
$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231382e302f32342d3234203d3e20313533333833.roa
File: 3130342e3134352e3231382e302f32342d3234203d3e20313533333833.roa (raw, json)
Hash identifier: hx94AdY3CtzubvZNKD4picqGwHZbaIQOZo4qSYJe0xA=
Subject key identifier: 38:16:FB:EC:89:62:34:B5:F6:5E:6F:0C:F8:CB:DA:D7:D5:6E:DC:49
Certificate issuer: /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial: 4F868908A3ED34C3CE1E41281C4E2D4F58100048
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231382e302f32342d3234203d3e20313533333833.roa
Signing time: Thu 12 Mar 2026 08:34:34 +0000
ROA not before: Thu 12 Mar 2026 08:29:34 +0000
ROA not after: Thu 11 Mar 2027 08:34:34 +0000
asID: 153383
IP address blocks: 104.145.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 00:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:86:89:08:a3:ed:34:c3:ce:1e:41:28:1c:4e:2d:4f:58:10:00:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Validity
Not Before: Mar 12 08:29:34 2026 GMT
Not After : Mar 11 08:34:34 2027 GMT
Subject: CN=3816FBEC896234B5F65E6F0CF8CBDAD7D56EDC49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:0d:cf:1f:6f:d7:57:7c:3a:38:a2:b9:0b:
13:ab:84:94:c6:93:51:9e:b3:39:5d:cb:d2:86:5d:
7c:7a:bd:16:7f:bd:4d:5d:a6:96:54:28:2c:e9:1f:
bd:09:22:48:c1:92:05:fc:c9:6b:ef:2d:cf:80:8f:
5a:f1:61:73:20:1a:70:6d:74:bf:2e:6d:c0:2d:f5:
be:bf:85:fb:77:31:9f:bf:d2:82:47:9a:7a:92:d2:
98:7a:41:63:f4:6b:30:49:dd:8e:aa:59:32:33:51:
90:79:df:d9:a1:ea:7a:cf:fd:c5:1e:19:c8:90:36:
c1:f6:72:b4:79:7d:e4:ad:df:56:d2:65:e7:3c:b0:
5f:1a:4b:4e:90:ba:c2:fd:0d:c4:fb:b8:df:d0:e3:
3c:a5:15:03:b0:12:95:f8:e0:29:07:1e:c0:a0:4f:
c6:06:e0:09:0d:dc:b8:c8:1f:d9:dc:3a:e6:ee:c1:
9a:07:c5:8c:1a:b4:e5:bf:6c:55:ec:9f:32:3c:ad:
3c:53:5b:f4:13:8a:05:ee:c5:83:e4:19:b5:02:ea:
6c:08:cc:f2:90:e1:7b:e2:81:41:56:88:3c:8a:15:
7f:95:ed:99:a2:4c:e0:7b:3e:e4:10:a0:27:26:3b:
63:5a:61:f8:ec:66:06:9f:41:37:8a:c5:64:51:36:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:16:FB:EC:89:62:34:B5:F6:5E:6F:0C:F8:CB:DA:D7:D5:6E:DC:49
X509v3 Authority Key Identifier:
keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231382e302f32342d3234203d3e20313533333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.145.218.0/24
Signature Algorithm: sha256WithRSAEncryption
10:58:05:af:8e:e7:da:73:5b:64:7f:66:5a:a6:90:5c:e5:37:
5b:cb:ab:04:79:cc:43:35:ae:03:86:7d:91:43:b0:1f:35:44:
ad:f3:22:92:af:7c:93:df:1a:98:66:b0:ec:af:47:6c:26:dc:
03:44:4f:a2:34:c5:c0:e5:57:9a:fc:11:84:00:90:82:7f:59:
f1:ac:5c:80:d7:a1:b2:78:cf:ee:3a:56:46:93:8f:ba:d4:8f:
65:e6:41:34:73:51:77:34:e0:e8:e9:75:a1:62:b0:74:de:9c:
c4:81:89:d6:e2:8a:e6:a3:4c:f9:c2:47:cf:94:17:c3:f6:ac:
44:e0:99:7e:4c:cc:ae:c2:c5:bd:c3:b9:b7:c4:89:b0:88:d1:
2c:f4:25:5b:f2:d5:41:74:9d:2d:70:d7:56:ba:a1:7d:5c:00:
91:14:0c:dd:1b:c2:1f:6f:fb:8d:5c:15:dd:42:d7:63:ec:b7:
af:a2:9e:f6:5f:30:c8:57:57:95:d0:00:8d:6f:aa:f9:05:ad:
bd:b1:80:62:2c:2c:b9:0e:18:3c:f9:7a:fd:f3:4b:66:26:c1:
62:14:3e:84:0a:57:ee:16:d5:92:55:f2:70:36:32:b7:d2:d0:
70:32:c0:21:fa:81:cb:6a:ed:be:8e:6d:ad:80:40:ba:3e:37:
d1:0c:46:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:42:45 2026 by rpki-client