
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa
File: 3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa (raw, json)
Hash identifier: JgngXWJ7KIRyX3ZzGN4b8HQJTgGwSM6OZ+z+YWDfcbM=
Subject key identifier: C3:CC:79:D9:62:0E:BA:E4:71:A5:ED:7F:CB:F2:0F:DD:B3:E8:6F:DB
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 593EA0508FF17C9F637196C7D26366BC39559F6B
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa
Signing time: Tue 21 Apr 2026 20:58:47 +0000
ROA not before: Tue 21 Apr 2026 20:53:47 +0000
ROA not after: Tue 20 Apr 2027 20:58:47 +0000
asID: 199751
IP address blocks: 128.254.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Apr 2026 23:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:3e:a0:50:8f:f1:7c:9f:63:71:96:c7:d2:63:66:bc:39:55:9f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Apr 21 20:53:47 2026 GMT
Not After : Apr 20 20:58:47 2027 GMT
Subject: CN=C3CC79D9620EBAE471A5ED7FCBF20FDDB3E86FDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:28:5f:b3:ce:7f:fc:f8:2a:b1:b0:3f:ca:97:
ff:d6:a8:ec:b9:1d:85:32:6c:7d:f3:f3:56:4e:15:
71:22:4b:7f:43:67:7b:e6:66:f5:69:9d:8d:0f:a7:
64:a9:2a:04:9b:d2:9f:ee:20:ce:9f:60:72:78:b4:
50:24:e7:21:9d:87:f6:d3:d5:57:f5:18:c2:c6:79:
db:9e:7d:72:f3:9c:d5:65:e7:26:4c:7c:88:96:3a:
4d:d3:23:40:90:8f:aa:ed:3e:d3:56:b0:ba:cb:dd:
b9:56:da:de:4c:fb:85:fa:fa:82:7a:4d:05:5e:43:
79:1d:cb:4a:35:05:79:49:29:3c:fe:69:58:8f:82:
13:4a:44:63:91:26:8c:94:29:12:1e:aa:88:57:29:
df:d3:de:3a:3b:66:88:4e:dc:7a:f2:16:8d:53:4f:
a1:73:76:d5:9b:f0:05:1e:99:4b:3c:1f:b0:e6:8e:
49:03:46:97:d6:cd:41:4d:f4:f0:32:62:01:b7:b6:
81:fb:45:bb:45:24:b6:9b:16:45:1b:56:e6:7c:a9:
0b:4c:69:60:01:b1:30:b1:bb:04:2c:50:17:d5:aa:
5d:13:6d:91:84:66:d5:ea:ce:ed:00:bd:aa:39:4e:
b4:e3:80:25:db:d6:a4:bf:c9:92:e5:84:b9:59:8a:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CC:79:D9:62:0E:BA:E4:71:A5:ED:7F:CB:F2:0F:DD:B3:E8:6F:DB
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.254.204.0/24
Signature Algorithm: sha256WithRSAEncryption
63:10:22:08:2c:19:c8:30:13:2e:4c:03:b4:d0:49:fd:bc:5f:
5f:db:9c:3e:fd:ca:ad:03:b0:be:de:67:5e:89:ce:be:bf:e4:
f2:dc:f4:37:26:5c:67:3d:c5:94:c4:47:88:96:24:7f:8b:51:
c8:c1:e5:41:1a:71:99:dd:83:cf:30:0d:2e:39:0d:bd:7a:3e:
3e:a3:d2:0e:39:6b:f4:45:a0:2d:46:09:3d:ec:2d:0f:d1:95:
14:58:61:90:4b:40:f9:28:c5:b1:3e:6f:7d:68:77:67:21:b5:
57:b3:1d:45:a3:ff:d6:88:3b:dd:c0:ea:77:ca:69:e7:aa:82:
ba:a1:64:f3:c5:d0:e1:27:7e:95:42:9f:99:fb:3b:85:c2:de:
63:ab:8e:d3:58:0d:55:b2:51:3e:58:a1:21:87:62:c8:2c:6b:
be:52:f7:a9:94:64:d7:aa:27:b2:5f:94:98:a7:be:10:4f:10:
a4:14:19:5c:a7:ef:48:d9:43:2e:69:8c:14:80:11:5a:81:57:
59:9b:9a:81:93:95:b3:37:0e:94:5c:3c:63:08:83:eb:64:42:
5c:ba:ab:aa:21:73:86:18:f7:d2:be:85:48:d9:b8:da:08:84:
dc:91:01:02:e3:bd:6a:44:7b:db:be:92:18:bf:15:25:6d:7e:
90:c3:ee:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:18:33 2026 by rpki-client