
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e34302e302f32312d3231203d3e2035363530.roa
File: 3137322e3130382e34302e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier: T0dDjgOyDWzWd76gTWEXNOmD8v20RFq4MTsjCNjUCuc=
Subject key identifier: 4D:62:2E:2E:89:2C:08:0B:88:D2:03:42:6F:FB:7C:F5:4B:F7:37:3D
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 06CC46282DB57E984B8937D90C8166631994D22F
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e34302e302f32312d3231203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:26:10 +0000
ROA not before: Fri 01 May 2026 02:21:10 +0000
ROA not after: Fri 30 Apr 2027 02:26:10 +0000
asID: 5650
IP address blocks: 172.108.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 19:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:cc:46:28:2d:b5:7e:98:4b:89:37:d9:0c:81:66:63:19:94:d2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: May 1 02:21:10 2026 GMT
Not After : Apr 30 02:26:10 2027 GMT
Subject: CN=4D622E2E892C080B88D203426FFB7CF54BF7373D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7c:9c:15:a4:12:42:16:14:eb:5d:9c:b4:60:
b1:1c:3a:78:b6:e4:69:f7:01:05:56:94:cd:02:99:
aa:16:4c:26:d9:c2:88:d7:c0:06:02:23:54:52:25:
8c:da:66:93:f5:bf:d8:11:a0:f3:0b:36:84:ef:23:
e7:73:28:0a:bd:1b:96:62:2f:b6:bc:87:b1:8c:21:
f0:76:bb:ac:a3:4c:15:ed:93:58:04:07:ed:df:1e:
9c:e3:e5:4c:78:ce:e1:7f:17:de:b3:e0:ec:fb:f4:
43:67:c2:d3:75:be:f4:bc:58:68:44:51:52:de:29:
fd:4e:19:09:95:af:76:64:63:67:80:d5:12:33:23:
4c:b8:d7:7d:64:c2:ea:b0:a3:71:a4:f0:a6:ef:2e:
d6:86:82:e4:64:82:42:46:b4:7e:fe:b2:c1:08:9d:
f1:cb:f2:73:0c:67:fc:af:8d:d4:de:45:fa:03:05:
c8:33:11:8c:a9:7d:c7:e4:35:ea:77:b4:b3:4a:92:
64:e9:ef:11:00:34:38:d1:8d:9f:da:05:b9:a4:ba:
1a:f6:93:2a:92:0a:3a:4a:cc:4c:bf:8e:ef:95:24:
16:38:56:a0:0f:cd:b9:46:c8:14:9d:c8:d4:58:ba:
fa:fd:de:47:6f:ee:d2:4c:d7:37:07:df:23:cb:58:
72:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:62:2E:2E:89:2C:08:0B:88:D2:03:42:6F:FB:7C:F5:4B:F7:37:3D
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e34302e302f32312d3231203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.108.40.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:12:96:d1:f6:2f:0e:4f:df:ed:3c:8f:6d:ad:80:34:13:09:
0a:7f:cf:54:47:90:95:cc:b6:3a:f2:e4:36:6d:c0:0f:2a:ca:
aa:9a:22:2e:45:12:f2:04:b6:13:6e:c0:cd:19:8e:11:05:78:
b7:03:54:33:38:0a:9c:93:9c:04:2d:ba:1d:8d:bb:ff:cd:fc:
88:de:d6:b3:2e:e1:cf:59:ba:55:ff:61:76:78:30:8f:9c:49:
a9:61:b6:1b:12:e5:5e:e3:a7:59:05:03:f2:34:16:f5:0e:cc:
75:ba:0b:0a:1c:d8:8e:b7:e0:b5:43:d0:c9:4a:4c:62:59:ba:
d5:ce:2a:79:f2:b6:2a:68:c6:30:dd:b9:bf:56:86:4c:00:6e:
1d:19:de:e2:bc:25:09:04:8a:de:4f:39:ca:e1:39:96:03:a2:
0b:58:f5:b0:30:26:f6:df:db:fa:8c:8f:ee:56:c7:6e:1c:f0:
74:79:99:ec:69:2b:a8:6d:6e:51:1c:22:a1:de:41:fb:5d:47:
b7:61:47:3a:b0:0f:14:e1:05:ec:77:b3:8a:5e:a7:be:8e:60:
58:f3:7c:58:af:9b:c5:c2:54:3d:fa:0a:82:f7:8a:e0:45:7c:
01:0c:5a:cc:7b:44:3a:fc:c1:13:a8:06:7f:81:bb:a6:ab:71:
d5:41:22:19
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUBsxGKC21fphLiTfZDIFmYxmU0i8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjYwNTAxMDIyMTEwWhcNMjcwNDMwMDIyNjEw
WjAzMTEwLwYDVQQDEyg0RDYyMkUyRTg5MkMwODBCODhEMjAzNDI2RkZCN0NGNTRC
RjczNzNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HycFaQSQhYU
612ctGCxHDp4tuRp9wEFVpTNApmqFkwm2cKI18AGAiNUUiWM2maT9b/YEaDzCzaE
7yPncygKvRuWYi+2vIexjCHwdruso0wV7ZNYBAft3x6c4+VMeM7hfxfes+Ds+/RD
Z8LTdb70vFhoRFFS3in9ThkJla92ZGNngNUSMyNMuNd9ZMLqsKNxpPCm7y7WhoLk
ZIJCRrR+/rLBCJ3xy/JzDGf8r43U3kX6AwXIMxGMqX3H5DXqd7SzSpJk6e8RADQ4
0Y2f2gW5pLoa9pMqkgo6SsxMv47vlSQWOFagD825RsgUncjUWLr6/d5Hb+7STNc3
B98jy1hyTQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFE1iLi6JLAgLiNIDQm/7fPVL
9zc9MB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzMxMzczMjJlMzEzMDM4MmUzNDMwMmUzMDJmMzIzMTJkMzIz
MTIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOsbCgwDQYJKoZIhvcNAQELBQAD
ggEBAKMSltH2Lw5P3+08j22tgDQTCQp/z1RHkJXMtjry5DZtwA8qyqqaIi5FEvIE
thNuwM0ZjhEFeLcDVDM4CpyTnAQtuh2Nu//N/Ije1rMu4c9ZulX/YXZ4MI+cSalh
thsS5V7jp1kFA/I0FvUOzHW6Cwoc2I634LVD0MlKTGJZutXOKnnytipoxjDdub9W
hkwAbh0Z3uK8JQkEit5POcrhOZYDogtY9bAwJvbf2/qMj+5Wx24c8HR5mexpK6ht
blEcIqHeQftdR7dhRzqwDxThBex3s4pep76OYFjzfFivm8XCVD36CoL3iuBFfAEM
Wsx7RDr8wROoBn+Bu6arcdVBIhk=
-----END CERTIFICATE-----
Generated at Tue May 12 22:33:00 2026 by rpki-client