
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ac77f607-b112-353c-986f-1f047befa48a.roa
File: ac77f607-b112-353c-986f-1f047befa48a.roa (raw, json)
Hash identifier: pAtxfRg3M+6wJscp3UtNZb1vd/u7xenx1GzMblm5lNo=
Subject key identifier: C2:34:37:F6:E5:B4:E9:94:CB:0A:48:CC:0C:E4:12:35:54:F1:B7:83
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EF01CD57F54E5D355CF8B2480
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ac77f607-b112-353c-986f-1f047befa48a.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 398781
IP address blocks: 172.252.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:d5:7f:54:e5:d3:55:cf:8b:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=f459cc35-816b-422b-879c-7cfe119113b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:42:aa:24:43:c4:b3:71:da:14:8c:d9:58:
c5:18:30:d9:b9:4c:90:6e:0d:42:d6:d4:cb:0b:b0:
2c:0d:1b:7a:0d:46:f8:56:55:5e:7d:25:f0:72:89:
53:94:b3:3a:9c:5d:33:ae:45:7d:9b:20:4a:03:8b:
5a:29:78:f2:f6:7f:9e:01:e8:cb:77:b2:4e:65:37:
84:be:4c:07:57:ca:a3:d1:39:7e:6a:a8:a5:f0:f1:
7d:e9:7e:60:e8:42:97:d0:36:c2:0d:fc:de:7f:60:
40:85:f7:90:60:0d:26:f0:b5:ac:6e:d1:50:4f:62:
04:1a:51:63:e9:fd:c7:4f:a7:d1:8b:ff:a2:97:e9:
64:d2:10:a3:81:73:7a:62:1b:00:3b:49:b4:f4:ac:
40:c0:90:14:03:39:1e:9f:e0:19:07:df:3c:02:4f:
5a:ed:ec:ed:d7:3f:c0:7c:ba:aa:9b:01:d5:80:f3:
29:a1:90:9f:06:f4:86:29:77:9c:f2:7b:95:1d:11:
09:f0:8f:13:e9:5c:28:d0:10:47:e9:40:a0:53:c3:
77:fb:b5:89:17:a0:d5:73:5e:3e:31:75:bf:a2:e6:
20:20:6b:a0:a3:6a:4c:dd:ae:18:c2:ff:3c:37:b5:
19:cf:b0:a5:04:55:ec:78:66:8b:c4:06:4c:22:ef:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:34:37:F6:E5:B4:E9:94:CB:0A:48:CC:0C:E4:12:35:54:F1:B7:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ac77f607-b112-353c-986f-1f047befa48a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:7e:59:91:f2:f8:cc:43:25:12:f0:03:ea:ee:13:03:a5:11:
05:c4:c0:2d:1b:eb:a3:2c:f1:b9:99:c7:e9:8c:3c:07:8f:71:
98:71:b1:77:99:c1:a7:a2:ac:31:a5:bb:d5:90:ed:eb:b5:b7:
1a:c2:1d:a1:a1:35:ac:51:99:e5:05:90:b2:fc:3a:53:5d:33:
e2:45:3c:d3:4f:12:f8:53:3f:d4:01:31:77:7f:18:84:38:2b:
c3:9c:ca:0f:f7:5b:86:e2:56:45:22:cc:a9:f2:f8:f0:4a:40:
2c:83:5a:cd:35:ab:f5:82:9a:8f:9e:28:50:f1:0b:66:29:d8:
8b:1a:dc:6b:e7:c7:5a:ad:1f:79:27:bb:5d:1b:66:c2:81:15:
17:b2:56:5c:3d:44:f2:3b:f5:c1:64:7f:6a:3e:41:75:08:60:
39:25:25:53:0c:bf:d8:20:32:11:1f:67:6c:40:6c:1c:7e:17:
50:fc:20:1a:70:33:13:94:4a:00:46:a9:cb:c3:b6:f8:13:79:
43:33:e8:75:30:60:43:ae:fb:80:52:1b:3d:86:81:96:d2:95:
e8:51:69:7e:9f:de:36:2d:be:f0:e6:a9:5f:fa:82:d8:d3:4a:
5f:7e:33:fc:80:a9:16:5f:88:85:f2:c0:e9:98:ef:48:60:cc:
3d:5d:ac:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:24:11 2026 by rpki-client