
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3135392e3232342e302f31392d3139203d3e2035363530.roa
File: 34372e3135392e3232342e302f31392d3139203d3e2035363530.roa (raw, json)
Hash identifier: OiJ4S4qb84h+TLuxAaoDpFuUAx4bfMxUZP1hOX67DIs=
Subject key identifier: 8D:C3:CD:BC:BD:36:38:DF:C0:AF:CC:66:AA:59:7D:3B:56:59:B8:26
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 594275D45A9368E2FEE1E160B960DBECB7386C94
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3135392e3232342e302f31392d3139203d3e2035363530.roa
Signing time: Fri 01 May 2026 02:28:07 +0000
ROA not before: Fri 01 May 2026 02:23:07 +0000
ROA not after: Fri 30 Apr 2027 02:28:07 +0000
asID: 5650
IP address blocks: 47.159.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 16:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:42:75:d4:5a:93:68:e2:fe:e1:e1:60:b9:60:db:ec:b7:38:6c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: May 1 02:23:07 2026 GMT
Not After : Apr 30 02:28:07 2027 GMT
Subject: CN=8DC3CDBCBD3638DFC0AFCC66AA597D3B5659B826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:bd:35:c5:39:ef:39:b5:42:e5:fa:82:7a:
41:e0:e9:c7:ce:58:c6:75:e3:ca:bd:d5:10:3c:58:
7e:3b:10:b1:0e:5b:1a:22:30:b7:d2:58:81:5f:f6:
9e:e7:e5:44:c2:65:36:e5:55:a4:06:32:1e:4a:b8:
0b:1a:ca:ef:50:02:04:10:c7:01:d1:96:f5:f0:18:
85:5c:f9:0c:fe:a8:25:f7:98:e7:2c:b5:33:8c:32:
ff:5e:0e:68:13:fd:96:62:8e:ef:88:72:7c:ba:1f:
f9:cf:38:83:e1:46:2f:aa:53:d5:6c:e0:99:4a:21:
00:aa:ab:75:9b:a7:1b:aa:d0:a6:ec:ac:69:0f:b0:
86:a4:ab:16:33:b1:cc:af:a1:48:9f:c1:72:44:f9:
cc:2c:e3:f8:ce:77:6e:d2:47:5b:23:78:d3:89:54:
e9:d2:32:ac:bf:96:86:58:6e:4f:a4:fc:e4:e0:3e:
fc:48:7a:b1:a0:00:96:16:f5:30:c4:e6:f5:ef:5d:
9f:75:fc:11:65:a0:1b:46:b3:54:5a:04:77:58:fa:
c0:c3:3a:b0:a8:b2:ac:f0:f8:83:70:69:7f:77:01:
e3:c1:00:70:08:27:7d:6f:b9:95:59:ed:5d:a5:c9:
3b:91:ae:32:41:43:53:30:15:ca:14:8f:ee:34:7f:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C3:CD:BC:BD:36:38:DF:C0:AF:CC:66:AA:59:7D:3B:56:59:B8:26
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3135392e3232342e302f31392d3139203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.159.224.0/19
Signature Algorithm: sha256WithRSAEncryption
41:fe:59:06:d4:bd:d7:41:85:4b:1d:b3:8c:4e:54:88:4a:2d:
23:76:c0:91:85:14:de:29:62:34:06:d9:5d:b5:0c:76:d4:cb:
c6:08:72:1f:3e:bb:f8:a5:66:9c:61:ae:7c:92:71:3a:b1:c5:
42:c8:4d:06:88:b8:54:ac:b3:31:a2:fa:f3:ad:07:7c:0b:9d:
93:4d:f0:aa:40:96:56:84:ab:9c:b4:74:c8:50:86:7b:5e:6d:
db:39:cd:bc:3c:41:60:fa:4b:59:d2:de:87:5e:5b:b8:fb:6f:
a6:72:17:16:46:b2:a4:8c:1e:ad:c0:c8:18:3e:3f:40:15:77:
5a:d4:c3:a1:1c:ff:7a:dd:97:6e:96:5b:2b:a5:c2:3d:25:92:
70:a3:20:37:33:01:d1:0f:c7:6c:25:43:77:fc:72:c9:68:a8:
a6:8e:c7:70:26:fe:b8:1c:28:d9:3f:34:0b:c1:a6:6c:75:e3:
fd:bf:cd:79:e4:10:d1:b1:b9:f4:cf:aa:35:84:41:b9:27:fc:
32:bf:43:fc:58:88:37:90:3f:bb:5f:9b:05:ac:06:ff:48:8b:
e9:f9:d6:03:69:5a:8f:a4:46:c2:66:0b:a8:d7:3c:4f:36:60:
a0:38:72:f9:35:76:90:bd:2b:b5:a5:90:1c:9e:a7:76:3d:37:
77:7e:17:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:53 2026 by rpki-client