
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e2036303739.roa
File: 36342e3235332e38362e302f32332d3234203d3e2036303739.roa (raw, json)
Hash identifier: iaeRCHiYWrsVEaaNEGrCH4Wij4v/rCqZbr0o9ggfJfo=
Subject key identifier: 0D:CF:52:7A:E1:75:4B:A9:8A:E1:20:34:F5:D5:82:B0:1E:91:DE:13
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 7FAFA2875A113034514E191A579F5AE6AC4F42A1
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e2036303739.roa
Signing time: Fri 20 Mar 2026 04:49:51 +0000
ROA not before: Fri 20 Mar 2026 04:44:51 +0000
ROA not after: Fri 19 Mar 2027 04:49:51 +0000
asID: 6079
IP address blocks: 64.253.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 03:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:af:a2:87:5a:11:30:34:51:4e:19:1a:57:9f:5a:e6:ac:4f:42:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Mar 20 04:44:51 2026 GMT
Not After : Mar 19 04:49:51 2027 GMT
Subject: CN=0DCF527AE1754BA98AE12034F5D582B01E91DE13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:14:8c:6e:12:0b:90:0b:aa:ad:c3:a4:77:
58:23:2a:69:4e:50:5d:a8:dc:f3:ff:ba:b0:3b:48:
c7:52:db:85:13:a1:c1:a3:21:28:c0:95:92:ac:49:
89:b8:1e:e7:04:7d:f1:f6:9b:23:4b:bf:12:f7:30:
94:6c:9c:c8:37:53:e3:26:ae:04:76:35:dc:ff:51:
eb:4c:4e:85:03:34:70:a4:bf:b0:93:8e:df:3e:1c:
35:53:6b:ab:6c:a3:30:fc:05:86:be:83:fd:01:45:
61:52:f0:94:d7:2f:d9:e6:98:bc:9f:f6:c1:36:c9:
23:58:02:f3:b4:e1:c0:87:81:63:ca:22:e8:6c:ac:
38:f3:67:16:f9:bb:54:11:a8:98:01:92:f2:c0:4a:
bb:1e:ba:64:41:29:e0:3f:a2:f2:a2:cf:3b:bc:67:
bd:74:30:f9:cb:36:61:74:ad:b6:ef:8b:3c:2e:13:
ec:ea:ba:33:21:92:50:1a:3e:4c:3d:af:7e:68:7f:
21:dd:43:68:8b:6f:b6:b4:59:1b:16:bb:12:b9:d7:
ee:36:eb:59:46:59:ad:8a:14:55:13:b1:3c:ae:fa:
a1:ad:73:12:03:15:d0:d4:2c:4e:80:8b:e6:30:6e:
49:a8:3e:11:61:66:49:4b:0d:1f:67:47:76:e1:14:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CF:52:7A:E1:75:4B:A9:8A:E1:20:34:F5:D5:82:B0:1E:91:DE:13
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.253.86.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:f7:26:d2:f0:d8:d3:81:e3:2f:84:c1:e0:d6:c3:af:a9:b7:
2e:13:80:7a:1f:b6:78:d6:19:86:78:b6:ae:06:07:5d:be:70:
fc:fd:cd:47:11:26:85:57:55:a1:18:0f:69:90:da:a3:ce:65:
38:c9:5f:95:dc:36:fa:7a:f6:13:46:5d:e1:97:ff:09:5a:20:
b7:38:ab:92:a3:2c:43:c6:e0:4a:eb:06:36:79:0a:57:80:ca:
57:ed:51:f2:09:7d:05:6a:37:c6:e9:99:b7:0f:94:97:08:fb:
44:76:9b:40:8b:13:0a:1e:5c:bc:32:97:3c:05:5b:de:7b:a1:
8b:1e:dc:cd:0b:41:b5:4b:ed:45:56:b6:de:3e:91:32:f5:58:
6b:9f:d9:4b:95:01:96:9c:7e:b4:e1:69:19:1b:2c:57:fc:66:
c5:ca:7d:14:e5:8c:f0:7d:f1:ce:22:7f:0b:2a:0c:cf:d6:ba:
f3:20:bb:ee:4f:27:28:5a:0d:30:92:5b:69:0f:88:99:0d:2c:
18:87:fb:54:6c:85:3c:7a:dd:68:43:8f:ef:48:53:66:f4:4a:
ed:cf:bf:c6:f6:e1:09:8d:5e:e9:ab:5b:5f:58:84:17:71:4f:
de:be:d4:82:bd:1a:17:f2:36:a7:18:fd:8c:24:51:ec:3b:b7:
06:51:5e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:40 2026 by rpki-client