
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e203333363539.roa
File: 36342e3235332e39302e302f32342d3234203d3e203333363539.roa (raw, json)
Hash identifier: hcMRJKhshKbkYwUKi9V2l1hwj4qlouGi68r/8xMJh5s=
Subject key identifier: E2:78:7B:7C:1E:5A:62:4C:D3:CA:BD:83:59:68:F4:9A:2B:A6:2A:2C
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 49575B5B3478EE3A69683D4FE6ED09EB8BE11A4B
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e203333363539.roa
Signing time: Fri 06 Nov 2026 19:36:22 +0000
ROA not before: Fri 06 Nov 2026 19:31:22 +0000
ROA not after: Fri 05 Nov 2027 19:36:22 +0000
asID: 33659
IP address blocks: 64.253.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 09:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:57:5b:5b:34:78:ee:3a:69:68:3d:4f:e6:ed:09:eb:8b:e1:1a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Nov 6 19:31:22 2026 GMT
Not After : Nov 5 19:36:22 2027 GMT
Subject: CN=E2787B7C1E5A624CD3CABD835968F49A2BA62A2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:96:c7:b0:c9:02:79:c9:c6:d0:12:85:db:
a3:63:88:f6:87:16:fd:7b:95:78:0d:5a:93:ed:86:
34:0d:aa:13:48:2b:c0:f0:35:7f:b9:66:26:52:03:
7f:35:16:bd:19:76:69:8f:5c:a2:b8:73:bc:94:e3:
4b:91:d4:0e:f9:e8:74:94:12:46:47:65:b4:b6:37:
13:f1:9e:1f:5e:54:5e:fe:b4:af:4a:ec:89:92:5d:
a3:65:39:3d:a6:b4:04:a1:3f:7a:6d:d1:20:d9:66:
19:39:82:b4:3d:e7:8b:d9:16:67:ee:49:da:2a:5f:
65:ae:b9:54:40:bc:cb:03:4e:28:cd:ad:6b:ed:06:
0e:65:29:c6:94:8c:30:71:cc:3e:60:a9:5a:97:9c:
8f:bd:79:bf:72:29:cd:23:29:68:59:e1:cf:4c:b9:
5c:6e:4b:f4:20:25:80:3a:14:f4:b6:34:41:2c:cc:
38:f3:17:77:23:af:d4:b6:dd:40:6e:d3:75:7a:d5:
8a:36:ac:8e:5e:86:7c:18:c8:ce:44:48:d9:d5:f7:
8f:80:cc:ee:1e:20:f5:d4:48:af:1c:a6:68:4c:ce:
0d:c2:81:06:5e:b0:38:0b:0c:db:ff:71:c7:9d:01:
5e:f9:d0:12:5c:9e:50:12:df:fd:98:c4:ba:9a:c0:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:78:7B:7C:1E:5A:62:4C:D3:CA:BD:83:59:68:F4:9A:2B:A6:2A:2C
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e203333363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.253.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:8e:50:10:c3:9a:cd:5a:45:08:f7:10:c8:64:1c:b1:45:48:
ac:01:04:da:71:0b:13:59:a6:f8:20:4d:39:2f:02:e1:6f:85:
b6:dc:36:ca:b5:49:9d:72:6d:5f:bd:8b:bc:cb:bb:37:ce:3b:
cc:45:a6:50:a4:7e:24:82:06:3e:ae:58:06:5a:f3:a3:0e:89:
43:00:92:24:31:6d:9e:44:a1:76:05:37:f2:72:45:10:44:05:
37:8e:de:64:b0:64:83:1b:5c:83:00:67:90:c2:35:06:40:85:
45:34:2a:7f:c6:86:31:61:25:60:67:c0:e3:d8:ab:e6:e6:65:
64:8f:eb:9d:84:64:04:11:e9:ba:7d:03:a3:eb:0b:35:f2:b8:
18:51:d4:9a:c2:06:92:1f:23:98:bb:00:62:26:f9:13:50:a0:
c9:7f:d5:e6:1f:8c:8b:f1:28:1f:b3:00:9b:27:83:18:c8:20:
01:46:56:8f:f4:e6:a5:5f:48:1a:39:ae:18:a3:eb:fe:19:b2:
3d:f5:11:0d:eb:e7:56:04:6d:53:cf:3a:4d:c8:a2:05:54:59:
55:b8:90:c1:34:f0:9e:06:44:0d:4b:c8:6a:03:51:c8:ff:e6:
fd:f2:73:a2:b9:be:ae:05:f2:a8:36:a7:87:5d:50:5f:98:ed:
31:b1:59:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:03:43 2026 by rpki-client