
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/3136382e3135312e3235352e302f32342d3234203d3e203131333538.roa
File: 3136382e3135312e3235352e302f32342d3234203d3e203131333538.roa (raw, json)
Hash identifier: d0WLiHSXn3Pi0w/yiSL4lZye8ljd/i7Q44Q+UyueHcM=
Subject key identifier: AA:21:60:2B:18:EC:96:6B:03:07:E3:81:9F:08:35:E0:E9:5C:30:EC
Certificate issuer: /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial: 7CFF1207A083937B0F365DEC212D881EB4F40040
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/3136382e3135312e3235352e302f32342d3234203d3e203131333538.roa
Signing time: Mon 07 Sep 2026 19:43:38 +0000
ROA not before: Mon 07 Sep 2026 19:38:38 +0000
ROA not after: Mon 06 Sep 2027 19:43:38 +0000
asID: 11358
IP address blocks: 168.151.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 05:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ff:12:07:a0:83:93:7b:0f:36:5d:ec:21:2d:88:1e:b4:f4:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Validity
Not Before: Sep 7 19:38:38 2026 GMT
Not After : Sep 6 19:43:38 2027 GMT
Subject: CN=AA21602B18EC966B0307E3819F0835E0E95C30EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:59:62:52:d4:01:9d:9e:4d:63:ce:74:5d:b3:
5d:00:7c:78:16:03:df:71:16:0a:65:80:fa:86:08:
2f:01:0a:5f:86:af:fa:43:40:b8:0c:d3:78:c3:65:
49:91:0f:3b:48:52:9c:92:8c:8a:c2:e6:02:3a:ba:
ae:54:96:85:d7:3b:f8:92:45:71:56:7d:6e:58:68:
4d:e4:58:46:82:61:f1:56:00:99:7b:7f:47:12:f8:
bb:26:0d:6a:a9:f6:05:99:11:c4:05:a9:4f:41:3a:
b7:e5:e5:61:13:ff:1f:99:eb:a8:c9:90:4f:e4:68:
66:9d:df:10:69:67:5f:1f:a3:9d:c1:e7:cc:f4:6c:
54:06:22:e7:0b:ec:12:be:0d:e8:f0:d9:92:00:62:
ed:5e:ca:5e:05:68:96:fa:ae:4b:22:a7:3e:8e:3d:
5b:5e:f0:ed:3c:77:09:b8:fd:9f:2d:1c:45:04:5c:
01:cf:fb:a1:d3:7b:ad:c7:a3:ba:46:e0:ff:d5:02:
2f:ea:bb:bf:44:ec:ee:4b:23:05:a8:ce:6d:59:0b:
1b:f2:5f:cf:1c:9d:de:25:a0:11:ca:4d:de:91:27:
71:1b:79:21:fe:9c:11:8a:52:64:44:d6:5c:31:18:
05:3f:1d:83:e4:12:5b:5f:56:88:10:4f:e7:24:45:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:21:60:2B:18:EC:96:6B:03:07:E3:81:9F:08:35:E0:E9:5C:30:EC
X509v3 Authority Key Identifier:
keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/3136382e3135312e3235352e302f32342d3234203d3e203131333538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.151.255.0/24
Signature Algorithm: sha256WithRSAEncryption
38:bf:ba:38:5d:73:31:c7:9b:bd:36:52:5e:8d:5a:68:0a:1b:
09:8c:a3:7c:2a:46:0a:f1:b6:bf:ef:88:ca:f2:0f:03:98:ca:
94:16:58:2c:7c:5b:d4:a9:54:dc:25:39:97:be:f4:fe:e6:cc:
28:c7:cd:93:b9:ab:36:d4:42:ee:bf:ff:34:e6:82:38:eb:c1:
98:68:18:7b:99:fe:95:93:95:9b:eb:84:27:6f:fe:67:25:44:
7a:6f:cf:79:82:65:6d:58:80:6e:c3:99:da:ec:b1:f3:a5:22:
99:16:4f:09:b7:31:6f:8d:74:94:da:1a:87:82:21:fb:47:f3:
c5:5f:4f:92:75:c5:03:ee:e8:77:32:f1:60:76:1f:2c:37:55:
9b:fc:33:64:0d:a4:d1:47:87:38:f3:61:53:96:6b:f2:4e:5f:
85:42:e7:26:43:e2:11:e1:6b:90:3d:f4:c4:85:51:cf:89:da:
90:54:38:86:09:44:91:9a:cd:f9:80:4a:ee:62:ec:60:83:a8:
05:aa:23:25:f3:60:4d:92:b6:b3:e0:25:96:62:7e:51:b2:a4:
00:9f:73:3c:77:87:e8:40:e8:49:ab:77:b8:a4:90:9e:be:ab:
88:4e:ce:8f:a3:0d:cf:f8:58:95:9f:e5:3f:77:68:7f:87:0d:
f9:40:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:29:07 2026 by rpki-client