
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137342e302f32332d3234203d3e20323730313837.roa
File: 3230392e38372e3137342e302f32332d3234203d3e20323730313837.roa (raw, json)
Hash identifier: /ukZf5PTzIlGfvCOgWtd4XnV48SfZLnpj1XlN0iLNyU=
Subject key identifier: D3:65:A6:23:BC:0D:28:70:0E:49:40:D5:7B:07:B8:51:43:31:7A:87
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 1FA8994718E5C83EF0411F37237E879D36D89487
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137342e302f32332d3234203d3e20323730313837.roa
Signing time: Tue 14 Apr 2026 17:35:57 +0000
ROA not before: Tue 14 Apr 2026 17:30:57 +0000
ROA not after: Tue 13 Apr 2027 17:35:57 +0000
asID: 270187
IP address blocks: 209.87.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a8:99:47:18:e5:c8:3e:f0:41:1f:37:23:7e:87:9d:36:d8:94:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: Apr 14 17:30:57 2026 GMT
Not After : Apr 13 17:35:57 2027 GMT
Subject: CN=D365A623BC0D28700E4940D57B07B85143317A87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:98:77:b2:84:74:99:16:f5:b6:83:7d:9f:0d:
47:0a:0b:72:ec:47:67:9b:78:d4:ea:b8:72:5f:ef:
8b:86:f4:26:0f:06:9d:2f:ab:22:75:1f:7f:53:1a:
73:fb:ae:a2:48:a0:d6:69:d8:44:fc:95:80:46:e7:
25:8e:f2:06:26:7d:1f:75:52:dd:81:4b:6a:d3:38:
d5:d7:d0:ca:5b:86:21:ba:91:7a:9a:3f:a8:1a:4f:
54:44:6a:af:4b:d9:23:f6:3f:a9:f7:43:45:e6:0a:
08:2d:77:9b:c3:1e:c6:ba:9d:25:c3:fe:1b:67:21:
76:c3:5e:72:c0:8a:bb:17:10:34:b5:0c:06:79:9d:
a1:10:28:5e:80:d2:43:9f:8a:c6:e6:4a:7c:fd:5c:
98:8e:87:1c:90:ef:1a:18:a1:c2:03:de:7b:4d:01:
e5:5c:2e:1f:eb:7b:f6:d6:ab:53:85:f0:99:3b:da:
b7:1c:e7:69:65:e6:8a:d0:9f:50:fb:da:a2:4d:fb:
2f:4f:40:44:b2:bc:d5:6b:63:2e:92:34:00:3d:83:
81:5e:50:e2:1c:68:ab:9e:f1:fa:74:76:21:3a:83:
64:23:79:c4:e3:b3:42:d2:bf:69:64:79:8d:4f:90:
42:4e:24:6b:1d:b4:ef:f8:a1:6f:6c:8c:ee:93:4f:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:65:A6:23:BC:0D:28:70:0E:49:40:D5:7B:07:B8:51:43:31:7A:87
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137342e302f32332d3234203d3e20323730313837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.174.0/23
Signature Algorithm: sha256WithRSAEncryption
05:7a:cd:b5:43:5b:7d:da:a0:e3:0c:74:ff:66:74:75:9c:3d:
de:6e:6a:4a:73:fc:8d:be:5f:42:4b:9c:51:b0:fe:c5:21:b2:
aa:50:62:7b:7b:fd:b2:dc:8b:cc:0a:12:12:00:09:12:a1:34:
41:e3:0e:af:1f:10:9c:c9:f1:2f:1b:55:27:c2:c9:3d:99:46:
ba:92:16:c5:0c:38:27:aa:b5:2f:95:b9:55:41:56:3f:0c:bf:
96:cb:81:09:3a:0f:68:db:d7:18:4d:6b:d5:8b:f8:3a:3c:8e:
90:57:55:e6:07:e2:ef:13:27:74:ce:36:42:64:4c:81:e7:4d:
c1:ab:60:d0:a1:c7:35:a0:88:ee:9e:e0:42:7f:dc:55:2a:e4:
30:98:22:be:08:0a:5f:86:58:42:a2:b1:e9:2e:3d:db:63:17:
ba:66:03:9e:e8:cb:ca:88:de:12:18:f9:3a:fa:a0:f0:86:53:
ae:6a:5c:76:c7:5a:fe:63:cb:04:fc:22:53:22:e1:83:a7:29:
5e:e1:e0:9f:20:8d:c9:ce:92:01:f9:70:54:dd:dd:c0:0c:fa:
49:ae:d8:25:21:e7:c9:97:2c:bc:cb:49:05:68:06:97:d2:9b:
ef:0f:79:da:6e:07:e2:d2:4d:7b:75:59:1c:4c:f6:81:8a:68:
ab:cb:b0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:00:26 2026 by rpki-client