
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130392e302f32342d3234203d3e2035363530.roa
File: 3137322e3130382e3130392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: 2gbBfLAk7GPRBJVzBXHtOMqRGdU+PqyDe+pqtlqT7zk=
Subject key identifier: 3B:91:40:6F:75:8C:C7:BD:E5:BB:01:51:BF:F6:E9:68:7A:9E:AB:D6
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 57AA15C1D8C477C6CB4881BAF11A23670CD43879
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130392e302f32342d3234203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:26:12 +0000
ROA not before: Fri 01 May 2026 02:21:12 +0000
ROA not after: Fri 30 Apr 2027 02:26:12 +0000
asID: 5650
IP address blocks: 172.108.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 19:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:aa:15:c1:d8:c4:77:c6:cb:48:81:ba:f1:1a:23:67:0c:d4:38:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: May 1 02:21:12 2026 GMT
Not After : Apr 30 02:26:12 2027 GMT
Subject: CN=3B91406F758CC7BDE5BB0151BFF6E9687A9EABD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:87:dc:6a:9b:90:02:fb:42:19:76:7c:5f:
6e:51:82:ec:9a:6b:30:b1:48:1c:7e:a9:e0:ac:1c:
66:b3:47:02:6b:88:4a:ab:22:54:df:3c:ba:3f:c6:
18:a6:88:b6:b6:3e:6b:c4:29:85:1c:b2:ec:09:76:
42:ee:6f:51:6f:1b:d4:95:6a:4c:cc:28:49:0a:0c:
78:fb:91:23:91:23:49:08:ae:47:1e:28:5b:41:4f:
da:34:39:b5:b5:65:45:02:38:00:ce:80:8a:2b:8b:
10:34:94:9a:e1:50:45:c7:fa:a5:ca:34:9b:54:b7:
7d:ee:37:46:09:e4:f8:33:91:c5:0d:a2:65:11:4b:
a6:3f:d5:65:93:f6:4e:6e:7f:af:a3:dd:6e:18:be:
6a:81:8c:82:75:da:67:fc:e5:38:f6:0b:1f:fc:cb:
69:13:70:29:d4:a8:95:11:83:96:10:74:e6:1e:f0:
b6:16:46:49:c0:c2:f2:ff:ba:2e:bd:db:c1:7b:a3:
55:de:d1:9e:56:15:40:5c:6a:39:29:3a:c4:78:a6:
04:bc:a3:9e:26:7c:ad:6f:25:ad:b3:3b:93:fd:72:
7e:76:65:aa:a4:af:29:52:50:b0:08:94:12:30:88:
9c:60:49:67:27:f1:ff:ae:d4:fe:d9:14:d3:69:23:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:91:40:6F:75:8C:C7:BD:E5:BB:01:51:BF:F6:E9:68:7A:9E:AB:D6
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130392e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.108.109.0/24
Signature Algorithm: sha256WithRSAEncryption
71:02:b0:4b:46:65:15:8e:60:b9:0f:ad:8e:02:cb:40:33:9b:
82:12:ae:d7:4a:2c:61:27:80:4d:c5:59:c8:63:5d:9b:16:ef:
2b:f0:70:58:b3:a1:c4:43:16:1e:d5:df:5f:d9:d9:93:94:9b:
79:d0:22:c8:f6:bb:a2:06:0f:eb:60:e0:db:e8:db:93:8b:e2:
ec:79:04:31:24:89:89:d0:58:64:66:8e:a7:8b:79:93:11:f7:
bd:0e:65:c1:54:ff:bf:96:c3:e1:e7:5d:28:bc:8a:dc:81:81:
66:36:2d:29:a0:80:e0:6d:0d:43:73:e6:fc:c3:76:2f:1b:96:
36:6c:4e:0a:36:0d:61:35:5c:e3:98:cd:96:ad:77:89:6e:42:
d9:6f:52:ff:47:54:9a:25:90:dc:0f:91:ec:c1:5a:aa:a7:ed:
1d:90:90:a7:71:45:64:1f:62:82:68:91:87:5d:cd:c0:b7:51:
a8:2f:74:6c:b9:4e:21:3b:3f:e7:9e:4f:de:d2:25:92:36:ff:
de:f9:8f:42:55:52:ed:52:55:1a:69:32:4c:8a:96:92:25:59:
30:53:71:5e:6e:15:c4:1c:82:1c:50:5d:a2:99:8c:f1:2a:76:
86:4d:71:2e:a0:e4:c5:79:ed:c3:98:6b:f9:5a:f5:f4:4b:c7:
5c:36:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:33 2026 by rpki-client