
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e39362e302f32342d3234203d3e2035363530.roa
File: 3137322e3130382e39362e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: 65ndNqRYlddn54Ry0Qxf0nSx4Bw6dNHk7u7QLQEG66M=
Subject key identifier: CA:9D:F6:6C:EF:4B:68:25:1B:DC:2E:41:71:6C:D0:A1:60:82:C8:2D
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 0FAE4B3F06EBB9771CD701EA003534AB54FE414A
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e39362e302f32342d3234203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:26:10 +0000
ROA not before: Fri 01 May 2026 02:21:10 +0000
ROA not after: Fri 30 Apr 2027 02:26:10 +0000
asID: 5650
IP address blocks: 172.108.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 19:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ae:4b:3f:06:eb:b9:77:1c:d7:01:ea:00:35:34:ab:54:fe:41:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: May 1 02:21:10 2026 GMT
Not After : Apr 30 02:26:10 2027 GMT
Subject: CN=CA9DF66CEF4B68251BDC2E41716CD0A16082C82D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b8:da:81:ac:40:71:81:ba:09:51:80:53:b5:
90:53:b3:2f:91:6b:60:14:2d:69:13:a2:1f:59:62:
74:1e:56:82:bd:6d:9d:28:1f:93:4b:03:6a:07:aa:
b4:28:91:c1:00:ce:71:4e:cd:65:f1:a5:53:22:16:
e6:a4:09:e1:4d:50:2e:97:99:cc:e5:97:d8:94:09:
be:d3:46:d4:43:4d:82:bc:cf:16:71:d1:f0:2b:ac:
00:9c:8b:9d:8d:70:dd:d9:23:d4:10:e2:09:99:c0:
49:0f:92:51:ef:d3:37:01:a2:5f:33:ff:4c:2e:4d:
af:56:96:50:e5:12:3f:4b:b4:a1:c8:a9:27:b9:1f:
b2:e2:10:dc:a6:0a:76:b1:5a:92:22:32:9d:b2:96:
93:7a:d7:9d:1f:b1:2a:68:f7:73:de:2a:36:d4:83:
b8:e3:5b:0d:3b:83:0e:eb:03:66:04:75:8e:42:52:
bb:ed:a0:ad:ce:fc:a3:c6:54:11:a3:6e:cb:8c:6f:
58:72:4f:ee:a3:4a:bf:d5:bb:e5:25:ed:eb:94:33:
7d:dd:33:60:33:d1:27:c7:b2:0f:78:e0:cf:77:a0:
ac:59:7b:2f:eb:1f:f4:2c:28:cf:34:f3:b0:b6:24:
b1:35:3d:11:6d:05:5d:8b:ed:35:71:1e:8b:2b:5d:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9D:F6:6C:EF:4B:68:25:1B:DC:2E:41:71:6C:D0:A1:60:82:C8:2D
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e39362e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.108.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:af:a6:c7:3d:0b:66:55:74:78:fa:44:6f:e3:a6:7a:6a:7e:
fb:48:ac:55:2c:bc:01:7d:38:08:e6:ce:1b:a2:03:61:39:5b:
84:09:a9:85:2d:fe:c4:4e:b3:e9:0f:a4:7e:8b:a3:59:6a:f4:
4c:19:54:28:db:ef:08:53:7f:9d:1f:88:0e:38:83:f8:da:db:
10:02:cd:25:3a:d7:09:e5:65:d0:03:1d:db:02:b5:41:8b:83:
07:c9:14:6f:8c:12:94:f6:e6:04:a2:60:ec:18:a6:58:69:50:
fa:60:15:a9:3f:00:39:c4:56:3e:29:96:7e:30:4a:be:3b:91:
45:c8:fa:da:eb:47:84:dd:66:9c:e0:9b:8c:57:a6:a8:c3:9f:
ee:2a:c6:72:9e:4e:26:78:c3:6b:2f:5c:26:c4:03:f6:e9:98:
81:32:70:c8:8c:87:1d:b2:f4:68:9f:c0:8c:e8:26:df:9b:a2:
a2:c0:50:ab:02:14:68:5d:54:c8:e4:4f:76:13:ec:d2:05:7f:
cf:dc:78:1b:18:21:14:91:fd:99:c3:31:79:0e:84:ab:eb:e5:
2d:70:16:59:29:77:b8:a6:18:47:72:c4:f7:f9:cd:9a:91:f1:
51:72:5c:e9:12:ac:f7:de:f6:70:22:ff:20:7a:eb:c4:56:54:
72:e0:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:38 2026 by rpki-client