
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3135322e302e302f31342d3134203d3e2035363530.roa
File: 34372e3135322e302e302f31342d3134203d3e2035363530.roa (raw, json)
Hash identifier: btOOemm4w7i68YdkIPS5bFmmFeDJt1ufmGyV9gmiwXc=
Subject key identifier: EF:E7:9D:27:88:A6:C9:B0:57:44:9B:3B:76:22:A5:F4:1E:9A:0A:0A
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 1844D7EF8345361E2F385E59D5710BF94B0833AC
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3135322e302e302f31342d3134203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:28:09 +0000
ROA not before: Fri 01 May 2026 02:23:09 +0000
ROA not after: Fri 30 Apr 2027 02:28:09 +0000
asID: 5650
IP address blocks: 47.152.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 16:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:44:d7:ef:83:45:36:1e:2f:38:5e:59:d5:71:0b:f9:4b:08:33:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: May 1 02:23:09 2026 GMT
Not After : Apr 30 02:28:09 2027 GMT
Subject: CN=EFE79D2788A6C9B057449B3B7622A5F41E9A0A0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:2a:82:72:70:1d:d7:48:1b:f6:f4:47:2b:
08:e2:f6:2e:78:0a:4b:3f:a4:a3:a5:f9:4c:11:cd:
65:0c:0d:79:08:7c:96:62:c2:06:10:e2:dd:f5:0f:
48:a3:75:46:6c:17:0d:9e:fd:7e:0e:ca:90:af:ca:
9d:53:ee:d9:14:49:47:57:af:43:be:cd:21:8b:58:
84:e8:5c:da:90:38:87:f6:b8:32:51:fd:6c:e2:a8:
b3:81:8d:a5:73:0c:07:3e:51:96:7a:56:a5:8f:23:
23:84:0e:bc:3a:c0:27:2b:4c:28:ed:8c:4a:93:29:
50:64:cb:27:50:e4:43:eb:b7:7f:28:f5:a1:b1:fe:
06:4f:b3:c4:c5:aa:3a:b3:5a:25:6a:3e:fa:4e:87:
4b:8a:62:dc:a4:a0:a9:d0:78:89:8d:a9:60:b9:8c:
35:c7:51:48:11:4d:e9:9f:10:6a:16:0a:b3:d4:1c:
45:25:21:d9:9f:b9:d2:c0:cd:be:ea:d7:74:3f:8f:
5c:f1:17:28:ec:27:f9:50:4d:1e:69:53:26:13:e8:
bc:69:17:47:88:6f:bd:b7:db:2d:0d:4c:f7:ba:6f:
90:98:20:63:0d:1f:ab:cd:92:cb:b9:57:91:95:10:
6b:88:97:27:7b:ca:32:0c:10:31:63:60:bb:95:c2:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E7:9D:27:88:A6:C9:B0:57:44:9B:3B:76:22:A5:F4:1E:9A:0A:0A
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3135322e302e302f31342d3134203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.152.0.0/14
Signature Algorithm: sha256WithRSAEncryption
84:42:e6:35:06:e5:18:ef:80:b3:b6:2e:16:67:f2:d1:4d:d4:
dc:6f:ad:9c:c0:8d:9e:27:25:fb:4b:9c:b5:92:c4:bb:33:ab:
9f:8d:5b:ae:9f:1c:e1:f3:06:00:cb:73:c4:32:ad:d4:9f:00:
b8:12:61:3c:33:3d:24:2a:fb:89:30:bb:92:42:da:9e:89:f0:
b8:17:b2:3d:f6:1e:69:fc:22:6c:66:6e:07:f1:6d:4a:35:a7:
9d:09:13:fb:fe:02:6f:1f:db:5f:0e:06:bd:77:ce:9e:97:e2:
27:ea:64:62:61:4f:45:92:6c:14:71:16:b2:8b:4d:d9:67:e5:
e4:89:3a:5d:3e:07:d7:db:64:8b:8f:68:b2:fc:91:b5:d0:31:
ad:c9:3a:dd:50:6b:cf:1c:0d:5a:54:2e:e5:07:50:2e:4c:52:
2d:cd:7e:ee:26:82:f7:31:69:71:8c:ef:76:81:a0:c7:9c:a5:
da:3d:c2:fc:16:07:2d:ed:9d:c0:f1:ea:57:4a:21:99:63:3d:
69:96:73:60:4c:05:04:fb:5f:0d:2a:bb:46:b8:02:fc:fd:1e:
ea:4e:be:1d:fd:fe:43:3f:44:19:dc:07:fd:4e:19:76:ef:98:
8c:1c:05:36:cb:1f:53:ab:35:03:0c:f4:80:81:35:fa:65:20:
5c:f5:85:4a
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIUGETX74NFNh4vOF5Z1XEL+UsIM6wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjYwNTAxMDIyMzA5WhcNMjcwNDMwMDIyODA5
WjAzMTEwLwYDVQQDEyhFRkU3OUQyNzg4QTZDOUIwNTc0NDlCM0I3NjIyQTVGNDFF
OUEwQTBBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhQqgnJwHddI
G/b0RysI4vYueApLP6SjpflMEc1lDA15CHyWYsIGEOLd9Q9Io3VGbBcNnv1+DsqQ
r8qdU+7ZFElHV69Dvs0hi1iE6FzakDiH9rgyUf1s4qizgY2lcwwHPlGWelaljyMj
hA68OsAnK0wo7YxKkylQZMsnUORD67d/KPWhsf4GT7PExao6s1olaj76TodLimLc
pKCp0HiJjalguYw1x1FIEU3pnxBqFgqz1BxFJSHZn7nSwM2+6td0P49c8Rco7Cf5
UE0eaVMmE+i8aRdHiG+9t9stDUz3um+QmCBjDR+rzZLLuVeRlRBriJcne8oyDBAx
Y2C7lcLtJQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFO/nnSeIpsmwV0SbO3YipfQe
mgoKMB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzMvMzQzNzJlMzEzNTMyMmUzMDJlMzAyZjMxMzQyZDMxMzQyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMCL5gwDQYJKoZIhvcNAQELBQADggEBAIRC
5jUG5RjvgLO2LhZn8tFN1NxvrZzAjZ4nJftLnLWSxLszq5+NW66fHOHzBgDLc8Qy
rdSfALgSYTwzPSQq+4kwu5JC2p6J8LgXsj32Hmn8ImxmbgfxbUo1p50JE/v+Am8f
218OBr13zp6X4ifqZGJhT0WSbBRxFrKLTdln5eSJOl0+B9fbZIuPaLL8kbXQMa3J
Ot1Qa88cDVpULuUHUC5MUi3Nfu4mgvcxaXGM73aBoMecpdo9wvwWBy3tncDx6ldK
IZljPWmWc2BMBQT7Xw0qu0a4Avz9HupOvh39/kM/RBncB/1OGXbvmIwcBTbLH1Or
NQMM9ICBNfplIFz1hUo=
-----END CERTIFICATE-----
Generated at Tue May 12 22:16:38 2026 by rpki-client