
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6b7e0f81-db74-3df3-a393-201c22470be8.roa
File: 6b7e0f81-db74-3df3-a393-201c22470be8.roa (raw, json)
Hash identifier: PiuCiWXAWUcqjEuZbFynecY/QpXYSC2z+zUhYSCZP0I=
Subject key identifier: 8B:08:77:BA:82:2D:91:D7:3C:08:EC:88:E0:50:EA:63:FF:9D:C0:DF
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584F497387657C0DACE400D88B1C
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6b7e0f81-db74-3df3-a393-201c22470be8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 212238
IP address blocks: 172.252.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:87:65:7c:0d:ac:e4:00:d8:8b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=3d89985a-0ae6-4c39-bd59-dcad392905b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dd:ba:6c:3c:6e:ba:7a:cb:4d:04:7d:35:33:
0d:31:5c:3b:d1:65:08:3b:4b:1c:83:57:a7:e6:56:
fb:ce:e7:88:74:59:6d:18:3f:81:ad:76:3d:bc:e1:
60:9e:88:bc:7a:03:5e:0a:b9:a9:e1:7c:33:cd:5d:
be:52:f2:d6:1c:15:3b:d0:65:9b:1a:7e:7c:ee:9e:
eb:d9:6c:88:10:76:8e:bb:3e:e0:0b:9a:20:a6:f5:
c1:e6:61:26:22:64:60:5c:69:8d:be:23:1e:32:2b:
34:31:e1:02:a4:70:3b:07:7b:42:30:bc:93:d2:71:
1b:8c:5c:97:22:39:82:20:8e:eb:85:c5:3b:b1:37:
9c:2c:8d:86:8a:bc:21:3e:9b:f1:3f:60:b6:45:d2:
c9:99:f4:48:d3:43:81:f5:47:74:97:f8:18:b2:97:
df:c3:17:66:9d:88:19:a0:18:be:d1:71:49:28:0d:
0b:83:d5:53:d0:51:15:a6:10:71:d3:e8:a8:70:ab:
56:1d:2a:e1:3e:a4:9e:08:f2:b2:7d:c1:fa:9b:c6:
59:77:00:a0:71:43:f5:88:16:bd:63:d8:17:13:8d:
14:00:c3:ae:88:fd:84:bd:5b:d5:a1:91:06:95:e4:
22:40:81:79:b5:ad:50:5f:7e:78:a2:fb:7d:2a:04:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:08:77:BA:82:2D:91:D7:3C:08:EC:88:E0:50:EA:63:FF:9D:C0:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6b7e0f81-db74-3df3-a393-201c22470be8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:9d:90:5e:73:5d:2c:5b:46:ca:ec:ba:1b:10:94:86:b4:9a:
c9:0a:6c:17:31:df:c6:ea:e2:bf:4d:83:04:55:40:6c:9b:0e:
93:96:f6:d5:3a:c2:77:cd:55:4b:0d:2b:b6:e0:19:fc:ce:02:
0b:d1:f7:b2:98:3a:9c:17:4d:d4:5d:59:69:7d:d5:ef:c0:4c:
98:3e:2c:2a:e3:bb:89:98:7c:68:d9:8d:62:e3:94:96:c6:11:
5f:23:5a:7e:c0:c6:a8:e1:f4:20:f0:f1:33:84:3c:f9:72:f3:
b9:96:31:a3:15:99:5f:30:f5:71:87:80:55:13:b8:1d:7d:6a:
28:45:e8:89:d4:45:96:1a:5b:46:48:94:be:48:d9:0b:75:d3:
d8:80:4c:b5:e9:85:ee:16:0b:4c:7c:00:e7:c3:d8:42:ff:0b:
ab:7e:61:de:7c:f9:9b:8e:a5:cf:7e:5d:4d:0d:bb:83:79:67:
f1:f4:7c:d4:43:79:45:61:02:c8:a6:ab:17:2a:77:d1:5e:4d:
18:71:d2:51:e9:41:53:08:2a:69:45:aa:9a:c3:af:65:49:10:
9f:ad:61:58:87:db:25:f3:d8:8b:56:2c:62:11:0c:5d:c4:ea:
f1:41:74:af:02:75:cc:15:7b:0d:b3:48:9e:b4:42:60:c6:0f:
8b:36:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:06:09 2026 by rpki-client