
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136342e302f32342d3234203d3e20383334.roa
File: 3230392e38372e3136342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: GKNqc+CXf+aS82flygi5eSuncHqZJc4S9GdBYyTLFvo=
Subject key identifier: 10:D2:AD:A4:D6:75:6C:38:47:F1:E1:27:84:8C:C4:50:15:1B:A7:4F
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 5B701F16F59D9B4284CD6D7515C8131D739614F3
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136342e302f32342d3234203d3e20383334.roa
Signing time: Fri 08 May 2026 08:36:33 +0000
ROA not before: Fri 08 May 2026 08:31:33 +0000
ROA not after: Fri 07 May 2027 08:36:33 +0000
asID: 834
IP address blocks: 209.87.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 05:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:70:1f:16:f5:9d:9b:42:84:cd:6d:75:15:c8:13:1d:73:96:14:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: May 8 08:31:33 2026 GMT
Not After : May 7 08:36:33 2027 GMT
Subject: CN=10D2ADA4D6756C3847F1E127848CC450151BA74F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:da:8b:4c:3b:46:09:12:34:05:53:ae:44:
0d:e8:e3:de:9f:ff:a6:ce:31:32:c9:ea:da:5f:cb:
5e:7d:ad:7f:b0:3e:d4:ab:89:52:a4:f4:22:1c:73:
41:cd:a0:7f:5b:f8:b4:3e:cf:5b:a9:9e:ab:d6:e1:
15:23:5e:09:48:80:2b:9a:04:6b:e2:7c:36:bd:4d:
90:31:7d:0b:f2:bf:43:7f:9c:c3:40:49:72:83:84:
0f:3f:fd:9f:f3:4a:d1:d3:3b:52:56:de:46:e3:69:
25:7f:0d:30:ac:cf:3d:85:03:ef:fe:0d:08:e7:89:
1c:24:ed:fc:0a:12:b0:08:6a:ad:29:84:c2:96:4a:
ec:ad:88:ae:cc:22:79:53:21:7d:5f:90:5b:2c:33:
85:46:16:0f:66:cc:45:f5:92:67:03:76:31:2d:ff:
bf:7e:eb:5f:73:0b:bb:cd:56:f4:db:10:04:39:59:
30:59:ab:08:14:77:d1:cc:d5:37:1a:bf:e5:73:09:
8f:9f:f1:2f:17:8b:da:ec:9f:d7:5e:bb:c7:06:05:
25:fb:23:02:cb:44:5e:fc:ac:4f:1f:8d:9d:cd:e3:
41:83:88:73:cf:af:84:bf:8a:88:16:24:23:1c:4d:
05:10:1c:0a:c6:a2:26:b1:94:f9:2c:f2:d9:c4:0a:
fa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D2:AD:A4:D6:75:6C:38:47:F1:E1:27:84:8C:C4:50:15:1B:A7:4F
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.164.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:d4:20:02:b7:ff:e0:cf:cc:11:73:2e:cd:02:f8:36:2f:5c:
8d:a6:2a:be:01:30:f5:79:bf:bf:a2:f8:44:85:e8:3a:85:bf:
98:9e:9e:50:71:15:a2:22:91:ad:e2:e4:90:96:29:da:5a:1a:
5a:97:0b:1a:c6:1f:04:05:34:f4:0f:d9:27:0d:f0:bf:a6:8b:
dd:88:f4:3f:db:60:f0:bc:e6:4c:8a:39:23:34:cd:c0:1c:8a:
2e:c2:e6:68:84:7d:21:ca:38:49:9e:ff:fe:1b:7b:91:e2:ce:
af:16:5b:6f:75:7b:30:bf:00:67:d6:5c:7d:cd:9a:76:2e:d6:
28:58:ad:6b:d4:3b:b3:84:8b:24:81:0a:85:01:a3:86:58:4e:
37:1f:47:ef:23:1c:a3:d9:44:a3:cc:58:33:62:62:b6:36:47:
9a:18:2f:3f:0c:bc:87:6c:85:65:61:18:56:b5:f1:85:dd:7a:
9a:a7:b3:4a:2f:1d:bd:78:b5:55:57:83:6d:71:6a:42:27:4d:
ed:c3:a3:3a:80:16:16:71:ae:7e:2a:11:75:a2:20:3c:af:7b:
1d:41:0b:f1:2e:0f:13:b2:3f:b7:9c:80:4d:a6:6f:80:43:ce:
16:b7:99:13:04:82:50:f8:44:ed:5f:34:9e:1f:e4:0c:06:e1:
1a:ae:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:47 2026 by rpki-client