
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39332e302f32342d3234203d3e20323039363937.roa
File: 36342e3235332e39332e302f32342d3234203d3e20323039363937.roa (raw, json)
Hash identifier: 1uY0udvbAuI9VD28dOxjjdX1zAv+rVNvYtxnhAQj9Hk=
Subject key identifier: C6:4A:D5:33:24:1A:E7:70:D5:06:B6:72:9D:6B:BD:6A:35:56:28:78
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 047168B5B16E428898E7C5F6E692B61A9C16DEB1
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39332e302f32342d3234203d3e20323039363937.roa
Signing time: Thu 19 Mar 2026 07:41:20 +0000
ROA not before: Thu 19 Mar 2026 07:36:20 +0000
ROA not after: Thu 18 Mar 2027 07:41:20 +0000
asID: 209697
IP address blocks: 64.253.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 21 Mar 2026 12:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:71:68:b5:b1:6e:42:88:98:e7:c5:f6:e6:92:b6:1a:9c:16:de:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Mar 19 07:36:20 2026 GMT
Not After : Mar 18 07:41:20 2027 GMT
Subject: CN=C64AD533241AE770D506B6729D6BBD6A35562878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:ba:28:a0:05:bc:44:8f:8c:f8:d3:10:de:
ae:16:2f:f4:f8:07:5e:07:62:29:1c:b9:dd:ae:df:
06:e5:85:c4:2e:14:dc:85:b2:98:39:ba:3c:5a:fe:
0b:34:62:da:a0:cc:be:68:d7:e1:5b:c9:e8:5f:dd:
ce:09:68:47:ed:44:94:cb:aa:ac:be:7d:60:28:7b:
19:94:cd:58:3c:f4:6c:2c:8f:1e:e0:32:12:10:d3:
59:18:c4:ae:cf:36:63:b6:03:31:24:b1:9b:e3:5d:
38:96:38:5c:74:66:7f:60:6c:af:6f:f6:5f:0c:42:
5a:97:86:9a:4e:d6:91:7c:ba:b2:cf:fc:e7:9b:c7:
59:43:f9:b3:74:bb:58:4d:fe:84:d9:a1:ac:8b:14:
b6:9a:66:9e:e4:a0:09:7f:2c:11:5b:60:96:e0:8b:
20:e4:e1:bc:aa:55:19:ba:eb:a4:7c:ba:5e:08:7e:
00:e4:24:1f:62:eb:c0:19:fd:71:90:1d:34:fb:ac:
ed:b7:a2:00:ed:f8:ae:11:4e:f9:20:ba:f9:e2:b7:
75:0e:49:72:29:0c:9d:4e:7f:b8:94:c4:bb:ce:66:
8e:a6:31:f4:c3:09:ce:70:b9:b1:83:a2:62:1f:01:
78:80:a2:aa:77:55:f8:eb:a9:6d:fe:23:d0:78:06:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4A:D5:33:24:1A:E7:70:D5:06:B6:72:9D:6B:BD:6A:35:56:28:78
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39332e302f32342d3234203d3e20323039363937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.253.93.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b5:ce:a5:8a:77:d7:6b:77:33:2a:53:c7:4b:b5:3b:63:f1:
9c:8d:66:57:d2:56:08:26:f2:e9:6f:98:5a:ce:6b:93:59:db:
fb:84:8a:07:b2:b6:f4:7a:f0:6c:fa:f0:0c:2e:48:7e:87:0c:
b3:bf:f7:27:36:12:bf:96:f3:4d:51:dd:69:9d:48:e4:c9:57:
d6:f9:da:13:0d:c9:ed:d5:8d:d0:dd:86:8a:ac:b8:0d:b4:0e:
46:53:61:97:ab:13:7a:02:5a:8d:3f:89:cd:6b:88:fc:63:ba:
c1:62:0f:a6:79:ec:e5:7e:9a:b6:1c:29:8b:23:56:b3:b8:09:
0c:7b:ad:2f:a9:cb:5a:8f:52:29:5e:89:3d:04:a7:61:8f:8b:
fb:25:75:da:57:4b:ae:c5:83:d5:78:7c:89:75:06:c0:de:b2:
5b:89:de:a2:e0:06:f5:fd:bd:46:43:6c:2c:f0:95:84:68:97:
b6:17:43:68:e8:87:92:14:3e:fc:26:9d:97:53:fb:a7:7e:3c:
f9:46:2e:4b:d9:99:93:24:68:b5:06:d3:73:dc:a7:b7:39:c8:
e0:4c:3d:41:4c:a6:5b:3d:7b:5e:aa:71:73:51:76:31:c8:b1:
7b:06:3a:44:a6:f8:2c:e4:78:fe:b0:c0:8f:27:e1:3b:a8:5e:
4b:27:72:5f
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUBHFotbFuQoiY58X25pK2GpwW3rEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjYwMzE5MDczNjIwWhcNMjcwMzE4MDc0MTIw
WjAzMTEwLwYDVQQDEyhDNjRBRDUzMzI0MUFFNzcwRDUwNkI2NzI5RDZCQkQ2QTM1
NTYyODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5u6KKAFvESP
jPjTEN6uFi/0+AdeB2IpHLndrt8G5YXELhTchbKYObo8Wv4LNGLaoMy+aNfhW8no
X93OCWhH7USUy6qsvn1gKHsZlM1YPPRsLI8e4DISENNZGMSuzzZjtgMxJLGb4104
ljhcdGZ/YGyvb/ZfDEJal4aaTtaRfLqyz/znm8dZQ/mzdLtYTf6E2aGsixS2mmae
5KAJfywRW2CW4Isg5OG8qlUZuuukfLpeCH4A5CQfYuvAGf1xkB00+6ztt6IA7fiu
EU75ILr54rd1DklyKQydTn+4lMS7zmaOpjH0wwnOcLmxg6JiHwF4gKKqd1X466lt
/iPQeAYBmQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMZK1TMkGudw1Qa2cp1rvWo1
Vih4MB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzQyZTMyMzUzMzJlMzkzMzJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzAzOTM2MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAED9XTANBgkqhkiG9w0BAQsF
AAOCAQEAjLXOpYp312t3MypTx0u1O2PxnI1mV9JWCCby6W+YWs5rk1nb+4SKB7K2
9HrwbPrwDC5IfocMs7/3JzYSv5bzTVHdaZ1I5MlX1vnaEw3J7dWN0N2Giqy4DbQO
RlNhl6sTegJajT+JzWuI/GO6wWIPpnns5X6athwpiyNWs7gJDHutL6nLWo9SKV6J
PQSnYY+L+yV12ldLrsWD1Xh8iXUGwN6yW4neouAG9f29RkNsLPCVhGiXthdDaOiH
khQ+/Cadl1P7p348+UYuS9mZkyRotQbTc9yntznI4Ew9QUymWz17Xqpxc1F2Mcix
ewY6RKb4LOR4/rDAjyfhO6heSydyXw==
-----END CERTIFICATE-----
Generated at Fri Mar 20 15:55:23 2026 by rpki-client