
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31382d3138203d3e2035363530.roa
File: 3137322e3130392e302e302f31382d3138203d3e2035363530.roa (raw, json)
Hash identifier: 264Q4s+xpSkpKo8JgXC6xANK9w8E/S3qLIffI2Grp/c=
Subject key identifier: DD:9B:D7:D5:D9:E7:22:E4:D0:BF:5E:94:D5:4E:9A:0B:98:BB:EB:C7
Certificate issuer: /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial: 3019397D3DCB726A679F5ADABCCAB2F20E37F0F2
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31382d3138203d3e2035363530.roa
Signing time: Wed 19 Feb 2025 05:08:49 +0000
ROA not before: Wed 19 Feb 2025 05:03:49 +0000
ROA not after: Wed 18 Feb 2026 05:08:49 +0000
asID: 5650
IP address blocks: 172.109.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 18:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:19:39:7d:3d:cb:72:6a:67:9f:5a:da:bc:ca:b2:f2:0e:37:f0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Validity
Not Before: Feb 19 05:03:49 2025 GMT
Not After : Feb 18 05:08:49 2026 GMT
Subject: CN=DD9BD7D5D9E722E4D0BF5E94D54E9A0B98BBEBC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:53:e9:cb:91:d2:d5:30:b2:cf:99:74:53:
ca:8d:6c:b2:45:41:6a:4f:ca:34:a6:9f:db:12:ab:
f5:b4:04:d5:16:82:43:44:0b:ea:64:0b:2b:6b:3d:
90:69:2c:82:4a:c1:ae:a0:01:6d:e9:2c:6a:76:66:
6f:15:cb:87:75:78:f1:ce:b4:50:43:ee:4a:a9:70:
29:ba:55:2c:ac:32:2f:1d:c3:04:26:cf:85:c0:07:
d2:e4:41:b9:4e:36:e5:eb:ce:9b:b3:6d:b0:fb:66:
6c:0e:fe:53:60:bc:60:a7:e4:b0:e3:0a:14:e0:bc:
2f:50:39:22:36:59:50:51:bb:da:71:00:4d:6d:5b:
77:fc:9a:68:db:35:15:da:33:f3:36:d9:dd:f0:a6:
7a:8c:d6:70:a8:dd:ac:72:21:a4:01:d8:dd:05:25:
7b:af:76:b8:b3:3c:18:4f:98:6d:08:14:95:76:fa:
f4:5a:98:28:22:b5:20:15:b5:b4:ac:a7:6d:6b:19:
03:97:90:49:dc:46:26:17:77:61:4d:a5:4a:8c:97:
b8:50:bc:61:9e:88:99:6d:4e:fa:31:0d:57:f3:99:
cb:d5:b1:41:33:9c:12:f8:68:d2:52:58:e1:bb:7f:
25:59:f7:90:21:bd:3d:60:0e:7f:69:3d:69:0e:49:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9B:D7:D5:D9:E7:22:E4:D0:BF:5E:94:D5:4E:9A:0B:98:BB:EB:C7
X509v3 Authority Key Identifier:
keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31382d3138203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.109.0.0/18
Signature Algorithm: sha256WithRSAEncryption
bb:6c:f3:59:60:ea:64:ac:27:84:d9:03:6c:cc:3c:4f:ad:9c:
ca:d9:7c:60:56:9c:ab:85:04:01:a3:28:7d:82:1d:bc:65:d8:
22:f1:16:66:bd:38:88:79:87:da:57:19:ed:59:45:fe:8b:54:
23:3d:79:84:04:61:b0:d9:0a:e7:78:1b:db:e4:06:0c:de:f7:
b4:6c:83:53:66:27:18:a2:c4:9d:1b:84:f7:d2:7e:6d:8b:cc:
6b:f2:e7:2e:a8:15:2d:4b:6c:1c:e5:7b:fd:c6:ee:8a:72:bf:
5b:40:6d:ab:72:6d:4c:87:ab:59:24:eb:c4:9d:d9:87:e5:48:
09:41:67:db:6f:98:0d:0d:cf:63:2c:3c:05:9c:6e:25:b7:2e:
e5:0d:0c:a1:26:cd:92:05:c3:a6:9c:80:06:b1:f5:ea:d7:36:
9e:27:bf:e2:d0:fb:a1:59:cb:ed:25:bb:4f:5e:76:a9:99:7c:
19:30:e2:1a:ce:b8:f4:95:2b:c6:94:ec:b7:f6:dd:34:23:1f:
0f:ac:a1:04:19:58:7e:d7:5d:78:3a:15:19:f6:07:66:04:57:
c8:fd:ce:b1:dd:57:4e:ea:73:45:b5:eb:a8:cb:b0:fb:43:49:
25:c4:57:70:b9:a9:1f:28:d3:79:d1:29:fd:66:cf:b2:73:a2:
b4:6d:4f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:42:02 2025 by rpki-client