
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3133382e302f32332d3233203d3e2035363530.roa
File: 34372e3139302e3133382e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier: B0HIOsaHg3J655bZQNjzFZRvHOPVYqZaJRyMyW1/1fM=
Subject key identifier: 4D:E9:68:BE:61:5D:B4:55:FD:79:45:52:F2:09:B3:CE:34:09:05:C7
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 4F00E3F69C67DC043E001247FF993C0FFDB9D094
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3133382e302f32332d3233203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:26:10 +0000
ROA not before: Fri 01 May 2026 02:21:10 +0000
ROA not after: Fri 30 Apr 2027 02:26:10 +0000
asID: 5650
IP address blocks: 47.190.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 19:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:00:e3:f6:9c:67:dc:04:3e:00:12:47:ff:99:3c:0f:fd:b9:d0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: May 1 02:21:10 2026 GMT
Not After : Apr 30 02:26:10 2027 GMT
Subject: CN=4DE968BE615DB455FD794552F209B3CE340905C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:c2:5e:d2:15:82:4f:7a:9f:da:7a:e9:95:
1c:83:b6:27:08:7a:cc:62:8c:52:f7:b2:bd:31:cb:
85:4c:ed:f3:2c:1a:d1:de:a9:c2:50:82:c1:47:36:
72:a9:08:f3:81:99:7b:ae:2e:99:59:cf:e0:6d:36:
39:42:e5:2e:16:a4:7d:3c:0f:ba:32:95:5e:04:70:
e7:dc:d5:f1:31:05:00:b3:15:55:65:18:fd:4c:e5:
31:b1:b5:15:c2:19:95:21:78:61:06:b3:2d:15:15:
51:0d:4a:f6:47:6d:b8:62:69:5a:fb:1c:3f:86:37:
4e:e7:7d:1d:8d:d2:f5:ee:36:5f:4c:78:c8:cb:c7:
26:23:c0:cb:12:a7:b8:fb:0d:33:b7:a0:7d:20:cd:
a5:4a:d5:ec:a2:1f:17:58:20:5e:ba:be:c5:05:dd:
cf:41:d7:a5:3d:a9:ae:f1:67:fe:3e:55:ed:a6:cc:
1b:46:b0:e4:8b:52:7c:d2:40:65:36:7a:fe:fe:bb:
19:03:2d:8a:99:ce:3a:5c:8f:fb:ef:49:1a:de:74:
a2:2e:3e:58:1b:04:fe:cd:26:ea:fd:1b:68:75:b8:
29:3e:7f:f2:89:0c:40:95:ac:fe:7c:45:4f:91:24:
90:d6:13:ef:90:2b:97:f2:40:6e:e6:31:fc:d3:56:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E9:68:BE:61:5D:B4:55:FD:79:45:52:F2:09:B3:CE:34:09:05:C7
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3133382e302f32332d3233203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.190.138.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:0c:2a:51:39:0d:73:31:50:9d:6f:d4:44:c0:84:da:dc:0b:
91:87:e2:cc:2d:71:05:39:8a:24:f3:46:0b:eb:c1:44:a3:b0:
47:49:1b:18:4b:c2:f9:b7:9a:9a:3a:7d:45:b9:64:0c:05:33:
a8:11:b1:7b:4a:96:7e:f2:21:2a:01:fa:d9:01:ac:33:ed:b4:
7a:f9:5c:7c:b7:b0:77:f5:29:6d:11:ff:eb:b4:8d:d1:98:c8:
42:78:0a:d3:77:b6:bc:07:41:6f:5a:da:5a:99:6f:bc:fd:08:
37:3d:86:20:c6:22:08:9c:a8:5c:59:61:61:32:82:5b:1a:b3:
35:90:67:b7:d1:31:6d:2d:f1:6a:1d:89:1d:d8:d4:d9:32:8a:
20:c2:bf:62:3c:4a:e7:52:ac:74:81:a8:ef:04:11:62:af:81:
59:43:f0:e9:ff:e7:a9:f3:e2:3d:d6:e3:b1:3e:0d:8a:88:dd:
0d:09:25:ad:55:41:8a:ea:01:a9:2f:b9:18:51:00:e4:c7:da:
56:3a:50:ae:0e:e3:a5:7d:3d:ba:98:5c:ee:fd:96:a8:ac:4f:
84:12:e9:18:f5:b3:1e:34:70:c1:22:a7:3f:81:0d:21:1a:00:
b0:8c:7f:c0:d9:32:32:29:5f:be:db:81:30:15:ed:84:32:3a:
f4:d6:41:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:13:07 2026 by rpki-client