
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e3235342e302f32332d3233203d3e2035363530.roa
File: 34372e3138382e3235342e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier: Sl/LC1S6uRms5QEkVjwpb6IOQfHsOwGHPNK0s/6+67M=
Subject key identifier: 86:9B:BE:FF:1B:C4:D6:87:86:C4:29:68:FE:28:57:A1:8C:4A:19:F6
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 05EB70D114478FA0CF5C8DE2754A42D8AD9824A7
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e3235342e302f32332d3233203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:26:10 +0000
ROA not before: Fri 01 May 2026 02:21:10 +0000
ROA not after: Fri 30 Apr 2027 02:26:10 +0000
asID: 5650
IP address blocks: 47.188.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 19:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:eb:70:d1:14:47:8f:a0:cf:5c:8d:e2:75:4a:42:d8:ad:98:24:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: May 1 02:21:10 2026 GMT
Not After : Apr 30 02:26:10 2027 GMT
Subject: CN=869BBEFF1BC4D68786C42968FE2857A18C4A19F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:a5:b7:93:98:0a:13:18:b4:d8:d2:67:da:
93:fa:5b:0a:d1:f8:0d:66:9a:1b:f9:22:3a:83:12:
7d:71:3c:c6:64:82:30:b2:9d:e6:2e:15:1e:a3:64:
cd:fb:84:58:98:b2:79:33:df:6f:32:fe:e7:5f:f4:
42:a6:f2:80:27:39:b5:f0:b6:cc:e8:ee:20:fd:30:
20:e6:40:f5:c4:ab:df:13:65:db:89:85:4e:aa:3a:
1c:b9:01:1e:ae:c9:36:60:60:71:8e:9e:6f:b0:02:
cc:5f:54:1f:df:db:2d:07:e3:99:67:81:bf:64:9c:
ce:69:be:a5:8f:55:a6:5d:5b:c9:da:df:a5:fc:36:
bc:01:9a:b0:8e:c0:70:ba:5e:64:30:92:30:ed:43:
3d:09:b1:ef:91:c7:c6:d5:05:2f:1c:10:ca:c1:3a:
ee:cb:ae:70:6b:18:9c:a8:01:e6:7b:22:fe:ef:90:
d0:a4:c6:c8:53:f3:b4:48:1d:0a:bf:cf:5b:2e:b6:
05:44:93:d7:34:e4:fe:5a:6f:04:d5:ad:9b:38:6c:
85:67:ff:00:91:2d:65:10:fd:a2:89:74:ba:05:9e:
b4:90:d5:93:d7:97:1b:36:f4:a1:ff:28:db:99:05:
ed:1f:c1:6e:42:bd:23:46:ba:51:56:a8:fe:9b:12:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9B:BE:FF:1B:C4:D6:87:86:C4:29:68:FE:28:57:A1:8C:4A:19:F6
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e3235342e302f32332d3233203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.188.254.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:42:3f:0e:ac:85:c8:77:7d:e7:47:7c:02:50:a6:9c:b3:be:
75:b8:5f:79:51:e2:90:ed:2c:0b:ae:21:4c:fb:03:f5:bf:db:
15:1c:a5:27:0c:62:2b:92:40:e7:1d:05:63:c5:b8:83:18:e6:
10:fa:c0:c1:79:ba:10:0d:35:5a:3e:19:c8:56:bf:ce:fb:1d:
19:63:32:43:28:92:b8:09:3a:47:c5:e2:4b:35:53:35:65:a1:
99:73:36:e8:f1:7e:ff:a2:6a:05:f5:f1:c9:80:0b:c4:07:c0:
60:03:9a:f4:ac:9b:4b:e0:33:da:9b:de:f5:1d:5f:c9:0b:c9:
6a:2d:ca:7f:7d:df:60:c8:6b:49:8d:c8:e4:55:bd:c3:7b:56:
f9:5b:77:6c:e9:ac:b0:e2:cf:81:f9:ba:9d:07:9e:b8:d2:e8:
7f:f1:87:a4:d1:36:a3:49:ef:c6:1d:c3:66:0a:6c:53:d9:e8:
ae:88:bb:ce:30:82:c0:ec:3a:67:c4:4d:d5:b0:d1:a1:e2:d6:
b7:ae:09:6e:72:da:b6:e3:f5:ff:c4:3c:81:80:d0:90:4d:7a:
d7:c8:5e:d2:b5:34:7c:26:b7:e6:7e:b1:86:7a:40:5c:99:a2:
67:65:2a:19:56:21:43:d2:3e:b5:dd:f8:73:65:f2:24:a2:a9:
5f:0e:7c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:50 2026 by rpki-client