
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133372e3230382e302f32312d3231203d3e2035363530.roa
File: 34372e3133372e3230382e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier: +osHT/9kIl8nYyoAhTsSYs4NfsCh0GNr3rC9yUSwYmI=
Subject key identifier: 31:68:3F:91:CD:E5:E6:6B:C7:F9:9C:EB:64:02:6E:BF:27:A0:D8:15
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 48367959E5423B9571C78C3B3570026C22F24D3B
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133372e3230382e302f32312d3231203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:28:09 +0000
ROA not before: Fri 01 May 2026 02:23:09 +0000
ROA not after: Fri 30 Apr 2027 02:28:09 +0000
asID: 5650
IP address blocks: 47.137.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 16:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:36:79:59:e5:42:3b:95:71:c7:8c:3b:35:70:02:6c:22:f2:4d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: May 1 02:23:09 2026 GMT
Not After : Apr 30 02:28:09 2027 GMT
Subject: CN=31683F91CDE5E66BC7F99CEB64026EBF27A0D815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:ea:d5:24:35:96:51:31:1e:1a:b6:93:69:
50:7e:ec:42:fa:f0:8f:e0:f3:70:c5:8c:4a:18:fe:
5f:ac:d2:43:6b:19:86:77:96:4e:b5:58:f8:12:be:
5a:75:46:62:b0:15:37:a1:fa:0e:1e:4a:86:f0:3b:
60:eb:21:1c:64:8c:ae:2a:af:c2:5d:93:e7:b3:29:
29:d0:f4:58:aa:28:a7:60:69:22:74:d2:45:2e:f0:
a4:a5:1f:92:60:d8:84:95:63:03:df:3d:25:57:5a:
40:a1:f5:12:75:41:11:d7:75:6a:ad:14:63:d9:45:
3c:ee:b5:43:30:b7:27:17:94:38:9d:70:5a:d7:f0:
e1:d8:28:2a:74:1d:56:65:0a:d0:63:a8:fd:47:e5:
c6:b7:2b:5c:8b:d9:c2:42:c3:41:3b:b9:3e:40:31:
b0:c0:12:68:3a:bb:84:0e:8e:ce:09:bd:14:58:87:
c4:9e:e1:ba:26:a0:77:88:41:5a:61:47:6f:bd:2e:
5b:06:fa:3a:f3:7f:46:97:8f:bb:10:8b:86:cc:c1:
ed:db:5f:01:88:8f:32:d9:02:0e:4d:76:c5:97:ee:
fc:35:ce:f7:9c:8d:cf:7d:39:28:8c:d3:71:a4:f3:
08:59:65:56:e3:91:8d:15:8f:4a:ff:92:f5:38:17:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:68:3F:91:CD:E5:E6:6B:C7:F9:9C:EB:64:02:6E:BF:27:A0:D8:15
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133372e3230382e302f32312d3231203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.137.208.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:60:f7:29:3f:fb:78:ef:a3:de:b6:e2:b0:29:e6:64:dc:59:
0c:05:3e:3e:8e:60:31:b5:21:0a:c7:c0:38:79:2c:aa:b9:8a:
e9:f7:e2:a3:05:61:cd:fd:24:6c:9a:02:fa:51:91:f6:01:71:
6b:06:49:b6:1e:5b:90:53:d1:3a:71:02:39:f1:cb:47:f6:19:
09:c8:25:d4:73:c4:ce:d2:24:c8:ae:14:86:3a:1d:08:34:e6:
72:01:cb:6e:13:2c:6a:24:e8:af:0d:f7:8b:d8:d0:9d:b2:58:
4d:23:07:f0:5d:a7:c6:b2:69:10:03:ce:f5:37:b0:ad:ff:48:
ac:6c:59:d4:76:94:f1:d8:78:7d:d0:fa:1e:27:7e:7b:50:29:
27:54:4c:37:57:74:90:ce:98:66:ed:ee:99:fe:88:dd:61:1e:
6c:fa:a7:f0:40:69:64:f1:d8:d6:1a:61:af:1b:65:5d:57:23:
9c:92:92:6a:93:a5:ea:85:48:5c:e4:97:f3:93:e9:5b:4b:3e:
47:90:49:a4:d8:2f:bc:63:ea:89:e5:2b:8a:a8:a7:7d:06:fd:
11:f2:17:15:6a:79:1d:22:27:5f:0f:29:dc:ba:39:fc:c2:76:
37:fd:98:08:36:e6:9b:1c:ab:35:fa:9a:79:bd:70:1f:08:15:
ef:4d:c0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:26 2026 by rpki-client