
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3233322e302f32312d3231203d3e2035363530.roa
File: 3137322e39352e3233322e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier: ZAzsH4zuZTfXh9M6XlSSjttWZo5Kbph+D4JSDou0CzI=
Subject key identifier: 4F:BB:E2:CC:D7:6E:8A:36:E3:CD:9E:4B:B2:10:96:9D:5D:39:A7:98
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 599A8AB96F68D5FF07C05D3818FBD045AABD7ED1
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3233322e302f32312d3231203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:28:05 +0000
ROA not before: Fri 01 May 2026 02:23:05 +0000
ROA not after: Fri 30 Apr 2027 02:28:05 +0000
asID: 5650
IP address blocks: 172.95.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 16:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9a:8a:b9:6f:68:d5:ff:07:c0:5d:38:18:fb:d0:45:aa:bd:7e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: May 1 02:23:05 2026 GMT
Not After : Apr 30 02:28:05 2027 GMT
Subject: CN=4FBBE2CCD76E8A36E3CD9E4BB210969D5D39A798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:15:6e:18:fd:b8:b8:60:f9:a5:2c:cf:45:
80:2f:e9:b5:e9:a6:73:41:53:20:53:62:c6:b5:75:
18:72:ef:b2:65:8c:e1:82:47:6d:dc:c6:8f:a2:f0:
28:7c:54:a2:40:ef:83:d6:63:d8:72:1a:29:7e:d9:
f5:dd:fb:fc:b4:e6:11:66:ff:42:f1:0e:90:76:7b:
7f:a1:94:4f:d3:b5:a8:f9:b9:9d:41:01:29:c3:e5:
f3:e2:e2:fe:c6:ce:5b:fd:8e:3b:42:00:a2:cd:fe:
f7:4d:8e:48:b9:fe:fc:96:6a:2e:b2:ea:5d:00:53:
09:f4:ab:96:52:9f:7c:9e:af:71:fd:37:6f:ea:ba:
81:8a:fa:e2:23:d1:d0:77:c2:11:c6:16:eb:ea:85:
cf:63:ba:25:fa:b2:60:d8:a8:b9:0f:e5:3d:69:49:
b3:57:23:59:5b:be:88:ff:33:07:fd:99:c1:1d:de:
67:a8:11:7c:93:c2:da:b4:22:95:fc:cf:cb:b3:bf:
13:d7:48:40:c0:0b:29:33:b1:cd:c1:b2:2e:87:5a:
cb:4a:d2:02:11:ac:69:a0:71:eb:86:04:4a:13:8d:
6b:4d:2a:b8:6b:a1:9d:a9:fb:1c:41:41:86:91:1f:
7c:e2:ff:8f:76:c5:37:23:17:ec:02:70:b1:0c:d5:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BB:E2:CC:D7:6E:8A:36:E3:CD:9E:4B:B2:10:96:9D:5D:39:A7:98
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3233322e302f32312d3231203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.95.232.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:26:a6:8b:9a:0a:bb:bc:ee:5c:bb:d2:29:26:46:4c:98:68:
20:ba:c7:19:2e:33:3c:e5:2f:06:33:8a:f4:8e:d6:cf:c5:09:
ec:37:ee:05:3f:a4:af:95:19:1c:a5:3e:ff:93:f5:91:b7:b3:
c5:5a:52:1d:f2:b7:ed:3c:d0:08:2f:b9:5f:7c:e3:a4:e6:16:
9c:51:0b:e7:61:6b:49:46:48:78:f4:9a:6a:37:90:4f:51:ce:
73:0b:15:46:b4:0b:b7:60:b4:22:a8:1f:24:72:62:25:d5:84:
4f:f1:96:ed:b3:2f:2a:73:3f:e4:93:48:c7:ac:0c:86:01:06:
c0:05:21:3f:08:71:bc:d3:4e:59:60:8f:c2:db:9a:70:37:b8:
84:35:d2:3b:f9:08:65:88:73:b0:9e:77:b4:a4:1a:9f:30:90:
25:98:2e:c3:ae:0a:2e:ee:05:54:44:0e:b5:b3:69:f2:4d:d5:
fb:08:40:34:fb:dc:98:59:c1:ea:bc:0f:26:98:25:b8:b2:84:
1c:9f:bd:75:47:00:92:c9:68:54:95:84:74:7c:fc:c7:92:2f:
e6:3c:17:bb:c8:24:f4:87:7d:9c:04:e7:2d:35:13:49:3f:2e:
c8:56:39:8e:e4:64:d8:e7:ed:3d:bc:35:8f:a1:40:7e:54:06:
85:3b:e9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:26 2026 by rpki-client