
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/34352e35392e3135342e302f32332d3234203d3e20313939303733.roa
File: 34352e35392e3135342e302f32332d3234203d3e20313939303733.roa (raw, json)
Hash identifier: j2FHnzqmiMRwFLKoD96QMAk8W1y8794cVqx/9omS71w=
Subject key identifier: DD:70:AA:9F:96:1C:52:EA:1A:F1:79:A0:5E:6F:E2:E0:B4:00:29:AB
Certificate issuer: /CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
Certificate serial: 0716E1973C474F5E5AA282FB597042E3D87A3F0A
Authority key identifier: 31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/34352e35392e3135342e302f32332d3234203d3e20313939303733.roa
Signing time: Sun 04 Oct 2026 11:21:09 +0000
ROA not before: Sun 04 Oct 2026 11:16:09 +0000
ROA not after: Sun 03 Oct 2027 11:21:09 +0000
asID: 199073
IP address blocks: 45.59.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl
rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 10:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:16:e1:97:3c:47:4f:5e:5a:a2:82:fb:59:70:42:e3:d8:7a:3f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
Validity
Not Before: Oct 4 11:16:09 2026 GMT
Not After : Oct 3 11:21:09 2027 GMT
Subject: CN=DD70AA9F961C52EA1AF179A05E6FE2E0B40029AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:63:23:ca:0c:68:03:ea:1a:b1:65:a5:03:b5:
9f:a4:56:79:54:9d:0f:6c:5a:67:bc:ec:06:a6:92:
f3:ef:28:95:1b:88:c2:c3:82:58:f6:6a:ba:0c:c8:
ae:9e:60:97:90:c0:04:fb:0a:9f:26:ee:aa:f1:3d:
20:98:a8:b9:2e:f9:2e:20:1c:6e:70:93:4d:40:ec:
d1:59:7c:a4:12:a6:7c:7e:be:f8:25:69:b4:aa:15:
d6:e9:d5:3f:de:37:ee:34:4e:9b:c5:9c:e4:b7:6d:
4c:d8:2a:b4:4c:8f:56:20:bc:be:80:07:b6:e9:ea:
fa:45:1d:00:e0:43:88:b8:b6:ec:08:a2:f2:33:2a:
72:7a:37:32:65:36:2a:4a:0f:ef:23:a9:1e:a8:99:
2d:c0:d5:ca:50:f9:2e:03:6c:24:43:da:00:96:d4:
a3:b7:67:fc:6f:12:a0:e0:c5:b9:1c:80:dc:8c:4d:
65:82:ab:20:1e:3e:ba:e0:c0:29:28:26:68:cc:44:
07:2a:8e:62:95:be:bd:0e:9f:21:e8:20:73:67:58:
76:12:88:c0:f1:68:24:11:07:6b:c6:51:fe:6f:b7:
54:17:a6:d2:31:f1:27:97:18:64:24:cf:a3:a3:9e:
68:2c:ec:59:3b:33:d5:b5:57:5a:f9:1e:98:ae:25:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:70:AA:9F:96:1C:52:EA:1A:F1:79:A0:5E:6F:E2:E0:B4:00:29:AB
X509v3 Authority Key Identifier:
keyid:31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/34352e35392e3135342e302f32332d3234203d3e20313939303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.59.154.0/23
Signature Algorithm: sha256WithRSAEncryption
07:42:4c:f2:9c:fc:0a:f5:25:2e:21:92:41:66:f1:59:30:9d:
9b:8b:b8:33:f2:94:03:f4:10:66:16:f3:48:8b:17:f2:bf:e3:
02:f4:c8:84:f8:ca:3d:08:02:2e:9b:41:4a:43:65:5f:b0:9a:
63:85:6a:08:fd:b3:1b:71:7b:8c:0d:ad:2a:98:60:b4:fd:58:
22:14:24:d0:fa:b0:0f:40:f6:21:96:d3:b6:9c:84:b7:41:0b:
6e:4f:d3:b8:23:e5:59:93:8f:84:b1:8b:ad:ee:ff:1b:51:5e:
8d:3f:6f:dc:12:e5:92:2e:39:5b:16:bc:b4:2d:e5:6f:74:e9:
a1:24:95:72:27:ec:96:89:18:c4:28:a8:1d:97:e5:f5:80:95:
57:84:11:5b:1e:39:54:5d:a7:e1:34:94:0f:32:c2:d7:c8:e5:
e2:86:52:37:5c:46:11:e1:5f:01:ed:0e:02:83:d8:2a:6e:fd:
8f:74:93:15:e9:a4:b6:67:5d:af:1b:90:9d:9e:27:cf:66:21:
4f:c7:50:e8:51:5c:1f:99:f0:9b:2e:6c:72:f4:f9:f0:8d:04:
4a:98:b2:c5:bc:a8:e9:73:5b:d3:5d:7b:42:98:ef:7a:d3:6a:
d5:f6:ef:9c:c3:a0:5f:7e:98:fc:aa:50:56:0a:88:b2:3a:b1:
90:54:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:58:23 2026 by rpki-client