
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bc0eec02-3bdd-3ae3-ba20-00883c3fc732.roa
File: bc0eec02-3bdd-3ae3-ba20-00883c3fc732.roa (raw, json)
Hash identifier: 2UdVsPlYP3xdtrn+RXr01Mx+1oNoJ6y7rEjEG9T/9yk=
Subject key identifier: 08:A8:F4:F7:8F:99:55:08:A3:FD:20:5E:47:9D:6C:77:E5:68:88:37
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584E0CC2068FBA861199214CD940
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bc0eec02-3bdd-3ae3-ba20-00883c3fc732.roa
Signing time: Wed 03 Jun 2026 14:29:09 +0000
ROA not before: Wed 03 Jun 2026 14:29:09 +0000
ROA not after: Tue 01 Sep 2026 14:29:09 +0000
asID: 3561
IP address blocks: 172.252.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:0c:c2:06:8f:ba:86:11:99:21:4c:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Jun 3 14:29:09 2026 GMT
Not After : Sep 1 14:29:09 2026 GMT
Subject: CN=58bfe24d-9dcf-409e-9d61-bd6ed97ffb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:b0:5a:c3:7c:c1:78:ce:f2:08:06:05:8a:
66:42:a0:3f:3e:e5:40:63:c0:a4:31:54:7e:17:60:
10:3c:31:53:a9:5c:6c:12:0c:9d:58:54:56:50:a6:
0c:d4:01:55:14:8d:98:77:5e:3e:d7:5e:c2:1e:e3:
3c:78:38:b9:94:be:48:5b:ab:61:65:c2:6c:ab:fe:
3c:a1:68:45:b9:82:40:a6:bb:d3:41:5e:8b:73:65:
48:69:3e:e7:43:19:43:20:6e:58:d9:8e:4c:3f:40:
fa:d1:fe:f3:fd:ab:59:ca:80:a4:40:4e:2e:50:dd:
5d:88:85:0d:52:35:4d:68:34:ea:51:a1:13:5f:da:
e1:bc:10:60:63:1d:92:69:4e:cd:b3:53:50:e3:71:
aa:e8:9d:6d:87:3a:1e:fc:0a:e5:aa:b7:da:a9:f4:
9e:3b:2d:d9:82:4a:81:16:c3:d7:bd:55:46:4c:22:
fb:fb:0b:a8:51:80:5b:f7:a4:70:f3:c4:35:83:b3:
74:b7:94:d4:b2:b3:5f:4a:d9:b4:bb:05:2e:d1:18:
19:8e:77:0b:eb:61:8d:dc:2d:77:86:db:42:c0:43:
14:cc:5c:1b:63:ee:19:fc:5f:8d:e2:ac:58:63:21:
17:d6:4f:90:90:83:2f:ef:73:e3:26:0c:b3:41:38:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A8:F4:F7:8F:99:55:08:A3:FD:20:5E:47:9D:6C:77:E5:68:88:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bc0eec02-3bdd-3ae3-ba20-00883c3fc732.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:e1:7b:bc:c8:04:03:c4:ac:2c:fe:0e:92:82:cf:a9:64:2c:
65:f9:0d:d5:d0:2e:48:12:46:31:48:e1:33:92:1b:0a:9a:18:
4f:89:a1:65:42:8e:cf:8f:b9:b4:5b:f3:0e:75:d8:93:7c:f7:
3b:d8:68:21:b1:44:d3:d0:90:7b:e4:13:d0:56:4b:49:35:9f:
00:fe:06:a4:56:81:e2:c4:7a:d6:cc:5b:ae:d4:c5:ae:11:b4:
81:86:ea:6d:43:1c:3c:62:ad:0e:96:11:c6:a1:7a:9c:ab:bf:
21:9a:40:3d:1f:5b:9e:8c:5b:c0:36:5c:7b:ae:cb:7a:2b:49:
64:f4:a7:a0:bf:c5:0b:e8:18:3b:65:81:e4:5c:20:6c:52:10:
58:81:7d:75:31:47:aa:cd:da:a6:48:b5:df:b2:cf:e1:93:bf:
e9:75:eb:47:bc:d0:c7:51:ea:20:4b:47:7a:20:44:9e:de:03:
2d:82:48:42:e6:a5:29:d1:e9:7a:cb:16:65:c1:b5:23:8d:ad:
62:1d:0e:a2:43:8d:f2:5e:98:eb:8c:8e:9a:a2:6c:7b:17:57:
3b:fb:b9:b0:8d:5b:1a:bb:c2:29:7a:9e:27:6a:a9:99:af:97:
43:ea:e6:bc:bf:ec:36:8e:fb:fa:d6:4b:17:b7:e2:9d:90:f1:
21:e1:39:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:46:25 2026 by rpki-client