
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138362e3137362e302f32302d3230203d3e2035363530.roa
File: 34372e3138362e3137362e302f32302d3230203d3e2035363530.roa (raw, json)
Hash identifier: gXQN2Q09dd/msxqo4ydiEv4HBtBkvWksN98Ljq+BIsA=
Subject key identifier: BC:64:57:24:A4:B8:00:8C:D8:3A:A6:EF:6B:62:8C:68:F5:D8:E8:48
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 0E47CCE9D040DA141B547B645FFE780A05B19360
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138362e3137362e302f32302d3230203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:26:09 +0000
ROA not before: Fri 01 May 2026 02:21:09 +0000
ROA not after: Fri 30 Apr 2027 02:26:09 +0000
asID: 5650
IP address blocks: 47.186.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 19:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:47:cc:e9:d0:40:da:14:1b:54:7b:64:5f:fe:78:0a:05:b1:93:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: May 1 02:21:09 2026 GMT
Not After : Apr 30 02:26:09 2027 GMT
Subject: CN=BC645724A4B8008CD83AA6EF6B628C68F5D8E848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:c7:ba:7a:22:61:8c:75:5d:a9:b0:70:83:
33:39:d8:40:d3:7b:f3:70:37:30:a1:7a:75:22:50:
5b:ee:9a:03:0b:a6:85:a2:7f:93:48:ec:22:9c:2d:
73:23:17:47:ad:16:6a:48:02:dd:30:ad:2f:3a:79:
1d:fc:3f:0c:1e:09:ba:6c:a4:e0:0c:9e:a5:9c:7b:
eb:9f:17:9a:ce:f0:b4:ff:41:4b:46:a2:b4:f2:fe:
87:b7:ae:a9:52:46:3b:7b:87:62:91:ee:8b:92:91:
2f:ad:2d:05:88:b0:2d:eb:cf:46:fc:94:5d:80:a0:
6b:3d:6f:d4:5b:35:4d:f0:c7:b0:b3:44:e9:91:1a:
fb:77:e9:26:be:eb:52:71:87:db:36:d9:ce:c8:06:
74:20:95:ce:85:d6:82:0e:cd:c0:69:72:02:da:4e:
7a:72:13:55:98:d1:89:24:56:d5:9f:56:46:1a:62:
0b:aa:0d:26:56:e6:f5:9c:cc:8b:a8:4e:8b:a1:be:
8c:78:0d:92:48:c7:0e:f9:14:7e:53:b9:34:eb:53:
25:2f:c0:7a:c8:14:f8:d8:f5:5e:1a:a3:a1:dd:49:
13:b7:92:58:a4:c8:00:77:04:94:2b:41:78:2b:7c:
8e:ba:b3:d3:89:52:b3:ff:e7:34:37:ca:7a:b9:06:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:64:57:24:A4:B8:00:8C:D8:3A:A6:EF:6B:62:8C:68:F5:D8:E8:48
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138362e3137362e302f32302d3230203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.186.176.0/20
Signature Algorithm: sha256WithRSAEncryption
06:6b:6a:c2:97:4c:9f:9f:66:ad:f2:9a:da:1b:d7:60:c7:70:
58:dd:d9:66:a0:3c:00:9a:10:d9:f9:1f:68:3f:8b:ff:17:22:
56:41:90:7c:b6:5f:3f:0f:5a:8c:aa:c1:fb:7e:c7:8e:f7:c9:
7c:43:03:30:9b:68:02:b3:64:7a:eb:8a:99:ff:a3:69:7a:eb:
76:90:cd:2a:75:27:06:2a:79:28:5a:52:fd:c2:7c:e9:27:94:
0e:2f:66:af:13:0c:37:ce:15:6f:e2:2b:41:b8:ac:b3:e0:b5:
34:94:31:af:0a:35:b8:be:b3:d0:41:24:7c:57:a8:6a:54:6a:
c2:96:20:b6:94:1c:21:91:04:8d:bb:a4:e6:ff:a9:6d:7c:dc:
a2:11:04:1a:d6:28:8b:9a:45:1c:0e:a0:c4:75:fc:ca:96:54:
8e:27:9a:6e:ab:35:ab:10:16:f7:6e:05:ed:94:2e:ad:fb:8d:
75:49:b3:b6:3e:a7:f4:4d:e9:f7:4b:28:5e:19:a7:05:ba:99:
94:1e:f9:74:ca:03:66:aa:a7:c6:44:c5:6d:92:7e:e0:97:f6:
3b:eb:15:a5:ad:d6:3e:0c:ca:85:ec:dc:3d:4b:5a:5b:d9:53:
18:9b:a8:08:b1:f5:31:3f:49:3b:cf:33:34:09:a9:e1:78:7e:
db:69:a1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:23 2026 by rpki-client