
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3133392e302f32342d3234203d3e203231363936.roa
File: 3137322e3130382e3133392e302f32342d3234203d3e203231363936.roa (raw, json)
Hash identifier: forCXdw10a+INPNpaKv28ZBF8lz3eoWFPmh1fvb66Q8=
Subject key identifier: FD:2A:3B:CE:AE:31:2A:E5:3E:C5:14:A4:37:30:20:B0:F1:11:4B:D3
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 642146C090AC0D75B2A6C2ED9C3CF35A41E32A2F
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3133392e302f32342d3234203d3e203231363936.roa
Signing time: Fri 01 May 2026 02:26:09 +0000
ROA not before: Fri 01 May 2026 02:21:09 +0000
ROA not after: Fri 30 Apr 2027 02:26:09 +0000
asID: 21696
IP address blocks: 172.108.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 19:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:21:46:c0:90:ac:0d:75:b2:a6:c2:ed:9c:3c:f3:5a:41:e3:2a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: May 1 02:21:09 2026 GMT
Not After : Apr 30 02:26:09 2027 GMT
Subject: CN=FD2A3BCEAE312AE53EC514A4373020B0F1114BD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:8d:ce:1f:56:61:65:95:94:50:da:d1:99:
f2:58:ee:9e:0c:4b:52:8b:e2:3e:00:e8:4f:cf:46:
45:23:ce:f5:80:13:5c:80:3c:85:df:5b:7a:cf:93:
68:eb:73:e6:0b:e1:1f:da:f5:01:e8:81:85:db:af:
ce:2a:9c:d6:d7:7a:2e:b5:65:ed:60:87:e7:bd:3a:
43:7e:67:14:65:05:07:2b:d0:5e:1c:f7:78:ab:c5:
c0:44:c0:a6:12:16:d0:df:bc:0b:79:39:ce:dd:03:
24:df:47:c2:9c:02:73:9f:d5:35:f2:47:13:14:fe:
a4:59:be:c0:0a:eb:05:13:2b:88:3a:12:86:05:d3:
75:23:69:6f:8d:92:35:ca:d0:f6:69:95:bd:88:4b:
bf:08:0a:7c:88:d8:43:e4:d7:b0:d4:4f:1a:f2:c9:
91:c8:46:4a:78:16:f2:3a:32:ba:64:cb:c0:97:24:
d7:a2:c0:33:76:86:8f:16:13:2f:b2:4d:a6:3e:ba:
95:56:bc:26:e4:05:af:eb:45:96:c4:32:7e:c1:3c:
7a:c3:76:34:f8:75:4d:1d:76:50:58:d5:51:3b:a5:
c0:60:5e:26:80:54:3f:ed:b3:62:88:cb:21:45:e6:
e3:e4:ae:35:28:db:ad:c7:ae:c8:24:d9:5a:63:e7:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2A:3B:CE:AE:31:2A:E5:3E:C5:14:A4:37:30:20:B0:F1:11:4B:D3
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3133392e302f32342d3234203d3e203231363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.108.139.0/24
Signature Algorithm: sha256WithRSAEncryption
56:20:93:93:16:65:45:07:2f:2f:fe:b0:53:55:b6:5b:9f:52:
7c:62:30:8e:45:04:fd:0b:3b:76:18:48:ec:58:9a:b7:68:f4:
b8:df:48:ab:4c:44:c4:ca:ea:12:94:d1:33:6b:90:3a:08:cf:
12:7f:3a:89:b0:2c:7b:0a:84:e1:63:58:8b:6f:a5:40:d4:43:
99:cd:5f:a4:35:db:53:cf:bb:bd:5c:1d:5b:35:30:62:37:ba:
1c:15:ba:f3:5d:f9:11:c8:36:7d:10:3a:a3:f5:35:e9:88:00:
0b:be:33:a9:0b:3c:7e:a4:f6:2d:8b:28:ae:6f:5c:ce:10:8b:
ea:2b:1d:f2:99:b2:cd:ce:de:50:34:b5:76:39:07:df:20:6e:
e1:f3:07:15:62:4a:22:04:cb:87:42:d9:c1:68:57:67:36:32:
a0:6b:bf:1d:d9:b3:e3:e6:0a:6c:2c:13:4f:1f:56:5f:6e:cc:
6c:5e:42:35:50:14:68:18:e7:47:a6:64:cc:08:53:ce:0d:a8:
03:a0:a2:5a:66:ec:a4:08:cd:48:89:7e:de:61:90:7e:60:a4:
4d:f8:6f:e0:2b:d1:d8:5e:39:11:c7:17:f3:0e:9a:60:a8:4b:
3f:88:a6:89:08:7b:82:21:73:62:92:3d:d5:45:2d:da:87:02:
59:57:1e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:26 2026 by rpki-client