
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32332d3233203d3e203336323336.roa
File: 35392e3135332e31322e302f32332d3233203d3e203336323336.roa (raw, json)
Hash identifier: GR2NA4AMeysYd17sKi1wGTdEm4/WeHQKISTNi3UqIPo=
Subject key identifier: 0C:FD:86:7E:00:5D:5B:8C:F0:01:32:5D:7A:AE:66:DF:B7:5D:6E:93
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 444C7C73C9B61C77FE2954E11C8902FD65E2F8B0
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32332d3233203d3e203336323336.roa
Signing time: Tue 28 Jul 2026 19:29:13 +0000
ROA not before: Tue 28 Jul 2026 19:24:13 +0000
ROA not after: Tue 27 Jul 2027 19:29:13 +0000
asID: 36236
IP address blocks: 59.153.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:40:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:4c:7c:73:c9:b6:1c:77:fe:29:54:e1:1c:89:02:fd:65:e2:f8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Validity
Not Before: Jul 28 19:24:13 2026 GMT
Not After : Jul 27 19:29:13 2027 GMT
Subject: CN=0CFD867E005D5B8CF001325D7AAE66DFB75D6E93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:99:78:84:c0:82:e2:58:99:d2:84:e0:bc:
08:1e:67:69:c7:2c:66:56:97:9c:5b:9b:71:6d:fa:
79:6a:de:85:9f:4c:fd:3d:6b:07:72:6c:7d:07:02:
05:b8:97:21:c4:5a:39:90:8c:0a:27:29:8d:6c:e3:
a1:46:69:df:f7:cd:55:03:ab:ea:68:19:76:a0:fd:
9a:5f:5d:0f:f9:e5:78:3d:1f:84:bd:94:81:eb:85:
23:ba:38:0d:94:f8:df:bf:58:50:3e:5c:fc:46:e1:
7e:08:a9:92:ae:ab:a4:34:34:b6:09:7d:a7:5a:ca:
57:74:46:11:20:e8:9c:3a:14:e5:3e:8d:36:48:0f:
cf:50:c2:31:4f:95:4b:ed:74:89:0c:18:61:f7:04:
72:f4:a1:27:f2:6d:33:46:4a:05:ac:1a:d0:e0:d4:
0f:18:ae:a2:27:33:0c:1e:90:42:00:6c:1f:d3:fd:
8f:83:b6:0b:f4:36:04:bd:e3:a9:36:59:e5:a3:5e:
3b:8f:8d:e2:cf:1b:2c:86:9c:fd:61:c4:cc:07:a3:
a7:1a:03:26:38:d9:01:89:da:14:94:b5:fd:41:ba:
81:fd:1a:3b:40:ab:b0:1c:a0:c6:0d:a6:13:8b:56:
b1:ba:bb:3e:18:4b:a2:a6:dd:40:cf:b4:ae:9f:23:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FD:86:7E:00:5D:5B:8C:F0:01:32:5D:7A:AE:66:DF:B7:5D:6E:93
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32332d3233203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.153.12.0/23
Signature Algorithm: sha256WithRSAEncryption
af:18:86:ab:c0:c8:a7:be:a7:ec:91:83:f3:27:2b:ef:53:c9:
59:45:01:08:15:34:f0:a0:85:71:59:ef:08:1e:80:e0:b6:9e:
93:86:c8:32:cb:75:c5:0d:d4:dc:56:38:94:b1:fb:8f:a9:8a:
8b:42:9f:b0:f2:16:10:7e:96:de:e4:ae:54:0d:91:36:65:65:
25:b4:88:14:4c:31:db:0f:b8:fe:a3:14:21:5d:9c:ef:9f:f2:
9e:6f:8b:ec:55:a7:c2:98:a2:8e:8e:a1:2f:27:d3:8b:5f:f7:
56:33:89:72:2e:ca:d1:86:fe:75:4f:3d:6f:87:49:bd:d3:df:
41:ee:6e:9e:d4:97:f0:b7:b7:e1:95:0a:c9:b4:1c:f4:45:eb:
d8:68:46:e9:a5:f9:38:e4:f6:82:95:71:56:1b:d2:48:c7:38:
8c:22:10:02:1a:df:6c:5e:58:e7:35:61:34:38:fe:c5:2e:c2:
43:15:42:d6:09:d5:2b:48:96:ca:6c:0c:59:1c:af:83:28:79:
b0:76:c2:2a:d8:5a:0f:f2:6e:b9:8d:95:7f:cc:d4:a2:c7:20:
e9:16:64:d8:94:52:8a:dd:b3:b4:3c:d9:b9:69:6a:b3:3e:28:
1f:4a:55:c4:a8:23:61:e6:09:4a:d8:c6:d9:0e:d3:0a:27:52:
39:9f:c4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:05 2026 by rpki-client