
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5b5adb35-c653-3a02-83a9-849eba88b2c3.roa
File: 5b5adb35-c653-3a02-83a9-849eba88b2c3.roa (raw, json)
Hash identifier: QoHgepMgP5rUqfUfmoDj9s8b3OoUVFdT5CYUOnPrq28=
Subject key identifier: B1:B6:73:52:40:25:6B:94:89:80:F3:E1:C3:36:8D:9D:01:EB:55:CB
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EF01CA7301EFF277DB1B46400
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5b5adb35-c653-3a02-83a9-849eba88b2c3.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 398781
IP address blocks: 172.252.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:a7:30:1e:ff:27:7d:b1:b4:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=41fa9c17-fc52-4349-b751-19d9e0556a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:34:59:15:83:47:4b:e7:2a:dd:33:b8:c9:17:
87:bd:9d:fb:36:c0:93:f1:d8:cb:43:a0:38:7a:c9:
bf:40:28:da:36:e7:73:8d:b6:0f:33:90:46:34:66:
9b:9d:7d:bd:18:dc:0d:67:c9:73:51:32:d4:f8:4f:
e8:0f:8e:53:0e:64:93:3a:68:41:81:f8:02:dd:fa:
83:02:28:5f:65:fa:9a:06:f5:e5:b5:3a:7f:c6:b9:
6d:2e:9e:49:b0:53:70:8d:9f:50:c0:29:55:14:ab:
f8:9b:ba:fd:da:8e:82:5c:47:4e:9c:16:60:c8:84:
dc:b6:42:df:a3:66:ec:ff:76:90:75:94:26:cd:94:
0f:07:27:cf:49:66:dd:ea:e9:67:6a:95:1d:2d:fe:
bc:b7:70:0a:3d:3b:c2:7e:ff:8f:65:25:ac:fd:54:
51:33:4d:9d:5b:af:39:6a:b4:e2:df:3b:f2:52:af:
ce:2b:b7:53:0a:c3:4c:29:57:8d:0e:ea:b8:44:51:
6e:bd:19:b0:73:28:c3:18:6a:fa:a1:f8:f2:dd:63:
a3:8b:a4:58:ed:08:b0:70:78:c8:35:64:65:72:32:
4d:0a:fc:3c:8c:a4:72:64:f0:a7:7a:4e:bd:34:6e:
13:3f:27:41:72:de:7f:5f:1f:d3:66:62:54:89:3c:
87:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B6:73:52:40:25:6B:94:89:80:F3:E1:C3:36:8D:9D:01:EB:55:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5b5adb35-c653-3a02-83a9-849eba88b2c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:2a:00:53:b1:49:ba:e3:d3:7c:a7:2f:cd:45:bf:11:31:d1:
d0:cd:10:0e:ae:44:78:86:f8:27:e4:4c:b7:62:f8:16:6f:74:
90:92:f1:92:b4:65:ab:69:7d:25:13:09:b5:82:ce:24:5e:35:
32:a4:14:03:3f:3f:a4:b8:18:cb:7f:05:1b:9d:47:aa:59:91:
16:37:ed:ef:84:3d:07:62:8b:5c:eb:51:a6:68:5a:11:db:09:
34:2d:7c:37:cd:d0:92:d8:cb:29:d2:f6:3d:40:13:2e:6b:2f:
ef:0f:f3:e3:f8:e2:2a:39:7b:be:86:58:8e:f5:c0:a8:d4:d3:
89:d6:41:4c:f2:6f:c1:11:4a:01:8e:c8:7b:bc:3b:3c:da:4f:
0b:41:18:2f:3b:f8:d7:24:f6:e0:67:33:4c:38:55:b1:9f:12:
d8:17:75:8b:92:28:61:bc:20:ba:ab:7a:06:bd:6c:48:f1:a6:
54:66:54:f2:97:d7:54:0d:eb:b7:6c:2e:c7:0d:81:2b:f9:df:
a7:ff:82:e4:e8:01:0e:c3:c2:b7:b0:70:bf:32:bf:af:8d:43:
c6:df:42:aa:9b:ce:f7:e1:45:69:70:b5:84:52:d5:fd:d1:e2:
64:4b:11:5a:de:a1:fd:f5:3c:73:6c:bb:eb:63:47:65:2a:9c:
68:b9:79:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:21:13 2026 by rpki-client