
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa
File: 3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa (raw, json)
Hash identifier: jAMiDNZSalPALNGcpcZkRgEt8hslrjXwsLCTZ7uvCxY=
Subject key identifier: D6:FC:40:5F:32:EF:28:99:5B:61:FD:30:35:84:A1:3D:F2:EE:51:03
Certificate issuer: /CN=98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808
Certificate serial: 6CB07995619DBC08DED6C6D951763736E49276C3
Authority key identifier: FE:09:09:84:0E:0B:9E:54:6B:93:59:35:21:2C:E4:FA:64:85:E0:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa
Signing time: Wed 09 Sep 2026 10:26:59 +0000
ROA not before: Wed 09 Sep 2026 10:21:59 +0000
ROA not after: Wed 08 Sep 2027 10:26:59 +0000
asID: 63313
IP address blocks: 104.245.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/FE0909840E0B9E546B935935212CE4FA6485E0F7.crl
rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/FE0909840E0B9E546B935935212CE4FA6485E0F7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/317008f4-3048-4330-a34b-2a36dfe0f036.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/317008f4-3048-4330-a34b-2a36dfe0f036.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 02:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:b0:79:95:61:9d:bc:08:de:d6:c6:d9:51:76:37:36:e4:92:76:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808
Validity
Not Before: Sep 9 10:21:59 2026 GMT
Not After : Sep 8 10:26:59 2027 GMT
Subject: CN=D6FC405F32EF28995B61FD303584A13DF2EE5103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:6b:41:b0:04:e6:51:de:90:38:23:64:cf:
d0:de:1e:6f:fc:de:3f:3b:d8:f2:84:13:1e:93:06:
f7:f8:60:d1:62:6e:ba:76:dc:93:c1:90:25:89:02:
6c:27:1a:95:0f:8b:1e:78:19:22:28:da:1c:d0:62:
e5:e8:22:30:22:a4:31:44:53:f4:42:86:77:8e:6e:
1e:3d:d9:be:24:32:12:e6:59:27:87:23:bb:d8:26:
55:b4:ff:e2:27:71:59:7e:73:cd:fd:a0:a6:36:9c:
32:b0:bc:41:11:5f:66:b3:09:76:28:be:e6:42:16:
79:da:c7:77:cc:95:e0:92:93:08:fa:6e:91:97:ca:
e0:1d:6d:fc:78:39:c6:27:93:f6:92:1a:78:cf:43:
7e:69:bc:e6:12:78:d6:0f:55:5a:39:a2:20:c8:74:
91:cf:84:64:78:62:bb:2a:f7:65:5c:5f:a0:c1:31:
0f:89:c6:27:5f:c9:40:52:da:9b:ca:a8:91:d5:fc:
1c:b2:69:4b:e2:e9:3b:75:69:fc:1f:4f:d3:60:43:
a7:a2:e3:3c:70:fe:e1:16:8c:d7:6b:18:ac:5a:80:
1a:55:aa:c8:43:7e:55:2a:04:af:d1:a8:bf:43:f6:
13:50:c9:98:51:fd:c9:6d:82:3f:b3:16:eb:cf:59:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FC:40:5F:32:EF:28:99:5B:61:FD:30:35:84:A1:3D:F2:EE:51:03
X509v3 Authority Key Identifier:
keyid:FE:09:09:84:0E:0B:9E:54:6B:93:59:35:21:2C:E4:FA:64:85:E0:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/FE0909840E0B9E546B935935212CE4FA6485E0F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.245.120.0/22
Signature Algorithm: sha256WithRSAEncryption
94:c2:10:cf:77:ff:5b:3e:f5:da:4a:d4:82:e9:61:7d:d5:1a:
7d:c3:ed:bd:ca:f8:16:89:48:1a:3f:33:34:c9:10:d0:fc:b3:
d6:4c:b6:6d:51:14:09:8a:89:4e:6c:3d:d1:12:7a:52:d9:93:
9e:07:73:e4:bf:b8:cb:02:f0:85:42:3b:de:1e:8e:45:f8:8a:
0e:2e:09:b5:ce:c7:0d:c5:94:83:be:1b:b5:14:7f:43:4e:d8:
cd:4d:c2:0f:12:4e:b6:fa:e1:6f:88:c2:91:32:e2:7c:35:71:
0e:22:fb:64:29:0b:21:84:8b:4c:77:aa:05:49:4e:d4:b4:54:
46:5d:d7:df:33:b1:dc:1d:54:8c:30:4d:c0:50:e8:18:1e:81:
a7:0a:51:36:23:8f:bb:fe:78:af:2b:d0:c4:e2:b2:f0:ff:86:
d4:64:47:d7:b6:a7:bd:11:ee:09:89:8d:87:31:00:db:66:02:
04:7b:5e:74:4f:21:04:e2:f1:14:c1:98:20:31:dd:4d:3a:bc:
2c:d4:f1:a9:37:a1:ed:18:ef:6a:6a:bb:f7:9d:af:8e:fa:b2:
49:2b:61:61:2d:20:44:c9:5c:6d:92:39:48:2d:80:25:d0:e9:
4a:0c:28:10:2d:ba:38:b2:24:97:1f:5b:03:eb:7f:c8:c1:e1:
5b:4c:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:31:44 2026 by rpki-client