
$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230392e3133312e3132302e302f32322d3332203d3e20333938393931.roa
File: 3230392e3133312e3132302e302f32322d3332203d3e20333938393931.roa (raw, json)
Hash identifier: 5iv6aMo3PvZ1SU0dej50/PC03/BqysYOeDWbAq8219s=
Subject key identifier: 60:A8:70:D8:D1:1B:BC:79:00:A5:2B:05:C6:7A:5C:E2:F1:E4:FE:64
Certificate issuer: /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial: 50CCE4A588BE89DA4F8A4DE343F2CC6B4D30DCC1
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230392e3133312e3132302e302f32322d3332203d3e20333938393931.roa
Signing time: Tue 28 Jul 2026 13:39:40 +0000
ROA not before: Tue 28 Jul 2026 13:34:40 +0000
ROA not after: Tue 27 Jul 2027 13:39:40 +0000
asID: 398991
IP address blocks: 209.131.120.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 16:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:cc:e4:a5:88:be:89:da:4f:8a:4d:e3:43:f2:cc:6b:4d:30:dc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Validity
Not Before: Jul 28 13:34:40 2026 GMT
Not After : Jul 27 13:39:40 2027 GMT
Subject: CN=60A870D8D11BBC7900A52B05C67A5CE2F1E4FE64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:2a:a8:a6:63:81:8a:d1:dc:d0:53:26:c8:
38:c6:20:05:5d:45:fd:02:17:14:f4:d4:d8:ed:df:
43:a1:18:94:84:1e:52:5d:14:db:88:6a:1a:34:71:
83:35:c0:5a:4e:b0:6c:a7:80:34:72:27:52:38:e1:
be:f9:2e:79:7a:8c:9d:11:95:50:23:02:4f:57:a0:
63:24:8d:5f:2d:01:7f:2e:3c:37:e0:99:bc:95:e3:
b5:9b:30:37:e9:90:70:7f:f5:8d:bb:ad:d8:e2:8e:
68:82:1d:b0:c3:59:bd:84:14:27:8d:e1:f4:b4:b7:
70:20:78:19:61:10:0d:0d:5f:83:b9:1e:ae:e1:df:
70:50:5a:e8:6a:b1:42:e6:1c:1b:41:ba:28:65:9b:
58:e4:13:84:4a:04:5d:4d:33:d8:f7:f4:f7:fe:6f:
19:05:f5:4c:98:5a:cd:95:fc:f5:29:16:d7:f8:30:
72:83:91:50:09:39:eb:a3:e0:85:1b:79:09:ce:2a:
a2:4b:8b:61:d5:4d:5e:01:42:52:1a:0c:ef:46:37:
08:89:f2:33:e3:9c:98:6e:60:31:10:96:8f:2d:24:
be:71:5e:d8:98:fb:2f:0a:30:2c:ca:ae:fd:8e:27:
ce:d3:ea:da:8b:3d:dd:1c:10:ef:87:b3:8f:bf:d4:
37:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:70:D8:D1:1B:BC:79:00:A5:2B:05:C6:7A:5C:E2:F1:E4:FE:64
X509v3 Authority Key Identifier:
keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230392e3133312e3132302e302f32322d3332203d3e20333938393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.131.120.0/22
Signature Algorithm: sha256WithRSAEncryption
92:fc:7b:be:bd:71:2a:8b:a7:ac:10:d1:87:2a:73:6d:ed:72:
af:12:8e:59:fa:34:64:ed:ae:83:9d:d8:96:30:8a:cb:22:67:
61:4b:c2:f3:2e:e2:ab:3f:91:16:0e:11:24:f5:f5:2d:c1:ee:
25:51:be:da:fa:87:1b:8f:59:c9:c8:61:23:d2:aa:70:75:55:
b0:32:6f:3d:ff:7a:af:1d:83:e5:20:2e:1b:3e:61:91:69:03:
6c:16:03:60:3b:f3:a8:3f:2a:37:76:fb:f1:61:9c:88:a0:92:
61:14:f2:fb:6b:54:c9:43:f8:ee:d6:01:74:86:04:45:ab:e0:
30:11:01:d0:c7:c5:57:e4:cb:7b:22:d8:eb:cf:8a:7f:88:e8:
d1:37:2f:13:99:a6:7f:29:7d:ae:25:cf:ea:dd:f7:0a:a4:e9:
41:57:75:13:24:8a:54:00:68:49:77:d0:50:e4:a8:74:20:f5:
2d:ec:38:ec:bd:ad:32:e0:6b:d5:38:c3:ce:e5:5c:40:25:16:
5d:74:a8:dd:23:06:f5:92:a3:35:d1:b3:e7:4b:d7:16:50:fb:
76:1f:ea:79:88:f1:a7:b2:4a:6f:3b:11:f5:bc:0c:13:c7:6c:
33:5b:fe:64:ce:36:4f:ab:8b:3b:70:28:07:93:e5:f3:e5:08:
33:a2:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:49:04 2026 by rpki-client