
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e302e302f31372d3137203d3e2035363530.roa
File: 34372e3138392e302e302f31372d3137203d3e2035363530.roa (raw, json)
Hash identifier: q6kbx6bcdkGkxSLaXviMyjKczX1Y8bRLJ437zz3LyVw=
Subject key identifier: F7:02:C5:66:3A:E3:E8:FA:A1:2D:B9:96:55:56:AC:86:B3:83:30:E9
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 5CF01C40EB9711B9E23EE9DFDBAE7038A6EC4EFA
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e302e302f31372d3137203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:26:10 +0000
ROA not before: Fri 01 May 2026 02:21:10 +0000
ROA not after: Fri 30 Apr 2027 02:26:10 +0000
asID: 5650
IP address blocks: 47.189.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 19:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:f0:1c:40:eb:97:11:b9:e2:3e:e9:df:db:ae:70:38:a6:ec:4e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: May 1 02:21:10 2026 GMT
Not After : Apr 30 02:26:10 2027 GMT
Subject: CN=F702C5663AE3E8FAA12DB9965556AC86B38330E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:68:02:b2:64:72:93:70:2e:65:17:40:32:40:
13:db:d6:ef:82:e1:17:d6:62:5f:06:08:64:47:2a:
21:b1:02:e5:07:c1:ce:63:f5:d0:65:c1:8f:31:52:
90:f3:7f:f8:ed:0a:a5:55:ca:79:1f:7f:28:56:c6:
16:14:da:12:ec:98:a5:95:78:22:a2:96:f1:f0:03:
c7:d8:7a:04:68:04:25:2c:7d:c8:b0:14:ee:99:ac:
f1:74:44:ca:25:41:de:30:19:66:33:99:14:d5:5c:
c2:c0:93:8d:8e:48:e5:26:49:96:f0:da:ad:51:ad:
43:9a:9c:b2:7d:f7:17:c7:f7:bd:a1:66:dd:9a:91:
85:c9:f2:6f:48:ee:86:ed:7f:20:16:ff:69:e6:f5:
67:81:11:14:7f:49:3f:27:e0:ee:ff:a0:d9:9c:18:
bb:ab:36:a9:04:e6:a4:8a:69:09:15:76:3a:97:b8:
71:ae:45:75:cf:4e:c6:df:9d:81:b5:ba:d1:73:a3:
6f:17:29:2b:4d:00:c3:18:ea:fd:c4:59:29:5f:fb:
6d:ae:a0:17:d9:40:e3:93:ac:a0:24:e9:0d:f2:18:
3c:1b:97:32:c3:97:05:8d:6e:6c:5d:0a:4b:40:f3:
6f:22:fc:5e:1d:7a:67:cd:21:80:f7:47:de:a2:72:
77:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:02:C5:66:3A:E3:E8:FA:A1:2D:B9:96:55:56:AC:86:B3:83:30:E9
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e302e302f31372d3137203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.189.0.0/17
Signature Algorithm: sha256WithRSAEncryption
61:63:60:db:fb:21:43:65:08:cb:3e:e4:d2:a9:84:bf:e2:56:
9f:ee:27:53:e4:8d:07:af:90:00:5f:d9:7d:d9:82:c7:1e:16:
30:5d:2c:65:04:54:29:6e:b6:18:2c:92:9a:cb:98:c8:c5:5e:
83:13:a9:99:cd:9a:54:4d:96:2c:7c:89:6c:86:90:f1:57:3e:
84:3d:26:1d:a5:fb:e9:0a:8f:78:0b:cb:87:b4:af:c6:82:94:
ac:e7:e7:1d:71:0d:ff:13:96:17:f2:7c:31:f4:cf:8d:3a:3a:
42:e3:f2:c8:4c:53:09:76:b3:54:6b:c5:97:ed:78:a2:33:33:
da:21:86:93:53:a5:e2:65:8c:db:a6:37:8e:cc:7b:30:9c:66:
ad:99:ed:3c:47:59:4b:56:30:1e:30:27:51:b4:3a:5c:d0:c9:
0e:b8:84:33:2c:c2:69:c6:bc:98:ad:05:23:9f:42:9e:ff:44:
37:de:aa:01:1d:a3:0c:c6:96:f5:5d:11:49:6b:1c:e1:02:dd:
b8:d5:b6:51:17:46:b2:f8:ec:3a:78:cd:c8:0f:3e:a7:5a:93:
b4:1d:f8:75:e4:ae:63:fa:af:fa:17:71:ef:09:fa:b7:1a:d6:
2d:fa:54:52:87:a8:53:33:06:7d:0f:a7:82:ad:4c:91:ea:5a:
c8:65:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:50 2026 by rpki-client