
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20323135333637.roa
File: 3132382e3235342e3230342e302f32342d3234203d3e20323135333637.roa (raw, json)
Hash identifier: OGY5SrjHLmaeujpSMg07GIlMtHaTxrTOFWaA/4Ni2vU=
Subject key identifier: D2:AA:A9:5C:B2:DB:26:CC:CB:CE:14:C8:B6:C4:51:9E:AB:67:8E:81
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 534940850330B7A5A5848C9DF70419B256AB16A3
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20323135333637.roa
Signing time: Sun 07 Jun 2026 22:32:35 +0000
ROA not before: Sun 07 Jun 2026 22:27:35 +0000
ROA not after: Sun 06 Jun 2027 22:32:35 +0000
asID: 215367
IP address blocks: 128.254.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 12 Jun 2026 20:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:49:40:85:03:30:b7:a5:a5:84:8c:9d:f7:04:19:b2:56:ab:16:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Jun 7 22:27:35 2026 GMT
Not After : Jun 6 22:32:35 2027 GMT
Subject: CN=D2AAA95CB2DB26CCCBCE14C8B6C4519EAB678E81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:e0:b1:0e:b8:f0:be:7b:20:a7:cb:50:d8:
5e:4d:bc:25:80:52:ed:cb:de:12:de:4b:98:94:be:
77:f7:b3:20:ed:a7:c4:9b:30:b0:b4:96:40:98:44:
20:fe:29:e4:72:e0:bb:2c:cb:e3:14:87:59:72:c8:
c1:7c:47:03:80:97:ee:72:ab:2d:42:1e:06:9d:0b:
62:f0:87:8b:60:3d:c7:3c:d7:ce:a0:11:75:20:b1:
ca:07:07:78:73:80:72:e1:9f:fd:76:28:af:e5:27:
35:8b:18:8b:0e:8d:bc:b7:11:ee:66:8f:f7:97:d3:
10:78:c9:35:c4:2f:19:9c:c0:35:c2:e0:df:c2:38:
e0:7a:fd:96:5a:ea:5a:5c:65:ba:0f:8b:bb:e6:fe:
c2:5a:7a:9c:f3:d5:48:59:5e:04:95:5f:7a:e8:7b:
0e:da:07:c9:0a:02:c3:72:e7:dd:ea:18:1d:78:ab:
6f:0f:aa:bd:c9:b6:d9:ed:0c:88:da:e1:fa:99:90:
0e:b7:11:1f:bb:05:80:57:32:df:53:fb:cc:d7:b6:
9b:67:7c:da:a9:76:42:28:f3:a6:ba:23:65:61:dc:
92:97:34:ad:50:bb:d6:ec:ae:ad:33:50:36:e9:03:
d6:83:69:73:6f:5b:27:e3:fc:02:46:41:25:f7:d8:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AA:A9:5C:B2:DB:26:CC:CB:CE:14:C8:B6:C4:51:9E:AB:67:8E:81
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20323135333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.254.204.0/24
Signature Algorithm: sha256WithRSAEncryption
67:85:35:82:9f:53:e6:64:e3:76:ee:f0:a4:47:d8:d0:7d:54:
57:42:b0:b2:92:8c:08:88:9c:81:59:68:63:d5:20:2d:11:84:
b2:3b:32:83:ed:92:b5:ea:2f:dc:2d:d2:ba:63:18:58:cc:dc:
3c:39:d7:dc:26:eb:7c:29:5c:3f:b9:15:ba:08:53:65:8c:9c:
d6:43:57:90:ec:5d:e8:10:ff:66:4e:f9:e8:4f:f5:f4:65:cc:
03:fa:6d:e0:06:5b:cc:8a:92:2d:99:72:dc:f9:42:15:e2:51:
24:2d:dc:0e:fc:c5:8c:85:9c:cd:55:6a:74:54:4a:5e:eb:99:
ca:4a:b7:6c:93:81:95:c8:7c:f2:f2:e2:16:d0:65:4f:77:f3:
59:c3:8c:70:d4:ff:d4:5f:e3:2a:db:98:33:e5:b1:22:5a:38:
41:5c:05:15:15:b0:52:6c:1e:47:64:10:51:11:3f:42:ac:54:
ac:e4:9e:f4:f6:52:51:42:5c:d4:aa:f7:c8:d9:4d:5d:52:b7:
6e:1c:4b:69:1c:40:0e:c0:39:9e:08:e5:00:30:6d:99:07:77:
33:78:e0:90:23:85:8d:d4:cc:3d:65:f7:01:54:a0:50:77:7b:
93:b2:59:83:41:c9:6a:06:9b:f4:30:1e:0b:01:f4:19:f1:76:
20:53:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:32 2026 by rpki-client