
$ rpki-client -vvvf rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/3135362e392e38382e302f32322d3232203d3e2030.roa
File: 3135362e392e38382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: qIaMiImI+T4GCu0+t1o61+hAnPkpBFUk/jcUrqjv0hs=
Subject key identifier: D3:CE:29:F0:A3:66:48:9E:93:4A:61:9E:AA:55:9A:5D:40:B1:B3:43
Certificate issuer: /CN=b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8
Certificate serial: 1C5C563208F457EABDDD37991E3BA126EFAF6D03
Authority key identifier: D2:17:BE:28:41:39:82:93:4A:3C:40:2B:0E:67:10:B9:85:A9:93:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/3135362e392e38382e302f32322d3232203d3e2030.roa
Signing time: Sun 18 Oct 2026 15:36:34 +0000
ROA not before: Sun 18 Oct 2026 15:31:34 +0000
ROA not after: Sun 17 Oct 2027 15:36:34 +0000
asID: 0
IP address blocks: 156.9.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.crl
rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 17:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5c:56:32:08:f4:57:ea:bd:dd:37:99:1e:3b:a1:26:ef:af:6d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8
Validity
Not Before: Oct 18 15:31:34 2026 GMT
Not After : Oct 17 15:36:34 2027 GMT
Subject: CN=D3CE29F0A366489E934A619EAA559A5D40B1B343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:f3:cb:f3:4f:51:61:7f:d1:8b:32:68:fd:
a6:44:57:c3:e4:da:f0:2a:df:99:ac:5f:08:90:6a:
c5:6f:ff:6a:fa:bb:8b:2a:af:d2:7f:15:91:5c:7f:
fc:39:f3:92:de:62:92:bd:03:b6:11:f7:e8:46:cb:
ab:9c:fd:14:a5:8d:db:50:aa:67:d0:c6:ff:3f:e5:
a7:55:2f:13:0d:59:a2:0a:98:a8:6c:cc:fa:db:ca:
80:bb:5e:20:b5:49:b2:19:97:14:78:63:74:a5:50:
31:6c:89:9e:f1:44:44:88:59:e2:f3:5f:86:96:74:
a1:5d:ce:83:ea:2a:e7:53:2b:2b:22:1b:22:25:de:
82:89:f8:5e:ad:cc:58:c7:59:e9:67:11:7d:56:e7:
b9:49:7e:4c:92:69:96:54:6b:f3:04:39:90:ec:86:
e5:06:f5:06:1b:c0:26:76:bd:b2:3e:6b:e2:fe:be:
aa:fc:7c:1f:d2:90:e1:af:40:68:97:c9:6c:24:f3:
f9:ce:a9:16:fc:b0:80:84:71:7a:9e:6d:87:96:de:
ff:2f:51:dd:e3:49:8c:00:07:85:52:c6:54:b4:f4:
f7:89:c0:cf:a6:98:87:20:90:91:43:29:a9:80:d0:
bc:b0:79:1c:6f:0d:25:bb:c8:a1:6c:a2:46:58:fb:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CE:29:F0:A3:66:48:9E:93:4A:61:9E:AA:55:9A:5D:40:B1:B3:43
X509v3 Authority Key Identifier:
keyid:D2:17:BE:28:41:39:82:93:4A:3C:40:2B:0E:67:10:B9:85:A9:93:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/3135362e392e38382e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.9.88.0/22
Signature Algorithm: sha256WithRSAEncryption
34:fe:9f:b7:fc:20:07:fe:82:71:b1:03:6f:43:df:59:f6:bf:
d7:f4:24:8f:f0:bf:e1:19:d2:b0:42:db:e0:4c:5b:c9:7f:3c:
32:6e:c2:56:96:c1:a5:51:79:e1:4e:c4:21:43:21:90:39:98:
bf:9f:e3:65:66:88:cf:0d:4c:98:58:d5:5f:6d:93:dc:be:bf:
c1:2c:8d:24:19:f4:03:5a:e4:82:08:2b:71:ce:fe:59:7e:8d:
8d:c2:1c:d0:f8:3c:91:2f:97:d2:ba:3d:62:d5:09:aa:a0:bb:
35:6a:9e:de:16:17:c8:3f:79:2c:b2:3a:5f:8d:85:8d:aa:a0:
62:23:dd:6b:d4:70:52:54:96:08:ad:a8:33:09:e2:98:17:1f:
34:43:19:40:dc:bb:86:43:8f:76:18:61:01:67:e0:37:7d:37:
92:8c:8a:e2:cf:b3:f9:4b:76:e6:e5:0c:b8:bc:19:0e:c7:ce:
e4:22:d8:b8:f0:6c:26:a8:35:00:31:70:96:6b:7e:2e:88:3b:
6a:a2:e5:6b:e8:c6:ff:85:a0:32:a7:09:f5:01:8c:f1:c2:0f:
6d:11:d9:28:72:1d:10:7b:ef:79:5e:36:4e:5a:6c:b2:6e:48:
07:f1:29:99:80:bd:b1:09:f7:bc:74:8e:6b:a7:ce:cc:33:9a:
cc:87:65:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:16:27 2026 by rpki-client