
$ rpki-client -vvvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203534323532.roa
File: 3136352e3134302e32372e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: tEvWwOLW/xIMVWUZLbw1EkqAqKGWjuJd7ysb+4PNQ/I=
Subject key identifier: AC:50:6A:C6:05:2E:10:EA:34:7A:13:0B:62:23:23:91:62:46:80:E0
Certificate issuer: /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial: 2C1AC6769C1404C2A53DACDA0DB37590B0879708
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access: rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203534323532.roa
Signing time: Fri 11 Sep 2026 12:36:20 +0000
ROA not before: Fri 11 Sep 2026 12:31:20 +0000
ROA not after: Fri 10 Sep 2027 12:36:20 +0000
asID: 54252
IP address blocks: 165.140.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 09:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:1a:c6:76:9c:14:04:c2:a5:3d:ac:da:0d:b3:75:90:b0:87:97:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Validity
Not Before: Sep 11 12:31:20 2026 GMT
Not After : Sep 10 12:36:20 2027 GMT
Subject: CN=AC506AC6052E10EA347A130B62232391624680E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:46:ab:3b:4b:5a:59:ed:a1:b8:18:a6:2d:
fc:40:02:2e:72:7f:83:d6:17:c2:07:41:a9:12:9c:
af:d4:d2:23:73:aa:21:9b:a4:e4:4b:89:0c:d9:be:
57:77:0f:2e:78:d3:0e:22:5b:5d:53:f9:c5:d8:f7:
8b:22:d6:ab:4e:69:8f:8b:77:c7:e5:d2:a6:d3:de:
0f:ed:c3:b2:a9:1a:46:4d:41:bc:27:e5:eb:da:f1:
5b:a1:58:ee:36:df:40:67:5f:e8:cd:b2:04:94:c3:
28:52:36:11:17:e7:f0:32:b9:ba:2d:c3:73:c9:c5:
04:b4:0e:6f:00:90:05:0b:59:f1:bb:d3:f7:67:26:
92:83:cf:67:4f:e7:01:72:54:22:4d:58:a1:ee:30:
68:84:5f:7d:c6:2a:91:6a:80:65:42:a8:63:66:d6:
51:04:ba:7a:38:21:6d:15:4d:3e:22:ad:b3:8f:df:
34:25:4b:46:37:05:db:cb:e3:68:b4:31:b9:5d:24:
90:f9:7a:bf:fa:11:7d:af:11:02:65:70:02:be:52:
bf:1a:51:d6:ee:0a:ed:2f:03:77:90:4d:aa:59:0e:
62:de:76:21:76:f1:97:fc:99:b7:52:8e:2c:c7:fb:
69:97:cb:a6:bd:fa:a0:d3:b4:79:4b:df:a3:a7:ad:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:50:6A:C6:05:2E:10:EA:34:7A:13:0B:62:23:23:91:62:46:80:E0
X509v3 Authority Key Identifier:
keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.140.27.0/24
Signature Algorithm: sha256WithRSAEncryption
65:5a:14:1a:c0:a4:4a:c6:c5:36:b5:f9:f6:50:20:37:15:b5:
ab:ab:c5:12:44:e7:21:96:42:5d:11:2d:a6:34:fa:64:c5:ab:
c2:3b:5d:4a:fe:10:db:1d:5b:ef:f6:df:9c:ff:3d:e7:79:73:
a1:fc:23:2a:23:21:3b:e7:b1:87:36:fb:9f:7c:c5:ce:e2:ef:
3e:c7:c1:ed:ce:17:7c:b8:aa:5a:dd:f4:f3:79:65:69:2d:9c:
5e:05:d5:e9:da:b9:29:af:88:48:97:cb:6f:73:e2:b9:ef:13:
5f:a9:de:03:fc:b2:8c:48:a2:89:98:76:25:ab:47:e9:40:19:
ff:44:b5:bb:75:b6:48:4c:0e:9e:df:55:0b:89:74:82:0e:80:
86:79:15:a2:64:33:f9:db:6d:9c:94:cd:26:3a:b8:1f:d6:a0:
16:50:45:ae:1c:b1:a2:39:08:af:cd:5f:c1:37:c7:dd:ed:db:
48:5c:3e:ef:ad:f4:03:6f:89:61:27:d1:f2:82:61:57:52:87:
ac:89:c9:cf:bb:89:12:48:3e:e2:aa:26:7a:9d:88:04:c3:37:
da:28:06:2b:2d:ee:79:f2:9b:3e:0b:68:68:15:68:9a:8e:42:
24:10:a5:be:83:28:18:0a:21:c0:16:04:c6:37:fa:d2:60:71:
2b:79:7d:ff
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIULBrGdpwUBMKlPazaDbN1kLCHlwgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNGJhMzM3Y2NmZmJhODUwYWVlMThmMTlhZmRlNzhkZjMy
YzBiYTE1NzY5MWFiYWM0MGYwHhcNMjYwOTExMTIzMTIwWhcNMjcwOTEwMTIzNjIw
WjAzMTEwLwYDVQQDEyhBQzUwNkFDNjA1MkUxMEVBMzQ3QTEzMEI2MjIzMjM5MTYy
NDY4MEUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxtGqztLWlnt
obgYpi38QAIucn+D1hfCB0GpEpyv1NIjc6ohm6TkS4kM2b5Xdw8ueNMOIltdU/nF
2PeLItarTmmPi3fH5dKm094P7cOyqRpGTUG8J+Xr2vFboVjuNt9AZ1/ozbIElMMo
UjYRF+fwMrm6LcNzycUEtA5vAJAFC1nxu9P3ZyaSg89nT+cBclQiTVih7jBohF99
xiqRaoBlQqhjZtZRBLp6OCFtFU0+Iq2zj980JUtGNwXby+NotDG5XSSQ+Xq/+hF9
rxECZXACvlK/GlHW7grtLwN3kE2qWQ5i3nYhdvGX/Jm3Uo4sx/tpl8umvfqg07R5
S9+jp60PSQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFKxQasYFLhDqNHoTC2IjI5Fi
RoDgMB8GA1UdIwQYMBaAFN0PZAw9zgXK9SVNir/Qn4577j4RMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzJlZTRkMDgwZjk3MTRmOTliMjljYTU1YTU0NmU2ZWY0LzAv
REQwRjY0MEMzRENFMDVDQUY1MjU0RDhBQkZEMDlGOEU3QkVFM0UxMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3
ZTM0M2Y4L2NmOTBkN2JmLWRhZDYtNDg1MS1hYzMzLWYxY2E4YjMyZWM2OC80YmEz
MzdjY2ZmYmE4NTBhZWUxOGYxOWFmZGU3OGRmMzJjMGJhMTU3NjkxYWJhYzQwZi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8yZWU0ZDA4MGY5NzE0Zjk5YjI5Y2E1
NWE1NDZlNmVmNC8wLzMxMzYzNTJlMzEzNDMwMmUzMjM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNDMyMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKWMGzANBgkqhkiG9w0BAQsF
AAOCAQEAZVoUGsCkSsbFNrX59lAgNxW1q6vFEkTnIZZCXREtpjT6ZMWrwjtdSv4Q
2x1b7/bfnP8953lzofwjKiMhO+exhzb7n3zFzuLvPsfB7c4XfLiqWt3083llaS2c
XgXV6dq5Ka+ISJfLb3Piue8TX6neA/yyjEiiiZh2JatH6UAZ/0S1u3W2SEwOnt9V
C4l0gg6AhnkVomQz+dttnJTNJjq4H9agFlBFrhyxojkIr81fwTfH3e3bSFw+7630
A2+JYSfR8oJhV1KHrInJz7uJEkg+4qomep2IBMM32igGKy3uefKbPgtoaBVomo5C
JBClvoMoGAohwBYExjf60mBxK3l9/w==
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:35:52 2026 by rpki-client