
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a4fa7301-afdc-3cae-9b00-aa0aa80c1c74.roa
File: a4fa7301-afdc-3cae-9b00-aa0aa80c1c74.roa (raw, json)
Hash identifier: 3WFViKcsuYzrCsK/ewimRE+cENA6LsfjCysGWsX6Yx4=
Subject key identifier: 4E:64:8E:14:52:54:BC:33:6C:17:AA:21:40:90:A6:FD:17:92:2B:54
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EF01CBB278A614BA0B8106956
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a4fa7301-afdc-3cae-9b00-aa0aa80c1c74.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 25893
IP address blocks: 172.252.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:bb:27:8a:61:4b:a0:b8:10:69:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=4b46cab2-3b9f-48d4-9199-e5691ae7ae5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:9b:5b:d1:81:99:a4:95:e4:f0:95:21:60:
a8:b1:de:27:0a:ee:fa:17:34:01:5a:cf:00:72:a3:
bf:86:34:f8:7a:5b:3f:59:fb:57:7c:70:7f:a9:a2:
58:ae:56:f5:21:6f:17:9a:e2:70:b2:ce:55:af:74:
ab:2e:f7:00:09:be:2f:8a:b4:de:a5:a0:fa:49:7b:
1a:84:f2:98:83:08:9d:85:3c:7f:ce:cf:61:15:d0:
b0:ed:04:94:54:02:8e:2d:80:9f:8c:aa:20:5a:d9:
2e:b0:81:56:04:cf:7d:18:25:11:0a:a4:36:e1:26:
61:43:c3:8c:e3:40:0e:d3:cf:47:25:4b:fe:19:15:
2c:9c:e7:be:fa:2d:72:17:7c:2e:21:8f:7a:f7:f0:
74:14:25:5d:69:a9:a5:0e:ce:01:65:c9:a1:82:d6:
8a:81:61:61:17:52:bc:01:91:e9:09:da:1b:2b:d5:
1d:60:4e:c6:ec:1c:de:88:b3:81:18:07:74:76:63:
92:b5:bc:1c:7c:63:8a:0f:20:6a:f1:9a:dc:9e:b8:
a4:b7:99:c2:e1:a9:e5:0b:58:10:ef:8c:03:9b:90:
41:da:20:ca:f1:01:1e:96:21:44:41:c3:25:a9:a7:
e4:ee:cc:21:36:1d:fd:f0:eb:c8:c1:d7:42:07:84:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:64:8E:14:52:54:BC:33:6C:17:AA:21:40:90:A6:FD:17:92:2B:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a4fa7301-afdc-3cae-9b00-aa0aa80c1c74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:56:ff:df:96:fa:1f:4f:97:26:2e:00:eb:b5:b0:b6:d3:d4:
47:75:9b:f2:81:dc:46:6f:09:9c:cd:8c:e0:61:ea:4d:9a:34:
06:5f:d2:bd:59:23:3a:f9:db:35:8c:9c:83:fa:bd:4c:19:12:
ce:78:8d:b2:f7:07:7b:bb:5d:b6:56:e2:44:91:d6:c2:4e:d1:
83:68:94:b2:ec:0d:b0:59:dd:29:64:aa:ba:6b:93:cc:53:0c:
08:cf:15:dd:87:71:5c:14:1e:fe:e1:67:54:eb:3b:39:e7:b0:
2a:6f:f1:45:2c:22:05:9f:5e:42:4f:1a:69:2d:73:51:f1:c3:
84:d0:18:47:7f:b7:ff:02:ff:31:f9:d3:37:15:21:61:d9:ea:
45:7e:11:5f:32:f9:d1:da:cb:68:73:c7:16:4d:3c:90:1e:3c:
ce:91:ab:2c:60:50:d1:02:17:f4:6e:24:35:6f:ac:14:ca:47:
bc:b0:ac:d7:3d:c3:c8:c1:99:76:96:72:a6:ed:87:ad:6e:28:
40:11:b5:90:b3:3b:54:77:ec:b1:ea:0b:e8:e2:5a:77:18:1e:
a3:a9:e0:c3:bb:5e:0b:a1:be:38:07:06:3c:f2:f8:c8:e6:4d:
21:58:88:44:b9:6c:21:b1:41:9b:aa:a4:61:65:99:d0:ed:5f:
05:33:3c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:27:11 2026 by rpki-client