
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/acd3434b-525c-3274-b478-3edeabb7b508.roa
File: acd3434b-525c-3274-b478-3edeabb7b508.roa (raw, json)
Hash identifier: PaoYc+oa3ZJYKV9ITWBUay8qCwFzC2DP5+L44BKnEXQ=
Subject key identifier: 9C:70:79:7E:B6:72:F8:64:3D:9B:8A:6D:7C:50:33:98:86:CA:5A:95
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EA79248C681A635326C35FE70
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/acd3434b-525c-3274-b478-3edeabb7b508.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 9009
IP address blocks: 172.252.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:92:48:c6:81:a6:35:32:6c:35:fe:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=1d09d29c-eeeb-4de4-93b1-1b7d6781780e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:f7:1b:d9:94:b0:51:ab:99:d3:2a:b4:72:
00:6e:8a:35:7c:ec:25:62:75:11:fc:fc:99:b7:6d:
e2:e3:da:5f:38:82:ba:dd:da:02:31:4d:5a:cd:0a:
86:0a:21:b6:e5:ef:57:f7:16:ec:3c:9b:55:b9:46:
8c:10:78:e1:1b:85:3c:8f:74:93:77:06:55:a1:a6:
00:69:c4:eb:7c:3d:cb:f5:9a:3b:49:27:a9:19:c4:
da:cb:b8:f3:22:1a:0e:3b:36:42:72:1e:92:c6:50:
db:ad:16:c9:de:55:d2:82:b0:da:17:e4:df:a9:0c:
14:06:0c:e8:df:4f:bb:e9:4b:c7:0e:f8:88:59:d4:
e8:58:9d:e1:47:da:1d:84:46:2f:09:45:65:75:01:
22:cd:d1:17:df:51:1d:27:10:4b:0c:fb:7d:8b:a9:
1f:01:41:5f:f3:df:2d:e4:56:e0:21:cb:da:21:51:
75:1b:8e:eb:a0:4b:fb:df:a7:34:44:cc:27:7d:67:
b5:23:f5:8e:68:66:70:8b:73:8f:b1:5b:a2:35:8b:
bb:85:be:45:b6:ff:49:c9:50:07:c8:65:31:bf:22:
c6:d5:ae:a6:5f:46:cd:98:47:14:56:de:9e:6c:00:
75:ba:39:9d:52:2c:bf:1c:8a:9b:4c:16:6b:2b:76:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:70:79:7E:B6:72:F8:64:3D:9B:8A:6D:7C:50:33:98:86:CA:5A:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/acd3434b-525c-3274-b478-3edeabb7b508.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:9b:b7:41:f5:51:94:fd:a4:94:1c:21:6d:fb:52:fb:3c:76:
a1:61:13:12:79:12:2c:79:ad:3a:4f:ba:5a:00:bd:8f:12:e4:
64:09:e1:9e:ed:fc:b9:21:31:3c:e3:a7:85:b7:a8:68:b8:7e:
cc:ee:49:a5:d2:f1:dd:9c:84:01:41:7b:b2:0a:f8:98:ce:37:
0c:91:b3:d9:06:28:ef:57:2f:09:b1:dc:74:47:4a:18:92:0e:
33:63:fb:17:f6:79:e0:92:91:c9:0b:19:be:f0:54:1b:8e:6a:
12:1c:fd:48:bb:b6:41:ca:94:b8:0b:ea:8c:14:42:8d:0b:35:
33:f2:e7:41:7d:d5:ac:3a:c8:84:5e:ec:fa:24:6b:61:66:1c:
94:ff:c7:95:1e:e2:53:33:6d:0e:de:66:a5:2c:1d:55:a0:13:
45:8c:c0:18:6b:02:06:9a:d7:3a:bc:c0:d4:c5:ea:e4:92:02:
53:4d:0e:87:70:80:16:9d:69:bc:1a:65:32:15:10:91:f1:8e:
99:9f:6f:51:28:e3:b7:be:09:d8:d3:ff:82:00:6e:5c:19:d7:
a1:0e:35:45:e0:2a:f1:d3:43:3e:3d:a5:21:2f:09:ec:78:55:
2d:97:0a:03:2c:6b:a6:d2:a6:72:24:62:bd:ce:f9:55:fb:b7:
a4:f0:bf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:36:49 2026 by rpki-client