
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa
File: 3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa (raw, json)
Hash identifier: cHb/MI+rnPU7UvMcBMHq4rhj/Fv4llHEbF0EwpopSS4=
Subject key identifier: 21:C8:60:05:32:C2:DA:54:DE:93:6F:7F:54:97:27:D0:6D:D9:1A:CB
Certificate issuer: /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial: 2ACF0C3BC6F77EE5CED8F15A434AAD06DFD7F3B3
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa
Signing time: Mon 03 Aug 2026 13:36:10 +0000
ROA not before: Mon 03 Aug 2026 13:31:10 +0000
ROA not after: Mon 02 Aug 2027 13:36:10 +0000
asID: 46537
IP address blocks: 216.247.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 18:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:cf:0c:3b:c6:f7:7e:e5:ce:d8:f1:5a:43:4a:ad:06:df:d7:f3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Validity
Not Before: Aug 3 13:31:10 2026 GMT
Not After : Aug 2 13:36:10 2027 GMT
Subject: CN=21C8600532C2DA54DE936F7F549727D06DD91ACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:dd:1f:ab:04:d8:9c:2f:c7:eb:11:a4:9e:
26:a8:7b:76:a5:19:a5:e0:37:8a:4a:5b:90:38:79:
ba:1e:85:d4:db:c5:1f:a5:03:1e:3e:0a:de:e7:2d:
ad:9a:5e:7b:be:71:39:a2:22:e0:df:74:55:82:ad:
fb:57:d1:ec:de:6e:ae:7b:43:5e:87:36:0d:50:bb:
24:77:bf:bc:31:15:5d:cb:6e:00:d3:95:b0:18:6a:
35:93:8f:87:79:be:4e:3b:49:9e:d9:6a:c1:2e:3f:
34:ef:48:16:02:94:be:0a:14:80:70:63:1c:4c:a6:
47:67:cc:70:2d:41:e8:37:a9:2f:6d:a6:9f:d3:3b:
bb:90:92:c5:e4:4b:d0:04:f1:f8:27:00:57:f3:a9:
8e:8b:1a:f9:9d:76:07:1e:9d:8f:f8:76:72:f1:09:
12:6e:c3:f9:72:ef:5f:ba:7e:5b:55:8f:34:e7:f5:
2e:8e:c7:74:99:23:9b:84:24:e4:10:bd:86:d3:f4:
a8:35:5d:35:13:70:d6:b2:fb:5e:52:03:26:82:60:
da:8e:be:96:9d:9d:f6:73:2e:26:18:a5:a8:d6:cd:
a5:7f:6f:d8:49:4f:67:b4:8c:0c:1d:10:54:6c:4a:
50:2f:e1:2a:23:a6:72:c6:b2:60:51:7c:bc:33:ec:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C8:60:05:32:C2:DA:54:DE:93:6F:7F:54:97:27:D0:6D:D9:1A:CB
X509v3 Authority Key Identifier:
keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.247.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:c6:b0:82:1a:94:83:d8:11:28:fe:42:69:b6:d6:11:dc:6f:
a0:fa:65:e6:ac:cf:d1:a5:a7:e6:a8:cb:9d:19:5e:8e:4b:be:
c7:c3:e1:ab:7b:9f:75:15:7d:4f:71:6d:27:5d:2b:fc:c2:90:
13:0c:19:4c:04:2a:a1:b1:f6:06:5c:17:9c:ee:3f:10:2d:3a:
52:a4:88:ee:8a:c0:c7:9e:a1:02:c5:f8:00:7a:75:fc:21:97:
68:19:a7:3a:eb:4c:9c:3c:eb:fb:b2:e5:b7:02:ea:d9:89:e4:
c3:95:cc:03:c5:9a:c6:c7:7a:0b:cf:4f:a6:8b:29:ba:e5:0b:
b9:c4:24:70:b7:cc:6d:cf:bf:17:9f:d8:f1:30:31:b1:43:ab:
a6:7f:e3:ca:5a:84:d3:87:4d:48:50:7f:92:4b:b3:00:85:78:
79:88:ea:f1:1a:f4:74:43:ab:be:93:2f:5d:e7:4c:70:fd:ed:
c9:c9:58:d7:ac:fc:0f:44:a1:31:88:db:8f:2e:7e:d1:f5:dc:
ea:46:82:8c:ef:ae:22:06:21:06:0f:af:d8:e1:49:29:c7:d2:
cd:6e:39:6c:45:83:8e:6e:96:df:26:46:79:d4:4d:4f:83:4d:
15:d7:f6:53:c8:7e:ae:96:99:82:4b:dc:34:f8:75:d4:91:95:
d2:99:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:13:30 2026 by rpki-client