
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234322e302f32342d3234203d3e2035363530.roa
File: 3137322e39352e3234322e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: MGxw9Ss/6L7RmwhY4OsBLg/mBozuk+C11UQ7Yh4+Yqo=
Subject key identifier: DA:90:66:66:E6:80:46:58:C2:D5:0D:1B:C9:C0:CB:5F:7F:76:12:75
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 23C21E7E995E1D94FF10012227F58201AD9F4DF0
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234322e302f32342d3234203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:28:07 +0000
ROA not before: Fri 01 May 2026 02:23:07 +0000
ROA not after: Fri 30 Apr 2027 02:28:07 +0000
asID: 5650
IP address blocks: 172.95.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 16:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:c2:1e:7e:99:5e:1d:94:ff:10:01:22:27:f5:82:01:ad:9f:4d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: May 1 02:23:07 2026 GMT
Not After : Apr 30 02:28:07 2027 GMT
Subject: CN=DA906666E6804658C2D50D1BC9C0CB5F7F761275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a8:65:d3:14:10:27:b0:db:5b:4f:3e:eb:14:
a6:54:d6:05:3f:72:6c:fc:fe:f5:78:78:83:1b:b3:
bb:b6:6f:d2:15:48:32:01:40:aa:09:c3:6b:33:c8:
cc:f1:8b:af:b7:d3:18:01:06:3d:d7:d9:78:4e:ac:
c8:c8:61:f3:e5:95:89:e6:1f:27:c1:e5:80:54:66:
c8:01:2f:1b:d8:e9:c0:33:c2:5f:e7:4d:40:b9:09:
6c:5f:57:7a:40:71:13:c3:f4:7e:3e:2b:a4:9a:a2:
31:e2:54:9e:12:a0:26:99:e4:48:78:3d:a4:e7:41:
c0:65:44:1e:bc:41:4e:fb:33:c3:71:4e:db:77:87:
cf:89:27:e0:34:b7:eb:d8:87:bb:fc:9a:58:89:0e:
80:40:ae:80:2b:35:15:0c:7c:37:54:58:6a:6a:6f:
d2:41:f7:42:7e:15:b3:ec:f4:ea:aa:cb:1e:0a:a1:
4f:82:f4:b0:30:97:03:48:1c:19:83:7f:c2:cb:38:
67:ab:3e:11:24:23:63:c8:a9:61:30:cd:08:61:99:
4b:46:e4:f2:8f:64:3a:ed:fe:0c:dd:4e:df:19:5f:
eb:95:69:76:a2:b2:60:9f:25:7a:f7:ad:a1:69:23:
38:17:53:82:03:1b:68:15:50:73:98:e4:20:81:6a:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:90:66:66:E6:80:46:58:C2:D5:0D:1B:C9:C0:CB:5F:7F:76:12:75
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234322e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.95.242.0/24
Signature Algorithm: sha256WithRSAEncryption
75:68:bd:10:51:f8:9b:af:f1:fb:9d:cf:ba:7b:b1:44:ba:8e:
2a:a7:61:e3:b9:0d:74:1f:f8:e4:7f:a2:c2:54:c1:e6:05:95:
b7:a8:ce:88:7e:64:86:31:c3:79:16:f8:f6:21:47:ca:4c:a2:
3a:70:05:14:4a:b3:18:a2:ce:c9:3e:74:3a:12:c6:f1:bc:1e:
81:d8:e7:4f:cf:77:ba:b6:2a:af:5d:d7:92:34:1d:b5:1a:71:
eb:53:86:2d:bf:ad:2c:85:3f:91:06:49:fd:e4:88:e4:07:f0:
b9:c5:92:df:38:0a:33:47:97:85:aa:89:ef:2b:2c:20:c5:77:
72:20:98:65:7e:76:2b:d2:8a:d1:88:d3:84:e9:25:69:d1:95:
fd:7e:7b:05:ec:79:81:0c:25:b1:5b:60:4c:92:81:5d:08:4d:
9e:e4:2a:18:87:f7:05:df:3b:9b:6c:e5:5c:51:66:3b:fe:a3:
48:18:e5:40:04:e6:d1:5d:9b:c4:57:31:24:95:08:84:75:f6:
eb:c2:c5:0f:9b:2a:f6:b8:5b:45:21:b8:66:da:a2:ed:18:33:
49:0e:31:74:a3:29:e4:18:fb:00:60:19:da:72:73:95:8e:21:
42:0d:7f:d5:5c:bb:f0:ce:e9:91:8d:25:33:53:8f:e7:c9:ce:
4d:df:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:27:39 2026 by rpki-client