
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20323132323338.roa
File: 3230342e36392e3231372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: OlakEeZuk99l1TtQj81PRJbqXn8zbs/vlyq2mNIwnck=
Subject key identifier: 94:E1:01:AB:55:36:01:88:C5:50:9A:46:45:E7:88:2D:A4:A0:3F:18
Certificate issuer: /CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220
Certificate serial: 6ECC4BE2C4013FE160EFC0FA60F3B0F0483AF7E2
Authority key identifier: A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 31 Mar 2026 12:35:54 +0000
ROA not before: Tue 31 Mar 2026 12:30:54 +0000
ROA not after: Tue 30 Mar 2027 12:35:54 +0000
asID: 212238
IP address blocks: 204.69.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.crl
rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Apr 2026 00:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:cc:4b:e2:c4:01:3f:e1:60:ef:c0:fa:60:f3:b0:f0:48:3a:f7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220
Validity
Not Before: Mar 31 12:30:54 2026 GMT
Not After : Mar 30 12:35:54 2027 GMT
Subject: CN=94E101AB55360188C5509A4645E7882DA4A03F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:92:f9:4e:d8:b2:62:79:53:f4:71:4e:ad:
53:14:8a:1a:16:6d:98:73:13:8a:6c:06:fa:14:df:
12:e2:81:b1:37:1a:d2:cd:b2:fe:6c:10:47:85:7d:
e5:69:d7:9e:69:86:d5:7c:5f:66:7c:e1:b1:2f:3e:
24:cb:7e:f8:2e:ad:7d:7e:bc:f6:fe:d9:f1:79:d2:
d8:46:32:8c:10:fc:3a:cf:01:ad:57:c2:99:f9:77:
8f:10:67:ec:cc:58:24:74:8f:1e:48:22:1d:86:17:
12:cb:7f:96:8b:43:e9:d1:37:06:00:9f:d9:59:8c:
bf:94:b5:22:41:65:b8:4f:5a:90:f5:00:7a:de:ca:
cd:b8:14:50:56:28:3f:97:d4:ac:2f:6a:46:6d:f3:
8d:62:cb:54:64:64:d5:76:6d:98:3d:17:b3:49:2c:
79:85:df:0a:30:4d:be:0d:92:b1:84:a1:2b:1f:04:
40:a3:c3:3b:3b:ea:be:5b:6f:4e:aa:e9:33:eb:55:
24:f3:29:55:a8:6f:90:d8:2e:26:27:c3:28:88:b0:
00:4a:a3:94:5e:39:df:b9:31:87:78:f1:ef:34:94:
56:6c:18:10:ce:b2:61:46:e4:38:8d:34:31:da:b9:
c7:8d:48:36:fc:d9:4f:ce:95:11:e6:0d:45:1a:ed:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E1:01:AB:55:36:01:88:C5:50:9A:46:45:E7:88:2D:A4:A0:3F:18
X509v3 Authority Key Identifier:
keyid:A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.69.217.0/24
Signature Algorithm: sha256WithRSAEncryption
53:1e:34:fe:35:54:d6:ff:33:f3:f5:7a:ad:d7:f1:57:1e:8a:
e1:45:c0:e3:4b:ca:b9:6b:1e:d9:c0:5a:17:a8:08:f4:69:83:
93:58:e9:96:26:11:31:99:b2:ec:cf:32:33:12:ca:8a:97:f1:
0f:b2:47:e2:a7:e2:01:ff:f5:c6:7a:10:ae:6c:8c:e3:65:56:
4d:bb:6f:e1:67:07:bc:69:4a:2c:4e:ca:43:cc:90:48:c7:05:
da:ca:75:fe:ab:77:85:45:89:fa:d2:c1:62:61:82:54:1a:93:
65:6f:5f:2f:12:af:04:dd:3c:56:b1:3d:8d:a7:e1:c0:0d:66:
a6:ff:e6:f9:28:69:53:de:e8:0c:a8:bc:c3:d0:8c:9a:56:0a:
70:f6:f8:37:36:43:78:d5:84:4d:5c:2b:82:7f:71:ce:e0:f8:
2a:d7:03:de:47:9e:ab:0f:36:73:7e:8a:cb:3e:77:ee:34:83:
74:1d:47:24:84:37:0f:2f:e1:66:a5:cd:cc:67:34:f1:f8:cf:
55:9c:df:36:60:ad:dc:a3:38:5b:49:03:f0:3c:0a:40:15:b8:
29:fa:d2:40:70:97:4a:1f:e2:0e:38:04:b7:d1:2e:50:38:b8:
51:24:46:c5:15:c5:52:cd:fd:59:9c:31:01:98:1e:6e:31:29:
bd:5f:9a:68
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUbsxL4sQBP+Fg78D6YPOw8Eg69+IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmYyZGIxNDRhZTFjOGFlNWI4NjE5YTVlMDliNGQ5YjU3
OTRkMzdlOTA2MTIwODcyMjAwHhcNMjYwMzMxMTIzMDU0WhcNMjcwMzMwMTIzNTU0
WjAzMTEwLwYDVQQDEyg5NEUxMDFBQjU1MzYwMTg4QzU1MDlBNDY0NUU3ODgyREE0
QTAzRjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA362S+U7YsmJ5
U/RxTq1TFIoaFm2YcxOKbAb6FN8S4oGxNxrSzbL+bBBHhX3ladeeaYbVfF9mfOGx
Lz4ky374Lq19frz2/tnxedLYRjKMEPw6zwGtV8KZ+XePEGfszFgkdI8eSCIdhhcS
y3+Wi0Pp0TcGAJ/ZWYy/lLUiQWW4T1qQ9QB63srNuBRQVig/l9SsL2pGbfONYstU
ZGTVdm2YPRezSSx5hd8KME2+DZKxhKErHwRAo8M7O+q+W29Oqukz61Uk8ylVqG+Q
2C4mJ8MoiLAASqOUXjnfuTGHePHvNJRWbBgQzrJhRuQ4jTQx2rnHjUg2/NlPzpUR
5g1FGu0wMQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJThAatVNgGIxVCaRkXniC2k
oD8YMB8GA1UdIwQYMBaAFKKNJzMJyfx2VUJJVF0p04gGgOp/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2Y2Q3YTg4MzE0MmUwLzEv
QTI4RDI3MzMwOUM5RkM3NjU1NDI0OTU0NUQyOUQzODgwNjgwRUE3Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2Q5NmRmMmM0LTJiYmEtNDBlMi04NDFkLThjN2MwYThkZWUxMy82ZjJk
YjE0NGFlMWM4YWU1Yjg2MTlhNWUwOWI0ZDliNTc5NGQzN2U5MDYxMjA4NzIyMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg2OTQxZDVjMDE4NmNk
N2E4ODMxNDJlMC8xLzMyMzAzNDJlMzYzOTJlMzIzMTM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEXZMA0GCSqGSIb3DQEB
CwUAA4IBAQBTHjT+NVTW/zPz9Xqt1/FXHorhRcDjS8q5ax7ZwFoXqAj0aYOTWOmW
JhExmbLszzIzEsqKl/EPskfip+IB//XGehCubIzjZVZNu2/hZwe8aUosTspDzJBI
xwXaynX+q3eFRYn60sFiYYJUGpNlb18vEq8E3TxWsT2Np+HADWam/+b5KGlT3ugM
qLzD0IyaVgpw9vg3NkN41YRNXCuCf3HO4Pgq1wPeR56rDzZzforLPnfuNIN0HUck
hDcPL+Fmpc3MZzTx+M9VnN82YK3cozhbSQPwPApAFbgp+tJAcJdKH+IOOAS30S5Q
OLhRJEbFFcVSzf1ZnDEBmB5uMSm9X5po
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:00:45 2026 by rpki-client