
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34332e302f32342d3234203d3e203534313438.roa
File: 3231362e3233382e34332e302f32342d3234203d3e203534313438.roa (raw, json)
Hash identifier: Lz+Y674TE0fuiFpuyHHoni11YXTB/GHxvMn29I6t5gk=
Subject key identifier: FF:42:A0:34:B6:36:81:31:D4:B0:71:B2:7D:43:B1:A4:17:3F:23:8F
Certificate issuer: /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial: 0CF6C2FA4ABA84EAF72E8B8E3314068622DB0148
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34332e302f32342d3234203d3e203534313438.roa
Signing time: Wed 01 Jul 2026 01:45:56 +0000
ROA not before: Wed 01 Jul 2026 01:40:56 +0000
ROA not after: Wed 30 Jun 2027 01:45:56 +0000
asID: 54148
IP address blocks: 216.238.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 09:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f6:c2:fa:4a:ba:84:ea:f7:2e:8b:8e:33:14:06:86:22:db:01:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Validity
Not Before: Jul 1 01:40:56 2026 GMT
Not After : Jun 30 01:45:56 2027 GMT
Subject: CN=FF42A034B6368131D4B071B27D43B1A4173F238F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:2a:25:6d:8b:49:c6:a1:e9:a5:f9:0f:28:
c0:1f:71:9f:62:2e:11:10:c4:6b:a6:47:18:e6:d9:
78:9e:17:da:9c:17:26:c5:d8:d5:2a:09:8f:e4:54:
03:3c:fa:46:a0:01:c9:f2:1a:76:69:eb:98:29:99:
dd:a1:28:eb:f7:92:c1:c3:fc:e0:fc:77:97:48:ab:
4e:07:37:4c:70:49:59:a3:b4:c2:0c:60:5c:e4:e3:
6d:9c:5c:2c:cf:0c:36:4d:ae:e8:d6:e0:6f:61:08:
70:b5:cb:d2:95:ba:75:06:5c:3b:fd:be:dd:2c:95:
43:16:bd:63:8e:27:df:5b:bd:9b:04:a5:a8:cb:21:
16:6c:4a:af:50:23:e4:ba:bb:b0:b9:d7:94:dc:4f:
94:00:7e:4c:fd:38:e4:14:a9:fe:63:22:2d:7e:d7:
28:41:2d:35:08:c8:50:9a:23:e4:23:80:93:ec:71:
ca:cf:97:0a:4b:e1:fb:4a:c8:29:67:92:1c:95:a7:
b9:56:bb:14:e7:27:26:35:f3:e9:5e:69:8c:01:b0:
b4:00:ed:c6:7a:c5:5c:ec:94:e4:ac:de:1d:f1:7d:
e4:a9:5b:55:1a:9d:5d:13:06:42:31:d1:0a:b6:f0:
97:d2:e2:1b:fb:6a:c9:73:44:f7:9c:cc:d1:07:01:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:42:A0:34:B6:36:81:31:D4:B0:71:B2:7D:43:B1:A4:17:3F:23:8F
X509v3 Authority Key Identifier:
keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34332e302f32342d3234203d3e203534313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.238.43.0/24
Signature Algorithm: sha256WithRSAEncryption
16:eb:1e:93:cb:94:1b:57:c8:fd:e5:4c:74:57:61:a1:df:b9:
be:12:c5:98:39:59:e4:be:f3:be:a6:ef:42:47:80:d4:c3:01:
c9:0f:05:1f:ac:79:4b:e5:0f:a5:f1:33:e8:65:bb:b7:9b:55:
9d:29:6d:fb:fa:0d:69:d6:52:fa:18:4f:4a:13:22:32:4c:2b:
15:7b:97:28:04:bf:d9:c4:0c:25:9d:29:8b:c3:b6:d2:05:eb:
b7:77:de:41:9c:9d:d9:7a:dc:ea:05:86:83:aa:f8:77:6b:c8:
e1:01:87:ef:de:4a:91:a2:22:bd:d4:17:c0:a1:36:3f:95:5e:
70:93:fc:7d:33:3d:a9:c9:9e:8a:a8:93:ce:0c:34:14:e5:b2:
9c:46:4d:2c:b9:78:bb:fe:12:dc:2b:22:06:dc:3e:98:59:28:
95:ee:0e:9a:10:d4:cb:d8:fe:25:7d:ff:66:b8:e1:ca:d8:3d:
fa:96:57:79:df:09:00:9e:f8:86:24:b6:f5:8b:7b:37:8c:4e:
b7:8c:25:f2:27:d8:b3:86:f0:84:47:9f:c9:72:99:68:cb:77:
be:b7:92:2a:b2:ca:18:3a:ae:9a:25:27:b4:66:05:6d:4f:4f:
30:06:d5:99:5d:cf:cc:cd:0c:8f:33:02:10:35:5a:5b:fe:22:
0a:d7:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:25 2026 by rpki-client