
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e3130322e39362e302f32302d3230203d3e2035363530.roa
File: 3137322e3130322e39362e302f32302d3230203d3e2035363530.roa (raw, json)
Hash identifier: ZSnL5UmJ6GUY6WMO+R/WDOPLVQVRTH+SEx1NdTAjxww=
Subject key identifier: 38:B9:9E:D0:72:6E:C5:E8:58:87:70:C4:4C:EB:68:BD:9C:C8:D5:CB
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 0DD5AF1359F6B1AEF6CD8FCFEA89DCD908BD5333
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e3130322e39362e302f32302d3230203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:28:08 +0000
ROA not before: Fri 01 May 2026 02:23:08 +0000
ROA not after: Fri 30 Apr 2027 02:28:08 +0000
asID: 5650
IP address blocks: 172.102.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 16:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d5:af:13:59:f6:b1:ae:f6:cd:8f:cf:ea:89:dc:d9:08:bd:53:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: May 1 02:23:08 2026 GMT
Not After : Apr 30 02:28:08 2027 GMT
Subject: CN=38B99ED0726EC5E8588770C44CEB68BD9CC8D5CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:6e:7f:cc:1b:a4:40:f6:41:6c:54:df:82:
ed:65:dd:16:79:0f:93:04:bc:79:44:be:a8:e7:e4:
5e:80:59:5e:02:3c:e0:8a:1c:eb:ce:f6:f9:40:32:
77:cb:25:71:be:8c:39:a2:23:de:5a:0b:a9:7c:7b:
75:db:9a:04:1f:22:5b:4c:40:60:86:c7:52:71:17:
37:25:79:8f:2a:14:b6:51:42:a3:82:6c:64:2a:62:
43:dd:1f:4e:37:90:ad:79:15:84:b1:d1:e0:78:25:
f8:06:16:db:5e:8b:2c:cb:11:57:d1:aa:cf:27:28:
6d:e3:bc:06:b8:d8:38:30:24:00:9b:fc:7d:b0:0b:
3f:a9:e8:d2:7a:ff:b2:91:be:c8:91:b3:91:38:f1:
6e:ff:85:20:0a:e8:35:be:eb:30:0a:10:0c:94:93:
39:95:9a:d7:0f:31:94:2e:d7:db:86:e4:0f:82:fe:
a3:d8:64:ab:b1:43:ad:28:de:3f:d8:cb:8b:7b:ae:
f3:15:9d:47:73:20:ba:66:5c:66:65:08:f0:02:96:
e8:38:cb:bd:11:46:b5:ba:5d:ee:ec:36:13:47:75:
50:11:4c:73:3c:5b:33:d6:d1:0a:94:91:12:f4:be:
9d:88:2c:59:fa:0e:9d:e8:ac:57:03:3d:52:f7:2a:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B9:9E:D0:72:6E:C5:E8:58:87:70:C4:4C:EB:68:BD:9C:C8:D5:CB
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e3130322e39362e302f32302d3230203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.102.96.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:9c:10:89:98:27:89:b3:bc:43:c2:d0:f6:65:80:24:e4:3a:
a0:18:81:9f:f7:76:9b:da:f8:02:f3:c0:d9:0f:46:a4:cf:07:
e9:e2:76:f2:03:c0:fa:c9:ad:9c:c7:53:ea:43:8b:83:02:02:
d8:3e:4d:b3:02:f0:5a:3d:cb:1b:72:d7:b4:52:4b:9d:ee:fb:
de:4e:9d:96:e3:9d:c1:df:76:69:a9:ac:85:85:82:dc:f6:0e:
71:dd:a3:76:20:97:82:b9:18:18:23:9f:05:d7:68:48:7f:07:
23:23:b2:b5:f4:b9:e4:61:a9:a1:66:19:59:fe:8b:f0:a0:24:
a3:7f:13:3d:2b:d2:d1:fd:e6:8d:cc:77:d3:71:b1:f1:bc:61:
b6:da:a7:3b:6d:82:b9:6d:a1:fd:e2:09:bb:7b:f1:a2:c0:51:
70:e5:e3:72:b9:58:d6:bc:40:8b:ab:41:3c:8e:5d:64:f9:46:
7c:e4:d8:5c:ae:45:1b:e7:44:6f:79:51:c1:14:73:0c:49:cf:
49:f2:eb:44:4a:cc:83:67:37:80:8e:ec:e0:4c:c1:b2:0a:85:
a2:f2:84:3d:1b:72:c9:a9:5e:18:31:9b:87:b2:3e:b4:a6:82:
06:77:c4:dc:b2:08:e8:d8:8d:53:36:56:d7:71:1a:f4:2c:0c:
44:d4:7e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:51 2026 by rpki-client