
$ rpki-client -vvvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/3136392e3132382e35302e302f32332d3234203d3e20323134313530.roa
File: 3136392e3132382e35302e302f32332d3234203d3e20323134313530.roa (raw, json)
Hash identifier: WYyM4UXQi6zPRGhuJ3IiHQNtENa5s/nAKWv3C/eF1RI=
Subject key identifier: 53:8B:0D:F5:99:D8:7E:10:D7:41:BA:D4:4D:EB:1A:3A:61:18:2D:53
Certificate issuer: /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial: 178D9BC32A1A912CA1E1B384CA7E6CB5AF368E86
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/3136392e3132382e35302e302f32332d3234203d3e20323134313530.roa
Signing time: Sat 29 Aug 2026 22:00:46 +0000
ROA not before: Sat 29 Aug 2026 21:55:46 +0000
ROA not after: Sat 28 Aug 2027 22:00:46 +0000
asID: 214150
IP address blocks: 169.128.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 05:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:8d:9b:c3:2a:1a:91:2c:a1:e1:b3:84:ca:7e:6c:b5:af:36:8e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Validity
Not Before: Aug 29 21:55:46 2026 GMT
Not After : Aug 28 22:00:46 2027 GMT
Subject: CN=538B0DF599D87E10D741BAD44DEB1A3A61182D53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:43:04:d7:9e:93:bd:25:2e:c6:20:9f:9a:
39:10:05:bd:ce:47:3e:b1:24:93:f2:8f:fd:4c:ba:
56:63:06:3a:42:29:24:a8:cd:dc:cd:5c:ec:a9:43:
20:16:7f:37:64:28:a1:ee:a8:ac:68:cf:a4:82:98:
8d:22:dc:5f:7b:c5:ab:0b:53:e5:67:ef:9a:e6:68:
27:73:cf:ee:d3:fd:4d:85:bd:17:36:d2:4a:7c:04:
cc:47:ca:f8:13:3c:63:aa:75:d6:50:54:4d:18:5c:
e2:7f:17:61:51:88:47:88:8f:7d:44:9d:58:1b:07:
7f:01:e9:c2:df:11:60:98:ec:cb:9f:85:d8:0f:22:
04:83:b9:05:29:d0:f3:8e:fe:53:91:5c:4f:6b:e7:
4e:76:c0:85:fb:39:78:92:f1:ff:16:5b:6c:d8:57:
a2:56:e1:0a:14:c0:5f:ce:38:1f:57:af:35:e9:d8:
de:6d:22:e3:d3:d8:8d:64:d2:1a:93:fa:71:c6:e5:
e1:d6:50:6c:c1:90:69:54:95:d4:7f:ac:a5:aa:61:
81:08:f8:ac:57:c7:4b:35:fe:87:7a:db:33:85:ac:
dd:62:05:e3:30:a2:88:57:1a:1b:59:8d:51:75:f5:
4b:e2:ea:bc:ce:c5:69:56:e3:2d:e7:79:08:ad:a0:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8B:0D:F5:99:D8:7E:10:D7:41:BA:D4:4D:EB:1A:3A:61:18:2D:53
X509v3 Authority Key Identifier:
keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/3136392e3132382e35302e302f32332d3234203d3e20323134313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.128.50.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:b1:a4:ff:f5:52:f8:99:f1:53:e8:92:fd:f6:09:59:58:e0:
c0:fa:ea:e4:8e:71:33:64:6f:45:28:85:09:09:51:f0:9d:90:
ae:44:61:bb:d7:dd:7a:49:19:d3:dd:f8:74:fd:81:e0:db:ff:
fc:fb:3b:36:98:d5:ca:19:f6:2f:78:73:28:ec:3e:d6:4a:40:
b6:13:aa:a4:fe:a4:6f:87:93:ac:d7:92:2e:fb:fd:8f:8a:af:
cf:21:19:9e:d5:01:cf:23:2d:73:4e:48:4b:36:17:a7:73:48:
a5:2f:87:6c:d3:4a:81:6c:1d:ac:28:d4:c8:ad:9f:cc:ee:f0:
83:6a:d3:88:43:12:3e:d3:59:b6:ac:2b:23:8b:ec:0e:bf:76:
bc:66:71:2f:84:58:7c:10:ac:a0:c4:38:4f:a9:42:69:b4:10:
06:d2:0c:c0:2a:bc:a2:25:8c:81:67:74:dd:e7:e1:ce:31:24:
00:3f:14:0a:57:92:7e:db:ac:f2:20:b0:7d:99:c9:10:07:65:
2d:96:3b:60:27:26:1a:d1:5f:2a:31:fd:52:e0:90:d9:d2:7f:
75:cd:38:4f:bc:9f:a6:b6:97:d3:c7:c5:1d:b8:8a:13:06:94:
cd:28:32:8e:20:55:ee:9f:61:ff:57:b1:da:49:0d:87:0d:39:
1e:84:d1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:18 2026 by rpki-client