
$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231372e302f32342d3234203d3e20313533333833.roa
File: 3130342e3134352e3231372e302f32342d3234203d3e20313533333833.roa (raw, json)
Hash identifier: siULVBIEbooMI94LnYHWHIWfrZm0/hMhD8RP7b8CmX4=
Subject key identifier: 28:57:92:E8:2B:C1:E0:73:33:34:63:F9:06:AF:13:17:AD:51:9B:EA
Certificate issuer: /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial: 7902BC48276B89ADBB5910A74B4DE20D018676AF
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231372e302f32342d3234203d3e20313533333833.roa
Signing time: Thu 12 Mar 2026 08:34:34 +0000
ROA not before: Thu 12 Mar 2026 08:29:34 +0000
ROA not after: Thu 11 Mar 2027 08:34:34 +0000
asID: 153383
IP address blocks: 104.145.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 00:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:02:bc:48:27:6b:89:ad:bb:59:10:a7:4b:4d:e2:0d:01:86:76:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Validity
Not Before: Mar 12 08:29:34 2026 GMT
Not After : Mar 11 08:34:34 2027 GMT
Subject: CN=285792E82BC1E073333463F906AF1317AD519BEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:19:f3:57:46:5f:02:70:41:5e:84:2f:59:
12:b5:78:d7:57:4a:fd:15:34:af:f4:91:4b:27:78:
37:ab:6f:32:4f:e2:92:ad:64:d0:02:e2:ca:2d:58:
de:69:d0:02:2f:4c:65:d4:aa:88:24:63:aa:2f:ba:
76:00:e7:42:bd:15:e9:0b:98:d2:8a:f4:5b:19:74:
59:28:43:01:f7:13:be:e7:2c:3c:40:c5:29:36:2c:
e5:88:37:40:b4:66:c5:c3:df:5c:c7:17:5b:62:e3:
a3:6c:d5:af:35:88:90:22:c5:3c:30:6f:b3:9e:e7:
81:88:f7:5b:34:23:77:1e:d3:3d:d6:95:bb:8a:3d:
86:01:84:17:49:8b:36:b1:34:52:2a:7d:21:50:cf:
80:68:ac:94:ea:37:6b:71:04:c7:fc:95:bb:f2:29:
e2:f5:af:0c:ca:59:f0:0c:89:67:91:07:18:db:38:
16:f4:50:79:b4:45:7e:4b:5d:e7:41:54:f7:e7:50:
90:d5:fa:34:e3:83:b2:9f:9e:f5:20:16:da:17:6d:
a3:e1:2c:1d:b4:26:fa:23:f4:9e:68:0c:53:5c:16:
f5:71:94:fc:9d:42:96:ab:b8:b6:61:ee:57:45:78:
2a:df:f0:bd:d6:e8:ca:86:40:6a:90:0b:79:d2:85:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:57:92:E8:2B:C1:E0:73:33:34:63:F9:06:AF:13:17:AD:51:9B:EA
X509v3 Authority Key Identifier:
keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231372e302f32342d3234203d3e20313533333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.145.217.0/24
Signature Algorithm: sha256WithRSAEncryption
96:05:e2:ca:b0:8e:79:1a:d7:2b:e5:f6:0a:a5:83:19:86:4f:
63:e6:d2:c3:2a:4f:ea:04:f6:be:da:07:fb:21:dc:ba:7f:c6:
a1:4e:85:8f:2d:26:13:b8:e5:eb:f2:64:bb:c9:e2:93:87:41:
11:a1:1d:0d:87:fd:72:5e:5c:53:bf:ff:9f:56:37:fa:88:d5:
05:05:66:eb:4e:d4:c7:0d:e3:cd:00:49:32:2a:f4:d4:6d:79:
e8:60:0c:67:2e:1b:01:c2:d8:56:d7:37:63:fd:e7:f1:b3:8d:
01:0d:f1:94:90:7d:d9:2d:85:38:e6:81:40:2a:94:53:f7:6e:
79:58:ff:d2:af:5e:cc:16:88:e3:aa:07:5f:e3:7c:68:fa:36:
47:a2:26:b1:61:b2:c1:1f:e0:0f:b5:06:d0:67:da:4a:87:91:
66:f2:66:2b:56:39:82:4b:7e:4f:e2:c0:bf:b1:20:d4:7e:84:
16:97:2f:6f:a1:de:5d:a9:34:9a:f3:cf:b2:5f:9a:23:96:2a:
55:b9:1e:d9:ab:ed:0c:e2:b7:c6:bf:33:4b:ef:62:c3:d1:e7:
c5:37:be:a5:eb:98:39:4d:51:86:f8:99:79:02:bb:52:ed:41:
e8:ec:23:3b:67:74:24:73:d4:63:8a:15:5e:a5:90:00:4b:6e:
e7:97:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:41:47 2026 by rpki-client