
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/32332e3132392e3231322e302f32342d3234203d3e20343031353037.roa
File: 32332e3132392e3231322e302f32342d3234203d3e20343031353037.roa (raw, json)
Hash identifier: XXZh3Mg1ySJqbBkfb5OXuII3pL+5AzhTZgcf9XDcbl0=
Subject key identifier: 9F:5D:56:25:5D:B3:2C:71:7C:EC:11:80:9A:13:44:E5:3E:B6:95:E8
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 79C6E4954436EA0B42B1ED24AB9A2931C5AFDF18
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/32332e3132392e3231322e302f32342d3234203d3e20343031353037.roa
Signing time: Tue 19 May 2026 08:06:20 +0000
ROA not before: Tue 19 May 2026 08:01:20 +0000
ROA not after: Tue 18 May 2027 08:06:20 +0000
asID: 401507
IP address blocks: 23.129.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 16:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c6:e4:95:44:36:ea:0b:42:b1:ed:24:ab:9a:29:31:c5:af:df:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: May 19 08:01:20 2026 GMT
Not After : May 18 08:06:20 2027 GMT
Subject: CN=9F5D56255DB32C717CEC11809A1344E53EB695E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:47:38:1e:44:dd:e3:8c:8a:7e:54:ad:8d:ac:
08:af:7a:08:77:9e:58:36:b2:a5:a2:ab:5b:10:48:
db:29:40:6f:36:56:18:00:53:b6:7c:c2:72:57:eb:
49:28:93:7b:36:f6:87:7a:4a:60:07:1c:6c:d0:59:
c9:15:b9:65:24:8d:04:9a:a2:b4:d3:6b:0e:02:f9:
f6:d0:04:c2:ea:e6:8d:dd:48:b5:a3:55:f6:81:8c:
01:5d:e7:ad:08:0d:0e:01:3a:db:f3:4e:09:62:6b:
57:dc:92:04:eb:de:0c:0c:a9:b6:d0:17:8e:ca:53:
1f:c2:c6:64:fc:38:04:84:53:db:96:c9:5d:ee:f2:
38:a2:02:11:e7:84:0e:bf:1c:da:ad:0e:11:b0:97:
cd:97:6f:e1:0a:08:84:73:64:c1:a8:29:b7:ab:c3:
59:27:38:a3:75:45:d9:2f:fc:38:54:7f:28:90:d2:
7b:5b:e3:9a:f7:cf:3e:9c:03:c6:e0:85:41:1d:57:
3e:35:d6:bb:95:54:8e:32:51:3a:9f:14:e2:d0:7e:
f4:43:20:75:9c:54:62:47:6c:4f:ed:bb:f0:62:0c:
34:65:24:2e:52:f8:ce:63:7b:9d:1d:40:8d:49:39:
f4:d5:4f:bc:41:41:27:4a:7d:ab:68:42:13:d6:e6:
00:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5D:56:25:5D:B3:2C:71:7C:EC:11:80:9A:13:44:E5:3E:B6:95:E8
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/32332e3132392e3231322e302f32342d3234203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.129.212.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3c:7b:ab:9d:8b:dc:50:0e:6c:e8:e3:86:98:fe:74:35:ee:
68:12:4d:78:e4:59:e0:9b:40:30:c0:ce:55:ff:71:f0:39:93:
b6:5f:c4:15:b2:f8:6f:0e:70:d2:56:91:39:0d:d7:b8:5a:b4:
d8:d5:7f:e3:c2:80:c5:a6:00:92:44:3e:f7:dc:40:6d:5e:27:
b3:fa:7e:e4:e9:90:d9:c0:22:08:37:34:82:66:98:d0:91:d2:
54:d6:2f:0e:5b:41:34:c5:20:c1:88:43:a0:88:6c:29:75:7f:
12:1d:13:6e:a7:af:46:08:bb:03:f5:25:a5:2d:7b:a8:96:1a:
7d:34:26:da:5b:fa:ca:8d:a7:b9:6d:e4:90:b7:c5:d9:f3:51:
c1:23:e4:2f:b9:1a:64:b0:09:58:ba:fc:23:a6:f9:a8:e5:a0:
0a:85:e5:2f:ae:1f:64:ad:2d:0f:32:d2:29:74:52:87:0f:21:
20:8c:ad:01:4d:0f:1c:7a:9c:76:21:d2:9a:26:c6:c0:be:10:
55:f5:cf:6c:fd:b7:78:31:19:37:c7:84:f3:79:aa:33:11:d6:
c9:91:e4:29:3c:37:46:b0:e0:39:c6:84:ca:fb:5e:14:74:ab:
f0:c6:22:07:83:fe:fb:19:fd:5e:9a:56:99:07:b9:96:4b:f3:
f1:5f:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:46 2026 by rpki-client