
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333936333536.roa
File: 3231362e3135312e3136342e302f32332d3233203d3e20333936333536.roa (raw, json)
Hash identifier: q4vFNS8CGLZzQ5GB8vLN9+Nfs4M6eY6Xg08X806f06o=
Subject key identifier: 99:6E:4D:B5:81:C6:21:4F:9A:77:23:FA:B6:7D:BC:CA:7E:A6:FE:13
Certificate issuer: /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial: 68FBC9586A7EAF6A89605AC78F64B745522EBA55
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333936333536.roa
Signing time: Tue 28 Apr 2026 16:36:00 +0000
ROA not before: Tue 28 Apr 2026 16:31:00 +0000
ROA not after: Tue 27 Apr 2027 16:36:00 +0000
asID: 396356
IP address blocks: 216.151.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 03:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:fb:c9:58:6a:7e:af:6a:89:60:5a:c7:8f:64:b7:45:52:2e:ba:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Validity
Not Before: Apr 28 16:31:00 2026 GMT
Not After : Apr 27 16:36:00 2027 GMT
Subject: CN=996E4DB581C6214F9A7723FAB67DBCCA7EA6FE13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:ed:03:01:7c:e0:52:42:56:f7:10:ad:ef:
90:70:10:dd:c2:c0:d3:37:8e:db:b3:09:67:b1:23:
86:18:8d:b0:88:96:1d:cc:a9:ff:73:6c:f2:77:a0:
fc:4c:fd:e4:58:a1:1a:2a:e2:dc:41:8f:d1:bc:64:
4d:47:7e:36:50:57:dd:8a:70:1e:eb:0f:bf:97:18:
31:f4:ba:44:cd:63:ce:29:ad:ec:d6:25:d1:e4:1a:
e6:25:6a:7a:53:64:88:59:4d:3e:27:49:6d:40:5b:
6f:5d:39:e8:c0:59:e8:26:8e:d5:f9:d9:12:64:2e:
25:57:fc:23:12:23:2b:5b:d0:92:c3:ec:26:a4:90:
39:39:a8:cc:7b:70:48:a9:be:49:20:b5:73:56:86:
75:f0:52:58:88:f3:fb:1d:73:4f:11:d0:e9:5b:71:
a7:93:3f:67:3f:fb:23:f8:3d:49:c3:01:35:08:95:
55:68:1a:ff:1d:8a:9e:3a:58:6a:b9:e5:fb:5c:e5:
ab:17:57:2c:65:b3:c5:e4:cf:bf:d3:4d:e5:f0:24:
22:02:ca:cb:11:62:29:b6:d4:d7:ab:de:39:44:87:
14:8b:2b:1e:7a:d3:45:c5:77:08:7b:51:70:a8:72:
2c:f5:f7:3c:52:07:36:5f:51:31:87:7d:c1:13:99:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6E:4D:B5:81:C6:21:4F:9A:77:23:FA:B6:7D:BC:CA:7E:A6:FE:13
X509v3 Authority Key Identifier:
keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333936333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.151.164.0/23
Signature Algorithm: sha256WithRSAEncryption
74:93:c1:da:63:f0:28:54:b5:7e:fd:4c:3b:17:29:cb:7f:50:
4d:1a:c9:00:36:31:80:28:27:8c:cd:18:28:4f:f8:f9:7a:ea:
6e:20:56:e4:da:1c:dc:d1:2f:2b:14:cb:ea:da:16:ff:7b:2f:
7f:9f:30:b8:0f:fd:45:0e:d6:96:28:88:c1:62:2a:98:e6:d9:
13:67:d9:c3:71:6b:17:4e:40:62:50:b8:11:36:e8:88:65:5b:
ae:97:0e:6e:9a:fb:3e:a4:97:fb:46:d1:c5:8d:ef:c3:7b:f7:
af:40:ae:13:7b:84:2f:3d:e1:f0:72:c2:41:b3:52:b8:47:ec:
b4:61:54:32:04:3a:1b:07:7c:b1:4c:3c:c4:06:3a:bc:b1:08:
2d:a8:9c:5d:e6:91:bd:97:5e:8f:b3:52:0f:f3:fa:c6:d2:40:
cc:8d:da:81:fc:25:c5:a6:ad:07:e8:9c:a5:60:0a:c7:38:ac:
de:8b:13:5e:63:3a:f3:0b:24:75:43:19:ac:58:1c:ef:21:dd:
79:f7:1f:9e:4e:0b:ba:55:05:b4:32:2f:d4:2d:21:b7:14:83:
ba:86:a4:7e:af:34:c7:44:84:4b:f2:9a:7a:d7:b4:bb:45:24:
33:ab:3f:3c:15:ec:bc:92:d0:83:3b:c5:f6:e7:05:f7:79:2e:
85:aa:fb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:05 2026 by rpki-client