
$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231392e302f32342d3234203d3e20313533333833.roa
File: 3130342e3134352e3231392e302f32342d3234203d3e20313533333833.roa (raw, json)
Hash identifier: Onersah3yXZ4Cltuw57r2fnelgGiNCupOoDmPGFuuuU=
Subject key identifier: 60:7F:89:8C:E0:25:DE:14:AC:75:85:76:9E:B2:C9:40:62:F3:EB:A0
Certificate issuer: /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial: 1E38EFAD544EA822196050CFB12C1096285126F2
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231392e302f32342d3234203d3e20313533333833.roa
Signing time: Thu 12 Mar 2026 08:34:33 +0000
ROA not before: Thu 12 Mar 2026 08:29:33 +0000
ROA not after: Thu 11 Mar 2027 08:34:33 +0000
asID: 153383
IP address blocks: 104.145.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 00:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:38:ef:ad:54:4e:a8:22:19:60:50:cf:b1:2c:10:96:28:51:26:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Validity
Not Before: Mar 12 08:29:33 2026 GMT
Not After : Mar 11 08:34:33 2027 GMT
Subject: CN=607F898CE025DE14AC7585769EB2C94062F3EBA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:17:08:f7:a9:47:9f:1a:2b:dc:54:31:08:d4:
31:c3:c9:75:1e:a9:de:03:d0:b8:01:f3:40:e5:37:
77:70:cd:49:71:ff:ce:4c:f6:4d:a0:93:47:3c:72:
3c:d3:77:7e:1c:b3:9b:0b:de:bd:71:ad:e4:29:52:
1e:d2:86:25:0c:97:ba:5c:3b:4f:6d:02:3d:5f:95:
ac:eb:55:ce:85:af:11:2c:ca:90:ff:56:01:f8:4b:
56:6a:f0:38:e4:7c:9b:ff:f4:29:56:ca:99:a1:4c:
01:09:e4:8c:88:99:98:f9:d2:38:da:69:ea:5d:77:
bf:8d:70:3d:6f:ce:17:e5:b3:e8:0a:ab:61:40:df:
be:9b:4d:4f:cc:12:9d:ff:36:63:cd:e8:f0:48:6c:
65:6f:db:f5:67:0a:92:38:31:60:73:bf:d9:87:75:
0a:7a:cf:be:32:d9:bd:6b:57:97:f7:22:98:28:53:
c9:ad:62:c3:c3:53:b1:ec:90:51:12:4c:1d:20:6d:
e7:7f:c4:7e:c1:49:54:a3:0c:3b:b0:41:b3:30:89:
41:3d:f1:a7:ab:d6:d7:56:59:cf:3c:09:d5:9d:a1:
7f:d1:58:3d:2c:0a:5f:2a:6a:cd:5b:ec:8c:29:6d:
49:40:ab:07:33:66:21:d0:ae:e6:39:41:6e:48:c8:
26:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7F:89:8C:E0:25:DE:14:AC:75:85:76:9E:B2:C9:40:62:F3:EB:A0
X509v3 Authority Key Identifier:
keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231392e302f32342d3234203d3e20313533333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.145.219.0/24
Signature Algorithm: sha256WithRSAEncryption
34:20:bc:62:79:73:6c:fb:14:05:4b:dd:4a:a3:b9:9d:d9:7d:
b5:6c:8e:37:b9:14:6e:c2:2c:52:6b:1f:10:e8:d2:c3:76:a4:
71:06:cc:3d:d4:39:d8:5d:1e:6d:9e:82:da:10:b4:c3:14:8c:
3b:1c:dd:51:ec:fa:bd:98:b8:fa:b3:32:4d:22:d1:fb:3e:92:
f9:1e:18:28:26:d9:8d:cf:42:2a:e5:15:8a:ad:6c:b5:16:82:
68:43:af:d2:f5:22:cc:b8:29:4f:13:5e:a2:53:5d:ee:6b:81:
ff:a2:fd:49:81:b1:2b:b1:8f:b7:af:ec:fa:23:69:0a:61:6f:
65:33:59:e5:a9:70:90:de:4a:cc:f9:1a:b4:ca:37:f6:4c:65:
6c:52:c7:c2:b4:5d:6e:03:aa:1a:ab:5f:85:57:5b:e1:ee:be:
8a:d4:29:b5:7f:14:b0:54:3f:99:40:47:4b:b5:15:f8:56:15:
d6:33:7f:49:37:98:3f:27:50:1d:ea:3f:94:c1:b1:2d:ea:b1:
23:30:31:c4:71:5d:a4:52:5d:4e:a3:b0:07:e0:09:83:8a:3f:
3d:ef:d0:c0:25:d6:54:dd:ee:1b:7d:65:f4:19:f3:87:ca:c4:
a6:c2:c1:fe:fa:23:76:39:b3:81:0a:d1:15:31:d5:bc:21:fc:
78:b7:f0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:42:40 2026 by rpki-client