
0d:69:ad:f5:23:95:7a:f4:27:cf:46:c7:4d:49:38:7a:aa:a1:
41:ed:fd:41:d2:38:bb:78:16:e5:00:8c:13:75:ac:7a:ff:c4:
10:98:7e:54:88:6b:29:4c:07:0d:08:bd:9b:d8:21:53:14:18:
36:0f:a1:8c:a9:65:cf:35:d5:8f:5c:c0:42:dd:8f:20:46:da:
ad:8a:5d:5d:77:1f:02:4f:ef:21:96:24:ac:9e:f7:e8:f6:be:
ed:15:cd:13:0c:fa:22:04:ec:9d:98:2e:58:d3:36:42:01:2e:
f8:ad:99:65:0a:b6:e1:c8:b1:48:19:8a:3b:6e:2f:04:06:3b:
8c:4f:80:25:84:ae:7b:7d:71:5c:ae:d6:84:c3:71:27:21:8c:
2a:b5:67:aa:49:c5:af:7b:74:0f:91:50:f6:d5:07:17:ed:c2:
60:b7:3c:1e:ca:44:55:3d:f9:f4:e5:f3:88:8d:d7:09:e2:98:
ed:52:56:f2:8f:92:09:e6:c4:34:11:71:8d:16:d2:d3:2a:59:
c8:58:2b:01:e3:0d:21:0a:4a:24:b9:a1:d9:ba:3d:21:14:10:
75:6a:8f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:35:44 2026 by rpki-client