
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e203431303935.roa
File: 3230382e39312e3139312e302f32342d3234203d3e203431303935.roa (raw, json)
Hash identifier: nUMFsVS1xJzJd07nr/V7NTDW8Hozo3ZgVn2aX52zEU4=
Subject key identifier: 9F:CD:11:42:D6:32:C0:1B:BA:5F:6A:AE:B8:0B:BD:D7:D6:E3:2A:4F
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 3C5E507DFB12ED9AACD72C982668BFD4FE105F91
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e203431303935.roa
Signing time: Tue 05 May 2026 04:36:00 +0000
ROA not before: Tue 05 May 2026 04:31:00 +0000
ROA not after: Tue 04 May 2027 04:36:00 +0000
asID: 41095
IP address blocks: 208.91.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 18:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:5e:50:7d:fb:12:ed:9a:ac:d7:2c:98:26:68:bf:d4:fe:10:5f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: May 5 04:31:00 2026 GMT
Not After : May 4 04:36:00 2027 GMT
Subject: CN=9FCD1142D632C01BBA5F6AAEB80BBDD7D6E32A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d0:4f:0b:44:2d:ee:a0:e4:de:fc:7d:fe:06:
09:d7:86:da:e8:6c:3a:4a:5c:bc:3c:4b:d7:e3:1d:
8c:85:e8:59:a8:61:02:a5:f6:b5:f4:a7:0d:42:82:
5a:5f:07:0a:e5:e7:db:5b:83:3a:81:af:1d:7b:f3:
c4:6a:fb:85:3d:e4:bc:50:a6:bb:13:64:ce:a8:45:
aa:57:60:d7:d9:df:68:c1:69:11:fb:ac:84:e5:eb:
4e:7d:74:93:95:0e:23:27:21:31:ad:42:b6:ea:4e:
d9:e9:15:a2:a0:7b:2c:ad:93:af:ad:cf:f3:c9:a6:
69:a6:a3:fc:31:39:dd:ca:79:29:a7:92:af:da:b8:
50:8e:86:d0:7e:3f:71:aa:57:4c:87:48:51:aa:e0:
54:8a:2b:01:21:71:a2:ba:7d:dc:52:d3:84:65:36:
9f:8a:60:1a:18:5e:ba:5f:cb:3e:c6:a5:14:96:b7:
ec:df:b5:7b:04:96:4f:53:2c:66:9d:92:a2:07:b9:
ed:9c:ff:0c:03:92:26:b7:ff:b8:2e:9b:7c:7b:4c:
98:50:f9:4d:8e:10:50:d7:ca:8e:27:45:03:0a:c6:
c2:e8:c2:c7:e3:03:30:64:d0:55:e1:b5:18:86:d1:
0f:45:d1:02:f3:f3:6c:d3:48:43:09:96:dc:aa:f6:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CD:11:42:D6:32:C0:1B:BA:5F:6A:AE:B8:0B:BD:D7:D6:E3:2A:4F
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e203431303935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.191.0/24
Signature Algorithm: sha256WithRSAEncryption
97:08:96:7b:eb:fe:07:63:c8:f3:43:ab:a9:71:d5:28:38:78:
bd:ad:69:b8:aa:12:c6:af:52:b5:f1:e6:2e:69:1c:55:d8:f8:
91:f5:a2:4b:e9:ce:fb:16:82:12:41:2f:1e:d0:ee:86:69:3e:
c6:75:ca:86:fd:19:e9:61:b5:a6:2e:12:66:0e:62:40:e2:3f:
e6:25:9b:70:5b:a9:8b:89:56:58:3b:d5:62:36:26:cc:7d:8f:
ae:67:6a:d6:5b:46:03:05:b7:e7:f2:27:b2:fc:26:aa:16:6f:
0e:34:e1:6c:c2:ff:28:1c:80:c5:ac:3b:15:27:f1:e4:5c:e0:
37:3f:02:d9:ef:30:4f:30:d3:b0:80:a8:9a:32:1d:cc:07:00:
89:e7:50:7c:3c:98:d0:f8:cb:fb:61:4f:ed:ec:08:dd:ec:6b:
ea:76:53:c1:82:05:d2:24:2d:86:d0:c1:2e:3a:e2:51:5b:6f:
a1:07:83:ea:df:70:69:a6:01:4e:b0:59:f6:10:0b:92:4e:11:
34:3f:53:ea:a8:98:84:57:59:f9:ea:a0:dc:63:ba:b8:58:58:
b9:ac:cc:f7:9b:63:c2:59:3f:2e:70:6b:ec:30:d5:63:92:5b:
ab:ae:b8:92:94:62:95:da:23:9b:5a:80:be:98:a3:9a:73:eb:
08:8a:e7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:17 2026 by rpki-client