
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135362e302f32342d3234203d3e203533373234.roa
File: 3231362e37332e3135362e302f32342d3234203d3e203533373234.roa (raw, json)
Hash identifier: 1W/bVPo9LT37fXWkhn3Isjr4eSBBHawklWoT+1Tf7Q4=
Subject key identifier: 62:CD:35:B2:11:AA:19:C4:4D:9A:83:76:8F:BB:1D:5F:25:E8:BD:C9
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 55234B7895C388F5E488269B7BC31B50EFEDB048
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135362e302f32342d3234203d3e203533373234.roa
Signing time: Thu 24 Sep 2026 04:07:17 +0000
ROA not before: Thu 24 Sep 2026 04:02:17 +0000
ROA not after: Thu 23 Sep 2027 04:07:17 +0000
asID: 53724
IP address blocks: 216.73.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:23:4b:78:95:c3:88:f5:e4:88:26:9b:7b:c3:1b:50:ef:ed:b0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Sep 24 04:02:17 2026 GMT
Not After : Sep 23 04:07:17 2027 GMT
Subject: CN=62CD35B211AA19C44D9A83768FBB1D5F25E8BDC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:0a:70:9e:29:a5:55:99:6f:c4:83:b2:5c:
cf:fa:af:91:d3:53:f6:e6:b7:16:58:92:bc:9c:83:
7f:27:ee:2d:6e:d0:60:86:21:16:9a:2e:c2:2d:b6:
96:7d:ab:7d:1c:58:04:f7:c0:01:4d:37:b1:ce:bc:
72:c9:19:6e:5a:2d:1f:ea:30:ce:e9:e8:9e:d3:e1:
33:15:da:88:e5:34:e0:cb:84:6d:bf:3d:f5:61:1f:
6a:73:e8:2f:d9:1c:5c:f5:00:30:a6:78:f2:82:70:
a6:3a:e4:ba:c0:c3:36:f4:99:27:af:03:e2:31:e7:
87:66:b8:c6:99:a2:e1:64:dd:31:e7:2d:ac:40:0f:
6c:fd:1e:68:15:5f:dd:d9:53:d3:12:b7:20:49:cc:
a3:c5:75:16:3d:82:a6:00:1b:82:21:83:88:fd:e7:
9e:9c:f9:39:4f:f1:60:62:86:fe:2d:28:c2:b2:fc:
2d:fe:7e:00:00:59:f3:09:26:36:0c:47:30:88:d6:
58:c7:42:f7:58:bd:f7:d4:e7:8d:98:fd:3e:13:0a:
9f:62:61:70:cb:95:15:28:49:13:b5:42:8b:8c:f7:
d9:17:34:f5:2a:8f:6f:ab:7f:21:c3:bd:8c:b0:92:
8b:20:38:b5:52:dc:40:2a:c9:21:90:fe:14:a8:b7:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CD:35:B2:11:AA:19:C4:4D:9A:83:76:8F:BB:1D:5F:25:E8:BD:C9
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135362e302f32342d3234203d3e203533373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.73.156.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d1:2d:84:82:aa:e2:de:a6:73:cf:68:c3:01:b8:ed:c5:2d:
3b:ca:d3:3a:5b:e8:5e:1c:06:ca:14:d2:52:64:7f:e7:ed:c2:
8b:4f:53:89:84:a4:f1:ed:b9:1f:fc:84:18:ca:3c:46:14:62:
b9:7f:31:e3:a3:2d:25:c4:a5:35:c4:0e:89:fb:84:bd:88:90:
17:57:87:f4:b4:0e:30:44:80:fe:e9:c6:90:63:33:23:93:45:
3d:6a:2a:46:08:d0:6c:ed:aa:fe:93:42:fd:78:aa:e0:54:16:
d6:18:94:45:9c:ba:a7:60:ac:8e:55:10:81:3d:e2:43:88:99:
95:6f:d2:52:1f:c6:67:cb:85:49:37:b8:96:46:83:b7:1e:76:
4c:2d:c3:52:4a:91:3f:c2:c4:90:0b:5b:76:b9:2a:95:41:71:
ea:85:79:81:9a:14:29:e3:8e:b5:2f:f7:aa:8a:d6:f2:1c:d5:
38:18:a2:23:ff:df:b6:26:a6:80:46:ed:ad:da:18:e4:2c:82:
26:e2:86:de:ab:07:ff:93:7f:c5:90:02:b7:f0:a6:e7:c5:49:
fe:ce:83:d6:0a:d0:67:76:37:da:ee:61:d6:7b:1b:5b:d2:4c:
08:d6:19:9e:df:7c:86:21:c3:a6:94:4c:a9:9c:43:6a:e9:ed:
e8:1f:1d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:43:58 2026 by rpki-client