
$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/32332e3133312e3231362e302f32342d3234203d3e203138383534.roa
File: 32332e3133312e3231362e302f32342d3234203d3e203138383534.roa (raw, json)
Hash identifier: jJuSmMZqS32j4qQYMYv1INo7yl31mpMyPFkYVoxh5uU=
Subject key identifier: F4:B2:21:22:26:A5:2F:B5:37:C4:6E:F9:F3:59:B4:3D:A8:B8:E0:0F
Certificate issuer: /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial: 2EFD147AB8B7D7A078E6A7581BA4D7383EC86E99
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/32332e3133312e3231362e302f32342d3234203d3e203138383534.roa
Signing time: Wed 22 Apr 2026 06:10:33 +0000
ROA not before: Wed 22 Apr 2026 06:05:33 +0000
ROA not after: Wed 21 Apr 2027 06:10:33 +0000
asID: 18854
IP address blocks: 23.131.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 08:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:fd:14:7a:b8:b7:d7:a0:78:e6:a7:58:1b:a4:d7:38:3e:c8:6e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Validity
Not Before: Apr 22 06:05:33 2026 GMT
Not After : Apr 21 06:10:33 2027 GMT
Subject: CN=F4B2212226A52FB537C46EF9F359B43DA8B8E00F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9e:73:c9:4a:7b:18:59:b8:ed:ca:52:da:fb:
66:c2:d2:04:41:bf:f1:80:91:a8:45:cf:1e:15:81:
f3:16:ae:10:70:fd:dd:5e:b2:81:89:e6:27:a1:b7:
dc:a5:14:c8:5a:d8:c6:48:9d:20:ba:d2:ad:07:6d:
87:9b:6c:9b:76:66:7d:bc:65:fb:d0:77:37:5e:60:
c4:da:7a:fb:43:9b:9d:3c:28:c6:21:02:76:2d:e7:
f9:97:76:e0:d3:77:4b:4c:d0:bf:ae:a6:75:fc:0a:
33:a7:d6:03:a8:15:c9:2e:dc:41:7d:a4:1b:72:fa:
b3:87:aa:e2:48:07:ae:0f:d2:5a:ef:b1:32:91:7c:
42:14:12:d5:a3:50:f8:ed:69:75:e8:3f:98:12:ea:
ec:9c:3b:bb:7b:82:76:22:78:11:ab:ff:f5:6c:d0:
64:d4:3f:ad:9f:7d:50:a7:61:50:fb:55:f5:29:93:
c4:d7:49:4c:7b:85:f1:6a:33:c2:ac:b0:9a:b1:a6:
bf:39:29:6e:b4:83:35:0f:f7:f3:c0:5a:d9:f2:19:
6d:fd:9e:d8:19:34:22:de:ea:c1:69:41:32:16:59:
1b:36:b1:c9:f8:39:6f:ba:ff:ee:32:e1:fd:f8:08:
a8:2b:d5:e4:36:4e:fb:3a:a7:f5:29:a8:a6:20:6c:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B2:21:22:26:A5:2F:B5:37:C4:6E:F9:F3:59:B4:3D:A8:B8:E0:0F
X509v3 Authority Key Identifier:
keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/32332e3133312e3231362e302f32342d3234203d3e203138383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.131.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:65:10:b3:4e:0b:cb:87:3b:fb:9e:91:3c:94:e7:a2:18:3d:
d7:19:94:95:29:89:51:38:56:4c:73:f0:c4:ac:99:48:7b:02:
70:b7:06:f1:61:99:5a:da:84:42:b5:0f:4a:56:af:67:6b:6e:
ca:3d:6f:90:f5:84:c7:90:38:6d:3e:07:f6:63:7f:1c:72:5f:
57:5a:cc:0e:45:48:31:f1:1f:5e:e6:2b:1a:59:6a:58:81:ce:
e5:3d:89:bb:cf:84:8d:9b:b1:24:c8:e3:90:d1:9b:3e:d8:58:
b1:e6:e2:24:6c:85:7b:05:62:f9:2a:2c:30:51:86:45:ee:23:
f8:96:3f:c9:6b:76:8c:80:f2:b7:b8:3f:7f:f4:85:4e:36:6f:
f4:19:85:6c:75:02:a8:45:3c:45:59:28:09:87:5b:e2:16:46:
59:90:03:49:8c:1b:38:df:1f:72:dc:93:05:47:09:b7:17:1f:
8e:95:4c:87:50:2c:e6:b0:d1:3c:01:3e:ea:d3:6c:59:f4:2e:
36:b2:94:3e:6c:de:5d:a6:96:f2:36:a4:63:dd:65:5b:ab:b7:
08:6b:ed:68:a2:31:78:cd:0c:83:b8:ac:02:a0:0c:a3:92:d7:
8e:7a:84:64:41:1a:8b:61:8c:c5:a7:3f:f1:de:86:94:17:4f:
fd:eb:f0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:41 2026 by rpki-client