
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232342e302f32342d3234203d3e2035363530.roa
File: 3137322e39352e3232342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: Gkm18ay92jtNnL/BiIjCNHRyuMiT0S6mnTiDuSm7eGY=
Subject key identifier: 84:D7:6F:03:D0:48:9C:75:66:90:6D:87:5A:63:DB:42:60:8D:92:B1
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 2E6348AA279F28E0F47C742D84BC6EE98399FCDE
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232342e302f32342d3234203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:28:06 +0000
ROA not before: Fri 01 May 2026 02:23:06 +0000
ROA not after: Fri 30 Apr 2027 02:28:06 +0000
asID: 5650
IP address blocks: 172.95.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 16:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:63:48:aa:27:9f:28:e0:f4:7c:74:2d:84:bc:6e:e9:83:99:fc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: May 1 02:23:06 2026 GMT
Not After : Apr 30 02:28:06 2027 GMT
Subject: CN=84D76F03D0489C7566906D875A63DB42608D92B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:cd:ad:60:da:8c:b2:d4:f5:f4:f1:55:9a:
cc:37:b9:ee:1c:9d:48:67:62:3c:b8:31:08:82:4f:
1a:95:e4:3b:d6:49:f0:0e:3c:f7:a9:ab:50:57:63:
91:65:16:f0:28:5e:53:97:3e:90:c2:92:a3:1c:a5:
59:b8:ca:40:b4:32:07:d4:9d:16:18:09:8b:88:2e:
8e:29:9b:66:7b:2a:ce:d4:8d:52:69:fc:fd:cf:92:
aa:06:60:4f:cc:da:81:19:2a:23:e1:9d:83:67:6b:
e9:3a:58:84:9d:89:7c:b7:7f:bf:c7:86:80:f2:36:
03:b4:22:99:4e:6c:fd:3b:b5:83:b1:9a:2a:52:7f:
db:d1:60:99:e9:49:21:b9:30:12:db:3d:5c:14:d8:
4b:5b:e8:01:74:66:fa:b4:64:cc:94:25:cb:da:af:
83:dc:aa:9d:12:36:51:ff:8e:fc:ea:db:26:33:d2:
01:95:fb:12:6c:a1:da:57:de:53:e8:e2:e2:7a:63:
f0:4c:7e:ab:de:d9:04:70:3e:8e:d1:a0:0c:c1:7c:
8e:80:49:4f:7f:b1:34:75:46:99:35:be:9f:c5:03:
e8:1b:8c:7c:5b:6a:11:6d:e8:a7:2f:6d:d8:84:9e:
1f:57:ec:05:fe:ff:b2:ef:59:f0:3d:b5:df:18:62:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D7:6F:03:D0:48:9C:75:66:90:6D:87:5A:63:DB:42:60:8D:92:B1
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232342e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.95.224.0/24
Signature Algorithm: sha256WithRSAEncryption
29:1a:62:b8:50:0c:13:6a:67:68:39:86:d7:f9:d2:69:5e:10:
44:6c:b6:8a:24:ad:20:b5:dd:1a:38:fe:49:b5:6f:85:49:2f:
51:c4:35:cc:a7:2e:f7:41:c5:7b:00:7b:9b:f7:ec:86:15:4d:
8c:ce:8d:f8:d2:0d:30:44:06:d7:fb:86:b9:22:67:f3:80:7f:
31:fe:7a:86:1e:11:4e:a2:a9:68:3b:ea:c4:fe:66:fc:be:ac:
c1:f2:3b:bb:7c:a3:a7:03:1e:00:0a:9e:c5:d1:4d:8e:f0:04:
84:d8:d6:d0:57:36:ee:82:5a:b9:92:57:2d:c0:3e:00:d0:45:
d1:9a:41:14:29:ef:ad:17:a2:d7:6f:cd:e1:ad:12:cb:41:ce:
83:f8:91:c1:01:ab:c2:61:62:16:25:3a:43:26:9f:1f:fb:56:
c9:ab:39:5f:99:22:82:64:4e:1e:a8:b6:86:db:34:ed:db:8d:
fc:29:d5:a9:99:f5:64:74:64:86:d9:d2:ab:c0:a8:25:0b:c0:
e9:b6:3b:39:23:18:81:ab:fb:e1:9b:d9:6b:14:28:a9:ef:1d:
9b:6b:d0:eb:f3:7d:02:03:02:e2:7a:7c:94:b7:76:81:4e:15:
ba:4c:b8:4b:67:f5:79:9e:85:1a:39:cc:ea:ab:42:4d:49:27:
9e:14:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:42 2026 by rpki-client