
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139312e302e302f31362d3136203d3e2035363530.roa
File: 34372e3139312e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier: Z8MKWVbBSIjZdr0u5Txbdm09X1oO5eWSloxhX5FQb54=
Subject key identifier: 87:E9:7B:BF:ED:C5:2E:66:BF:BE:EB:92:16:FF:1B:31:65:C0:5B:AB
Certificate issuer: /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial: 57B39F2FB957293DD7DD328588C5CE66CD0870D7
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139312e302e302f31362d3136203d3e2035363530.roa
Signing time: Tue 27 Jan 2026 06:03:19 +0000
ROA not before: Tue 27 Jan 2026 05:58:19 +0000
ROA not after: Tue 26 Jan 2027 06:03:19 +0000
asID: 5650
IP address blocks: 47.191.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 12:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b3:9f:2f:b9:57:29:3d:d7:dd:32:85:88:c5:ce:66:cd:08:70:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Validity
Not Before: Jan 27 05:58:19 2026 GMT
Not After : Jan 26 06:03:19 2027 GMT
Subject: CN=87E97BBFEDC52E66BFBEEB9216FF1B3165C05BAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:c2:36:78:59:f8:5a:67:1c:2e:03:f6:d1:
d1:9f:6e:ad:c5:b8:ab:8f:e4:db:87:06:c2:0b:27:
5f:65:fe:e1:50:d3:63:da:df:63:72:f0:64:e6:26:
1a:ff:1a:e3:af:01:9b:ec:cb:18:a0:6b:20:cf:90:
df:b0:66:90:e0:09:ed:79:65:39:a2:e1:6f:ce:fd:
4b:ed:d9:2a:69:a6:84:dc:59:57:6b:f1:b3:79:70:
78:a2:fd:fb:3c:f5:6b:b2:d7:44:f5:2c:41:b8:23:
e9:af:b4:f6:48:57:23:6b:2e:dd:20:58:86:4e:24:
62:15:d9:0b:54:9d:3a:76:6d:dd:75:03:61:56:d8:
2f:48:ca:06:89:b0:33:63:26:d4:fe:01:32:0e:f0:
2a:2b:c7:85:a7:1e:79:14:67:9c:26:26:7a:74:dc:
c6:57:b9:8f:a3:17:bd:a3:89:21:e3:ec:12:f3:7d:
1b:55:68:98:67:4b:e5:36:42:e6:05:8a:46:18:8f:
dc:13:45:07:06:44:fb:88:ac:1e:ec:74:c8:86:b6:
fc:31:4d:69:6f:ba:44:b1:52:ec:0d:d3:d8:4c:ed:
be:15:f8:dd:eb:c2:89:66:de:01:f2:89:c8:d6:00:
c1:41:0b:f7:c0:b9:9d:6b:74:82:8a:72:7c:a2:ec:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E9:7B:BF:ED:C5:2E:66:BF:BE:EB:92:16:FF:1B:31:65:C0:5B:AB
X509v3 Authority Key Identifier:
keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139312e302e302f31362d3136203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.191.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:98:18:18:8b:5d:e3:43:6e:69:e0:50:99:35:8a:cb:38:75:
12:43:1b:b0:fc:4b:25:18:34:d4:1f:14:82:a4:a6:d2:83:f6:
29:03:ab:70:15:71:df:e0:7c:26:4a:d0:ef:ba:3c:e0:55:70:
dc:be:a9:46:4e:05:e4:bc:eb:25:49:f1:6c:3c:06:43:ac:17:
f0:92:54:a5:4d:f7:20:ae:f3:ce:a4:ee:b9:51:03:a7:61:3c:
22:7e:9f:fe:9f:1b:bc:64:4b:f7:3d:99:1c:17:56:ad:aa:f8:
21:8f:8f:f0:7e:1c:6c:7c:fd:4f:c1:4f:50:5d:ec:21:6c:78:
1d:51:19:c6:2c:13:8d:87:4f:85:21:91:9f:b8:60:12:0c:ac:
b7:77:42:b2:dc:cf:ef:88:d9:b9:c0:8f:54:c5:c2:6d:bf:f2:
c6:b9:4c:34:77:28:99:68:8e:1d:69:01:0c:e6:6f:1c:f2:ac:
4e:7c:56:7c:15:a5:55:56:d0:0f:f4:9c:7d:3b:40:be:fe:e2:
0d:54:26:db:43:72:34:5a:5a:eb:75:45:cd:f5:4a:58:df:88:
de:66:41:07:7d:45:be:00:07:53:52:df:af:c0:c3:71:bc:9f:
84:2f:7d:a3:a0:91:cb:7d:96:34:88:1e:82:5e:d9:46:4f:5f:
b9:f0:97:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:25 2026 by rpki-client