
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3134342e302f32312d3231203d3e2035363530.roa
File: 34372e3139302e3134342e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier: Hoqg3LhLo9Acd4aZOX4/fhEb4LFNqEpXI02JF7e00gQ=
Subject key identifier: 65:8C:A8:2C:04:90:E4:8B:E1:59:2A:46:17:5E:77:26:AD:47:6E:1D
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 356DD19272CF7D8AB3AE48298A483B9C23E5C9FC
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3134342e302f32312d3231203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:26:12 +0000
ROA not before: Fri 01 May 2026 02:21:12 +0000
ROA not after: Fri 30 Apr 2027 02:26:12 +0000
asID: 5650
IP address blocks: 47.190.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 19:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:6d:d1:92:72:cf:7d:8a:b3:ae:48:29:8a:48:3b:9c:23:e5:c9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: May 1 02:21:12 2026 GMT
Not After : Apr 30 02:26:12 2027 GMT
Subject: CN=658CA82C0490E48BE1592A46175E7726AD476E1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:f8:f1:e0:67:e0:61:41:de:ad:15:8f:97:
7b:49:ee:60:0c:57:35:07:18:fd:7f:78:e9:db:a5:
b8:4e:d5:6d:0a:27:1b:dc:7c:26:6a:d2:4b:af:77:
b8:c4:a8:fb:70:80:94:f4:44:56:e9:d6:30:00:0a:
11:86:37:7a:b9:50:54:1c:37:65:8c:5e:1e:dc:e1:
3d:a6:b9:ab:a7:c7:23:48:3e:bd:f7:2d:87:19:1e:
a2:60:ef:44:34:98:0d:9e:55:3b:85:ae:1c:42:3b:
56:b3:d8:7a:bd:29:29:84:74:91:1c:60:b9:dd:99:
e6:ae:9f:9e:85:66:e5:ad:c8:2f:5f:0a:e6:32:8e:
09:0f:ed:4c:92:d9:a5:08:74:cb:d0:28:f7:a7:9d:
d8:73:c9:eb:34:1e:0a:73:60:0e:9c:d6:1f:d4:3c:
92:ea:ac:f1:e9:1b:5e:f1:66:cc:5e:28:33:da:a3:
ac:d1:bf:1f:e4:fe:a2:8b:79:aa:04:22:e2:ce:8d:
54:40:0f:4f:e4:9d:66:fd:89:c2:38:30:70:b7:06:
b0:9c:83:91:37:8b:8a:32:95:97:d1:da:c3:05:fa:
76:50:a8:36:71:01:4c:16:5d:1a:c5:e0:62:32:f0:
16:39:07:90:87:94:53:e7:1f:1c:c7:d8:5c:4f:e9:
6e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8C:A8:2C:04:90:E4:8B:E1:59:2A:46:17:5E:77:26:AD:47:6E:1D
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3134342e302f32312d3231203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.190.144.0/21
Signature Algorithm: sha256WithRSAEncryption
58:e0:3d:a0:19:48:76:f7:66:3f:f8:73:e8:d9:da:85:63:77:
87:bd:44:93:db:c4:e4:cc:8e:55:ac:50:71:58:6b:3c:74:5e:
91:bb:cf:18:1c:b1:97:07:3e:06:6a:b3:61:91:06:9f:e3:87:
70:34:34:d3:39:da:10:68:9f:88:6e:fe:62:a5:54:fa:2e:2f:
50:15:d8:5c:d9:7e:cf:40:1a:62:f6:84:8e:1b:0d:41:e0:58:
f1:56:1f:23:05:d0:52:d0:28:2e:ac:94:92:7c:72:0d:e3:a5:
ee:f0:3c:78:b3:08:f8:1d:2f:ce:63:64:06:5b:20:8c:d4:78:
f0:9d:b8:71:fe:c6:8a:34:fc:3b:22:60:23:c9:39:87:2b:6c:
e6:ea:e7:1c:a6:6a:c7:c4:b7:b8:2e:9c:5b:f4:bb:3b:9d:da:
a4:6a:f7:36:c5:f9:94:f3:8a:83:3c:fa:68:b0:e9:c3:81:e9:
6a:98:6a:55:87:1d:60:87:d6:40:f1:09:00:41:dd:1e:91:cd:
07:36:e5:fc:51:f6:c3:aa:b1:8a:67:e0:69:fd:ff:0e:29:46:
7d:94:ab:3b:8f:d6:92:5b:93:2e:48:11:78:d1:be:ba:4b:95:
17:c1:b9:1e:2e:bb:e3:0f:50:be:c0:df:1d:6e:f8:a3:38:4f:
e7:6e:d7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:40 2026 by rpki-client