
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa
File: 3137322e38322e39312e302f32342d3234203d3e20323132333936.roa (raw, json)
Hash identifier: Q8iGJZ1bncG35P552yaHGEtGafum6VCbPp9i/fbN9wQ=
Subject key identifier: 9D:FF:8E:C0:C7:A5:23:69:43:F8:08:97:1B:F8:FF:5A:71:5F:88:25
Certificate issuer: /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial: 2DA66BC9ED65705F7A0667CFCF884433E752D7F0
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa
Signing time: Thu 26 Feb 2026 10:09:56 +0000
ROA not before: Thu 26 Feb 2026 10:04:56 +0000
ROA not after: Thu 25 Feb 2027 10:09:56 +0000
asID: 212396
IP address blocks: 172.82.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 11:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a6:6b:c9:ed:65:70:5f:7a:06:67:cf:cf:88:44:33:e7:52:d7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Validity
Not Before: Feb 26 10:04:56 2026 GMT
Not After : Feb 25 10:09:56 2027 GMT
Subject: CN=9DFF8EC0C7A5236943F808971BF8FF5A715F8825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:7b:a0:e8:1e:1c:bc:07:1b:52:4e:a6:d9:
42:4d:8b:0a:b9:2b:b2:18:79:a7:a9:48:c5:5f:94:
51:64:c9:93:89:72:3f:3f:14:36:78:95:3b:ca:da:
bd:70:36:f8:68:80:95:9b:7a:39:12:14:07:41:ef:
62:61:cf:d3:f8:95:b1:b7:e0:a1:b1:c9:ed:df:29:
66:fa:8f:4b:83:b8:20:41:66:d7:fc:6d:71:33:ae:
3c:42:ef:c1:b6:77:17:3e:61:ad:d0:c9:9d:1c:90:
f2:11:c2:5b:51:c9:ee:de:51:5f:db:ea:ca:a2:ae:
01:09:ab:15:f9:c4:62:7a:f5:33:29:db:67:a5:27:
5b:e2:6f:af:a0:80:46:4e:68:c4:a2:c6:ff:db:d9:
f6:05:8d:5b:4c:0e:fa:d5:d4:75:20:84:3f:00:a6:
c1:c5:cc:e1:3d:26:86:b6:fa:7c:17:6f:43:09:cc:
d1:eb:67:b6:f4:74:7e:70:15:d8:51:c9:4b:3e:e5:
78:f0:97:fb:91:99:8b:5a:6e:dc:0f:9b:f5:19:92:
93:79:af:e2:1b:39:6a:52:08:cd:df:9c:35:b0:c6:
3c:d0:a8:98:b8:16:22:92:21:4d:1a:fb:69:a5:6f:
77:27:50:fe:0d:37:9f:95:03:fb:42:a0:3b:6c:7c:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FF:8E:C0:C7:A5:23:69:43:F8:08:97:1B:F8:FF:5A:71:5F:88:25
X509v3 Authority Key Identifier:
keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.82.91.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a9:48:28:8d:0f:b5:79:f0:9f:4e:99:72:af:46:a1:01:4e:
1a:4f:a3:50:f6:d6:03:1a:43:23:29:06:73:ee:83:c2:bf:53:
38:4e:82:a2:01:3a:41:f8:4f:95:29:65:7e:82:48:38:17:d2:
c3:64:f3:be:64:5e:0f:c8:af:4c:b2:d9:4b:cc:cf:77:ce:17:
07:5a:b6:c0:9c:9c:d6:a7:86:f7:9a:ca:c0:7d:44:e7:14:9c:
15:b6:88:d4:95:6d:e4:1b:05:8b:a1:56:45:61:f3:4b:88:de:
cc:3f:89:ed:0e:08:7f:b5:90:d4:6c:4d:4f:e3:06:df:1e:4b:
9c:a8:8b:8f:b1:dc:dd:df:6d:ae:5d:bd:ca:48:0d:d3:38:50:
a6:cf:e5:9e:40:6f:5f:a1:23:e4:32:11:1a:62:15:34:8f:80:
60:59:44:1c:b5:5c:f1:79:fd:e3:82:13:86:99:d1:7c:d9:01:
9f:1e:e3:25:73:3a:a4:83:16:5b:61:f9:9d:5c:13:f7:cc:50:
53:89:97:fa:39:fa:bb:de:54:a5:38:f4:31:17:e4:cd:78:e8:
ec:b0:2d:6f:0c:b6:f2:2c:40:14:e1:9d:fa:e8:f8:af:a3:f6:
2b:65:2f:e3:07:9c:d3:bd:b3:53:0f:93:41:d6:f7:12:f5:1a:
79:57:5f:9c
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIULaZrye1lcF96BmfPz4hEM+dS1/AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjYwMjI2MTAwNDU2WhcNMjcwMjI1MTAwOTU2
WjAzMTEwLwYDVQQDEyg5REZGOEVDMEM3QTUyMzY5NDNGODA4OTcxQkY4RkY1QTcx
NUY4ODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRV7oOgeHLwH
G1JOptlCTYsKuSuyGHmnqUjFX5RRZMmTiXI/PxQ2eJU7ytq9cDb4aICVm3o5EhQH
Qe9iYc/T+JWxt+Chscnt3ylm+o9Lg7ggQWbX/G1xM648Qu/BtncXPmGt0MmdHJDy
EcJbUcnu3lFf2+rKoq4BCasV+cRievUzKdtnpSdb4m+voIBGTmjEosb/29n2BY1b
TA761dR1IIQ/AKbBxczhPSaGtvp8F29DCczR62e29HR+cBXYUclLPuV48Jf7kZmL
Wm7cD5v1GZKTea/iGzlqUgjN35w1sMY80KiYuBYikiFNGvtppW93J1D+DTeflQP7
QqA7bHz3vQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFJ3/jsDHpSNpQ/gIlxv4/1px
X4glMB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz
M2M1YzVmNmI1Yi8wLzMxMzczMjJlMzgzMjJlMzkzMTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzEzMjMzMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxSWzANBgkqhkiG9w0BAQsF
AAOCAQEAhKlIKI0PtXnwn06Zcq9GoQFOGk+jUPbWAxpDIykGc+6Dwr9TOE6CogE6
QfhPlSllfoJIOBfSw2TzvmReD8ivTLLZS8zPd84XB1q2wJyc1qeG95rKwH1E5xSc
FbaI1JVt5BsFi6FWRWHzS4jezD+J7Q4If7WQ1GxNT+MG3x5LnKiLj7Hc3d9trl29
ykgN0zhQps/lnkBvX6Ej5DIRGmIVNI+AYFlEHLVc8Xn944IThpnRfNkBnx7jJXM6
pIMWW2H5nVwT98xQU4mX+jn6u95UpTj0MRfkzXjo7LAtbwy28ixAFOGd+uj4r6P2
K2Uv4wec072zUw+TQdb3EvUaeVdfnA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:23:35 2026 by rpki-client