
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34322e302f32342d3234203d3e203534313438.roa
File: 3231362e3233382e34322e302f32342d3234203d3e203534313438.roa (raw, json)
Hash identifier: 04p1JLjx7sECNqfnOx000LV/YtnUzumtM1LZlax5DQ8=
Subject key identifier: 82:FD:F9:9E:C1:D5:E5:BF:67:AA:F2:DE:9E:C8:2C:01:33:04:F7:49
Certificate issuer: /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial: 0CD8D24DDECE5F62EC5E4775B717BD3D02F32966
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34322e302f32342d3234203d3e203534313438.roa
Signing time: Wed 01 Jul 2026 01:45:56 +0000
ROA not before: Wed 01 Jul 2026 01:40:56 +0000
ROA not after: Wed 30 Jun 2027 01:45:56 +0000
asID: 54148
IP address blocks: 216.238.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 09:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d8:d2:4d:de:ce:5f:62:ec:5e:47:75:b7:17:bd:3d:02:f3:29:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Validity
Not Before: Jul 1 01:40:56 2026 GMT
Not After : Jun 30 01:45:56 2027 GMT
Subject: CN=82FDF99EC1D5E5BF67AAF2DE9EC82C013304F749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:ca:2e:77:6f:5c:f9:53:a9:79:89:0a:6e:
fc:ba:b9:51:33:0d:f4:49:dc:9e:25:b8:29:0c:4a:
ff:d8:d1:5a:bb:48:09:4c:fb:27:a7:b8:2c:78:a7:
ff:7a:e1:ce:ac:e4:83:b1:0d:2d:42:07:64:00:e7:
62:06:ab:48:eb:a9:0a:a7:46:39:8d:e6:38:5c:01:
c5:e5:1e:e0:c7:a4:55:1d:9f:75:bf:c3:17:9a:58:
c9:43:1d:6a:c2:e0:a5:ff:e8:ed:29:21:f3:9c:4a:
b2:6c:5a:2b:3c:b3:7b:c3:9f:46:5b:2f:17:69:09:
d5:cc:59:79:fc:5f:ac:0d:bb:fa:95:87:b0:88:9c:
3f:da:73:51:30:cc:9a:1c:0b:29:10:40:ad:f7:61:
ac:9f:6d:73:b8:65:de:8a:2a:4f:72:47:1d:ac:3b:
48:c0:d4:da:bd:bd:9f:f4:fd:de:5e:42:b5:61:f9:
60:14:3c:14:db:ed:ac:f4:0d:6a:cc:f7:2f:8c:69:
94:28:02:06:de:50:8c:10:a3:1b:5a:40:27:bf:9a:
f8:0f:1e:da:09:cc:49:74:4d:f9:23:f9:1f:2d:d0:
d6:b6:15:89:3a:73:d6:e4:df:79:18:bd:7e:76:82:
e8:96:5b:5f:49:77:b9:c5:63:11:c4:4a:8e:f8:9b:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FD:F9:9E:C1:D5:E5:BF:67:AA:F2:DE:9E:C8:2C:01:33:04:F7:49
X509v3 Authority Key Identifier:
keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34322e302f32342d3234203d3e203534313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.238.42.0/24
Signature Algorithm: sha256WithRSAEncryption
73:71:c8:0b:83:28:9d:37:7b:36:f8:64:d4:aa:58:31:60:a0:
ab:65:fc:aa:a8:be:60:2e:d0:ce:69:f8:b7:e0:09:58:8c:86:
3f:bb:ac:88:02:cf:bf:08:1a:5e:a9:8a:64:c0:0e:78:3e:4d:
8d:c8:d7:f2:86:5b:aa:73:63:6e:d4:a5:65:46:b5:f3:51:dd:
b7:83:c9:0f:56:ae:88:50:f1:b3:ac:0c:4a:3b:89:cd:30:dc:
f4:bb:cf:06:ec:a8:18:d1:43:5f:56:69:93:8e:5e:14:21:a7:
b2:63:2e:6c:00:90:19:d3:a8:9e:52:69:be:15:89:f6:a5:d0:
89:18:61:f8:38:be:dd:38:73:7f:c6:a4:18:fd:87:ea:9c:eb:
a5:7f:7f:f1:e0:15:f9:90:d2:43:f9:a7:16:d9:f4:7a:7a:ae:
ac:c2:d2:05:70:a5:88:48:1d:6c:5c:55:16:17:73:77:2b:ad:
be:eb:55:7d:c5:88:64:f5:03:d2:da:99:ff:19:0b:dc:50:40:
f2:9d:58:76:30:bc:55:7e:28:c7:35:5e:ce:0e:13:d3:c1:d4:
96:11:d8:6e:c5:5e:b6:df:49:02:3c:46:ec:8b:30:8c:c0:2c:
6d:c2:19:bd:d1:85:01:ad:ff:07:0d:44:9a:76:ea:dc:2f:a7:
39:79:73:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:46 2026 by rpki-client