
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20323035323230.roa
File: 3230392e38372e3136382e302f32342d3234203d3e20323035323230.roa (raw, json)
Hash identifier: FJ8YsjKZrw7Cwen+zxTYtxSJb1yWL5qJoFTG5SAIpc8=
Subject key identifier: 4E:95:8C:C7:26:34:20:82:FC:C9:30:E5:7F:29:D8:93:A1:DA:78:0B
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 57137E7A97BC32775DBF24A1AD39312A045D6BCE
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20323035323230.roa
Signing time: Thu 08 May 2025 16:28:32 +0000
ROA not before: Thu 08 May 2025 16:23:32 +0000
ROA not after: Thu 07 May 2026 16:28:32 +0000
asID: 205220
IP address blocks: 209.87.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 09:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:13:7e:7a:97:bc:32:77:5d:bf:24:a1:ad:39:31:2a:04:5d:6b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: May 8 16:23:32 2025 GMT
Not After : May 7 16:28:32 2026 GMT
Subject: CN=4E958CC726342082FCC930E57F29D893A1DA780B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:6e:1c:82:ed:5c:8f:2e:2f:21:27:76:c4:
07:f0:e6:f8:97:ec:1d:0e:05:39:93:7f:fd:af:ca:
26:bc:bf:d4:9e:99:04:2a:f7:d6:24:75:4b:54:21:
88:32:e1:4a:ae:82:1f:0d:89:ca:59:15:fc:4f:2e:
3a:7e:a3:ec:a3:f0:9b:a6:bc:00:5c:2e:66:a6:68:
6e:48:ae:b2:5f:20:dd:bb:d2:7f:ba:22:58:b7:47:
e8:7b:86:92:b2:4c:1a:cc:74:02:33:ca:02:fd:c5:
78:88:33:8b:b2:64:b3:4c:ad:08:3e:67:b0:06:6b:
9c:c7:d2:2a:78:a7:a2:3a:ee:2a:7c:e7:d5:04:79:
74:27:48:a5:16:f0:c1:ca:26:e9:75:21:c4:f4:76:
70:86:fc:a2:71:90:24:01:ff:d8:e5:34:84:69:6f:
db:22:59:fe:7a:d4:06:95:73:7a:4a:4b:96:4f:00:
a8:56:57:62:8b:b4:6a:bd:14:81:ea:9f:c4:be:cb:
cf:bc:21:f2:51:c0:a4:03:0d:37:b8:92:35:0b:95:
cd:9a:96:08:2f:4b:85:21:5d:0f:ae:ad:4c:66:c5:
e4:2f:d6:f6:fb:23:69:11:0c:5c:6a:cf:b1:09:65:
bb:11:87:25:06:07:1c:2a:09:8f:ab:03:af:d5:d4:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:95:8C:C7:26:34:20:82:FC:C9:30:E5:7F:29:D8:93:A1:DA:78:0B
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20323035323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.168.0/24
Signature Algorithm: sha256WithRSAEncryption
20:af:1d:1e:27:20:27:29:9e:9f:b0:34:d4:2a:20:44:c0:f3:
6f:27:ef:4f:43:fa:7f:0e:e0:16:78:1e:e4:6c:b9:df:9d:de:
04:06:6c:a2:cd:fb:73:bb:93:9c:32:84:51:07:88:05:e1:60:
e4:8c:98:ee:d9:89:37:22:b5:82:a7:7b:47:17:13:39:44:7a:
a1:c3:48:db:23:cc:f9:a3:d3:c3:56:79:35:da:dc:61:07:8c:
ef:da:a7:5a:18:76:bc:d7:a7:63:4f:2d:5b:b8:9d:ff:3c:ca:
71:7b:6b:38:37:7f:28:b1:d1:41:02:b0:3b:80:9d:b1:f3:87:
75:3a:5a:0f:0b:a7:7c:34:f1:25:fe:c0:4f:ec:f8:4b:28:7e:
3d:9c:28:20:6e:70:64:5b:43:21:80:45:5b:22:7f:f1:5a:23:
8c:a6:d0:46:39:65:b1:74:dd:03:82:0e:4d:d6:23:e8:ea:49:
c1:a7:f8:82:8f:89:f2:c4:62:07:1c:f4:04:c7:6f:6c:dd:51:
20:84:c3:d9:a0:f3:50:6e:8a:24:f8:e9:e9:e6:29:e8:42:9c:
46:d9:d2:e1:20:65:e2:d6:3d:e1:2c:d8:3e:e5:b4:c1:bd:32:
14:34:a8:2d:b8:70:32:06:fe:77:1e:62:c3:e4:7e:9f:54:de:
c8:f1:b7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:07:43 2025 by rpki-client