
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3230382e302f32332d3233203d3e2035363530.roa
File: 34372e3134332e3230382e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier: icrKG/e9eheUgF5wI6emDhbBhjeRRHoUUsNOyc6zZMw=
Subject key identifier: A4:A4:3A:59:79:D0:5C:57:AF:BB:1E:72:F2:09:94:EB:88:F2:C1:01
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 0426211B3D1FBEC62B8E18AE225DFD2CC87B439A
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3230382e302f32332d3233203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:28:08 +0000
ROA not before: Fri 01 May 2026 02:23:08 +0000
ROA not after: Fri 30 Apr 2027 02:28:08 +0000
asID: 5650
IP address blocks: 47.143.208.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 16:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:26:21:1b:3d:1f:be:c6:2b:8e:18:ae:22:5d:fd:2c:c8:7b:43:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: May 1 02:23:08 2026 GMT
Not After : Apr 30 02:28:08 2027 GMT
Subject: CN=A4A43A5979D05C57AFBB1E72F20994EB88F2C101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:15:87:c9:e1:1c:52:19:f2:36:3a:32:96:d6:
df:ca:87:7d:8f:53:7b:17:40:50:eb:3a:ae:da:dd:
fe:6d:7e:13:a0:ad:f9:87:88:81:60:13:9c:af:6d:
d3:1b:f7:a3:11:db:9a:cf:c2:39:4e:18:21:c1:f1:
8c:64:a5:f8:97:1c:ac:03:22:1f:8a:19:ef:bd:a2:
48:43:e8:53:7e:33:ca:c5:ca:3b:43:ba:c0:a8:18:
04:60:0d:0b:75:90:6b:51:6f:72:6c:00:a5:8b:30:
e7:6b:c3:b0:25:75:1d:3d:3a:f9:69:bb:ca:55:7e:
2e:1c:eb:34:ba:36:0e:f4:d5:90:9a:07:29:47:4b:
b2:dd:20:cb:57:64:63:d0:79:0d:90:f5:34:40:ac:
30:d0:df:e3:1d:02:18:f3:23:9b:28:f6:4d:00:a3:
4f:77:f6:e1:e6:86:62:c9:f9:d2:bb:c4:00:86:8e:
07:35:c3:71:8d:4d:1d:e0:b6:0b:93:fc:e0:1a:ed:
e2:f5:2a:92:6a:40:32:60:00:6d:d7:4a:9c:b8:94:
82:b8:fe:cb:e9:20:d5:f2:81:18:7e:15:93:32:27:
64:4f:a8:05:6d:46:45:dc:67:75:2d:fb:8f:d8:50:
7f:3f:ad:66:b3:35:f6:fa:0d:cf:86:7a:97:29:54:
1e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A4:3A:59:79:D0:5C:57:AF:BB:1E:72:F2:09:94:EB:88:F2:C1:01
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3230382e302f32332d3233203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.143.208.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:da:a1:55:6e:f3:5e:8f:7c:e9:2b:87:76:78:73:08:05:55:
15:4e:d0:6d:f0:f3:82:20:11:01:73:73:7a:88:04:85:96:b1:
35:38:d4:06:bd:67:26:f8:ff:3b:69:61:03:7f:87:3f:2a:9a:
79:3f:80:4b:c5:5e:b5:95:dc:5e:8f:2b:f6:05:ee:cb:77:73:
fe:69:6d:44:bd:2f:d2:96:6f:2e:f4:02:79:c7:28:6f:8e:87:
31:92:58:36:e8:64:0b:d4:7f:e2:ba:62:70:2e:b2:1d:c4:b6:
69:6b:08:ec:e0:f3:47:76:c5:58:8f:b1:90:6e:43:36:23:b1:
13:6f:cf:0f:e8:27:0f:8e:6c:3c:1a:46:58:f4:37:17:82:b1:
10:ad:f5:48:57:a4:be:a1:92:f6:40:a9:dd:3a:90:8d:52:f3:
81:13:64:19:cf:a0:1c:0a:e3:5a:7c:76:a5:00:0a:88:3f:2b:
28:78:2a:68:4d:c7:32:36:c3:60:f4:ff:f7:74:e9:72:0a:f1:
7c:b3:81:45:5a:20:2a:83:ed:11:7a:bd:33:88:d0:9d:41:ef:
ce:83:a7:cb:ba:43:bb:45:d3:e3:36:56:d0:f2:a6:4d:eb:11:
ca:ae:10:26:6f:95:8d:92:92:97:e3:e9:29:1f:ea:a8:b1:a7:
b9:3b:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:59 2026 by rpki-client