
$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e203430363736.roa
File: 3130342e3134352e3230392e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: fdUUddJ5L7gxTI+mLPQXndVSzO3M85v/H7CeqeAtB7Y=
Subject key identifier: EF:68:33:D3:56:A3:2D:F5:76:A6:E3:24:C5:CF:D2:4A:22:75:FC:09
Certificate issuer: /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial: 56A7ED64E48625B6AD7B02D080E9875E796F5BA6
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e203430363736.roa
Signing time: Fri 15 May 2026 09:33:39 +0000
ROA not before: Fri 15 May 2026 09:28:39 +0000
ROA not after: Fri 14 May 2027 09:33:39 +0000
asID: 40676
IP address blocks: 104.145.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 17 May 2026 22:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a7:ed:64:e4:86:25:b6:ad:7b:02:d0:80:e9:87:5e:79:6f:5b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Validity
Not Before: May 15 09:28:39 2026 GMT
Not After : May 14 09:33:39 2027 GMT
Subject: CN=EF6833D356A32DF576A6E324C5CFD24A2275FC09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:41:54:5a:09:ae:1f:94:ab:c6:df:96:5e:
13:90:dc:ab:67:43:66:d9:08:62:58:20:d6:56:fb:
b7:35:fa:ab:b1:9e:e5:fa:e3:23:28:d9:06:58:13:
e3:93:42:b0:c6:ec:14:6e:3a:ab:bf:e7:d5:b3:d2:
fa:99:7e:88:43:7b:e7:3a:45:05:fb:df:d9:0b:57:
01:83:cb:97:66:49:28:b1:91:13:c3:be:06:54:8a:
3d:80:e2:56:f2:a0:48:1f:81:91:68:f3:e8:38:8d:
1e:07:3f:e3:87:c1:7d:ae:1b:4c:9f:2f:df:e7:fd:
40:85:ab:ca:d8:9d:d2:38:15:f3:b8:60:36:f6:e2:
d0:46:69:2b:b6:c5:6d:2f:ff:04:34:0a:48:1a:32:
66:6d:b2:0e:9a:cf:4f:9a:c2:c5:c8:e9:5a:78:c6:
6a:d0:6e:13:a9:40:45:dd:fc:29:16:c0:67:09:76:
ac:6c:36:0a:c3:cb:9d:e8:65:9d:26:06:83:07:19:
6e:6e:0e:5e:0e:49:12:0a:45:54:cd:cb:95:5a:58:
2c:4b:59:c4:8e:ca:b3:f8:e7:da:ef:7f:57:e3:48:
58:cb:79:33:b2:19:46:3a:ed:1e:d5:2a:ba:fc:91:
26:a0:5d:c2:f1:dd:51:c1:73:45:01:68:fb:e1:ab:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:68:33:D3:56:A3:2D:F5:76:A6:E3:24:C5:CF:D2:4A:22:75:FC:09
X509v3 Authority Key Identifier:
keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.145.209.0/24
Signature Algorithm: sha256WithRSAEncryption
22:26:1b:59:ce:0e:9b:a8:2e:55:1e:84:02:a8:31:41:5c:72:
fd:31:06:3c:83:e4:fa:14:58:06:7d:21:fd:8b:5d:77:76:53:
48:49:bf:3e:d7:98:6e:2a:ce:df:3e:cd:4f:2a:13:e7:96:a4:
93:1b:de:85:b2:f9:2e:86:bb:8d:6a:f0:da:c8:fc:1f:42:91:
9e:41:89:c6:a2:e7:7a:4d:d4:bc:78:cd:bd:c2:a2:c3:31:d1:
f5:b7:b1:55:cd:d4:5d:6c:6c:ad:00:a2:f7:42:20:ae:7c:88:
0a:48:37:71:10:da:e1:6c:36:5f:d9:a6:a5:6f:01:44:b4:33:
ea:0b:00:50:af:aa:76:e2:64:d8:01:78:a5:41:6d:15:28:47:
66:6c:45:75:83:50:ac:df:39:ec:4d:b2:98:e8:47:3a:5b:e7:
2a:b9:a8:bf:c8:d1:22:3a:73:82:5b:83:4e:94:e3:d6:e9:82:
39:a6:2c:e2:4b:79:42:af:15:91:bf:41:8a:1f:5b:72:cf:f9:
7e:b9:6c:0f:cd:d8:a3:ed:c6:c3:23:ae:12:46:32:ca:de:cc:
af:d0:73:c3:de:d0:1d:38:3a:45:68:2a:b2:bb:5f:11:45:81:
fd:a3:4f:8a:34:6c:48:33:50:9f:bc:6e:ab:db:e2:3b:df:8d:
0c:fd:66:62
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUVqftZOSGJbatewLQgOmHXnlvW6YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTdhOGVkZDlkNDk1Y2NlNDYyN2I1Zjk0NDUyZGZiYWNl
NjU0OWI5ZjY0ZDRiY2ZjYmQwHhcNMjYwNTE1MDkyODM5WhcNMjcwNTE0MDkzMzM5
WjAzMTEwLwYDVQQDEyhFRjY4MzNEMzU2QTMyREY1NzZBNkUzMjRDNUNGRDI0QTIy
NzVGQzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4lBVFoJrh+U
q8bfll4TkNyrZ0Nm2QhiWCDWVvu3NfqrsZ7l+uMjKNkGWBPjk0KwxuwUbjqrv+fV
s9L6mX6IQ3vnOkUF+9/ZC1cBg8uXZkkosZETw74GVIo9gOJW8qBIH4GRaPPoOI0e
Bz/jh8F9rhtMny/f5/1AhavK2J3SOBXzuGA29uLQRmkrtsVtL/8ENApIGjJmbbIO
ms9PmsLFyOlaeMZq0G4TqUBF3fwpFsBnCXasbDYKw8ud6GWdJgaDBxlubg5eDkkS
CkVUzcuVWlgsS1nEjsqz+Ofa739X40hYy3kzshlGOu0e1Sq6/JEmoF3C8d1RwXNF
AWj74atSqQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFO9oM9NWoy31dqbjJMXP0koi
dfwJMB8GA1UdIwQYMBaAFEAjs/cyIhklQMzcMWcchQZjMd2iMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzMzODMwMzQ2MTkxMjQxY2ViNjkyOWM0ZjY5MTJlZjkxLzAv
NDAyM0IzRjczMjIyMTkyNTQwQ0NEQzMxNjcxQzg1MDY2MzMxRERBMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzL2VkY2ZlOGQzLTZhZjktNGQ2MC04ZTk2LWY2ZGZiNDU1MzYxYy9lN2E4
ZWRkOWQ0OTVjY2U0NjI3YjVmOTQ0NTJkZmJhY2U2NTQ5YjlmNjRkNGJjZmNiZC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8zMzgzMDM0NjE5MTI0MWNlYjY5Mjlj
NGY2OTEyZWY5MS8wLzMxMzAzNDJlMzEzNDM1MmUzMjMwMzkyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNDMwMzYzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJHRMA0GCSqGSIb3DQEB
CwUAA4IBAQAiJhtZzg6bqC5VHoQCqDFBXHL9MQY8g+T6FFgGfSH9i113dlNISb8+
15huKs7fPs1PKhPnlqSTG96FsvkuhruNavDayPwfQpGeQYnGoud6TdS8eM29wqLD
MdH1t7FVzdRdbGytAKL3QiCufIgKSDdxENrhbDZf2aalbwFEtDPqCwBQr6p24mTY
AXilQW0VKEdmbEV1g1Cs3znsTbKY6Ec6W+cquai/yNEiOnOCW4NOlOPW6YI5pizi
S3lCrxWRv0GKH1tyz/l+uWwPzdij7cbDI64SRjLK3syv0HPD3tAdODpFaCqyu18R
RYH9o0+KNGxIM1CfvG6r2+I7340M/WZi
-----END CERTIFICATE-----
Generated at Sun May 17 08:02:15 2026 by rpki-client