
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3133342e302f32332d3233203d3e20343031353236.roa
File: 3137322e3130382e3133342e302f32332d3233203d3e20343031353236.roa (raw, json)
Hash identifier: BzM4c4dRjQmMTy/HLVSGw3G7whhip2QnZ4S599839bc=
Subject key identifier: 18:5C:E2:60:66:1D:F5:EC:66:51:70:CA:FA:35:61:3F:AE:65:43:B1
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 0B959CD9BF3354D763F936F5833CA72703C0D245
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3133342e302f32332d3233203d3e20343031353236.roa
Signing time: Thu 04 Jun 2026 17:39:19 +0000
ROA not before: Thu 04 Jun 2026 17:34:19 +0000
ROA not after: Thu 03 Jun 2027 17:39:19 +0000
asID: 401526
IP address blocks: 172.108.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 12:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:95:9c:d9:bf:33:54:d7:63:f9:36:f5:83:3c:a7:27:03:c0:d2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Jun 4 17:34:19 2026 GMT
Not After : Jun 3 17:39:19 2027 GMT
Subject: CN=185CE260661DF5EC665170CAFA35613FAE6543B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:50:1c:b0:d6:9c:47:cb:53:60:d1:5f:52:
11:2f:ae:f9:89:d8:47:b6:c1:a2:06:7f:aa:32:0b:
3c:5b:c1:ee:07:fa:6a:df:ea:56:a0:40:25:e9:07:
05:a6:86:3e:89:a2:35:b0:15:9b:6a:73:75:6f:6e:
4e:6a:ec:fd:43:65:2f:f4:ec:28:05:4c:42:16:a7:
8a:f9:5d:12:02:c7:05:93:c2:b7:ce:82:85:d0:3f:
6b:ca:05:88:86:c2:ae:81:8e:f4:b5:de:e3:be:17:
ad:8b:2f:47:30:ff:b6:be:45:4d:60:77:e2:d6:0d:
70:7b:75:97:a9:8f:d8:eb:fa:c9:25:45:68:a3:84:
9f:11:10:24:86:b3:e8:4c:7b:88:6c:74:6d:59:5d:
73:44:c1:22:3e:13:dc:eb:41:90:a7:db:5a:66:3a:
ca:ba:6b:23:de:1c:63:a6:15:d5:70:b4:8d:5c:62:
2b:72:e6:fb:9b:3a:b5:3e:db:56:32:0d:3e:cf:79:
51:70:5c:e9:e9:5a:ac:40:15:1e:cd:c2:e3:36:9a:
68:26:76:7e:c3:c6:dc:b7:cb:8b:a5:86:ea:48:92:
53:d5:1f:0e:e1:7b:64:88:95:88:98:0d:13:9b:0a:
63:3e:fe:f4:af:70:30:cd:8b:e6:b7:6a:a1:09:b4:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5C:E2:60:66:1D:F5:EC:66:51:70:CA:FA:35:61:3F:AE:65:43:B1
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3133342e302f32332d3233203d3e20343031353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.108.134.0/23
Signature Algorithm: sha256WithRSAEncryption
52:a6:c4:65:d5:ea:04:dd:a6:5c:0e:5b:98:f9:06:d4:60:d0:
74:04:a7:0f:5e:1f:15:d6:be:ea:51:48:6b:b3:85:31:c8:86:
8a:ae:8f:ac:d4:6e:17:53:37:ab:69:d7:e5:75:fd:3d:fb:91:
39:e6:3c:f3:16:5d:56:43:1f:5f:17:80:4b:cf:3e:7e:92:6c:
54:0c:0e:b9:23:5f:90:9e:3c:87:9f:09:e6:f3:a7:29:8c:89:
2c:41:8c:a8:3d:db:f6:74:c7:20:52:69:34:5c:c2:61:c9:7f:
5a:0f:76:21:f1:83:a3:93:a4:13:00:c7:6a:b7:95:e7:bb:04:
1f:f3:96:d6:30:ec:bb:a6:16:e3:cd:16:c2:12:28:b4:d7:ba:
9f:3d:3d:61:ba:31:5e:ea:c5:5e:8c:b7:b1:eb:86:55:98:2a:
47:7f:83:2c:8d:d9:23:e7:3b:e9:dc:13:59:1f:63:fd:34:96:
1b:43:de:df:51:c5:45:fa:7a:c5:51:72:5a:2d:17:28:bd:01:
6e:5f:7a:bc:64:3b:b3:3e:56:32:2a:e0:6b:8e:38:44:f3:64:
81:19:fc:0d:38:05:1d:0b:2f:3c:ef:ff:5b:dd:9e:89:a3:06:
1b:19:b2:40:fd:f5:c8:d0:65:0e:4a:e4:30:14:df:31:1c:07:
2f:b4:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:18:42 2026 by rpki-client