
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e2033323537.roa
File: 3132382e3235342e3230352e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: PEfoXU+cHXVQbvsQELaZx6QxXlLJN4ajkjbNfvBUf9s=
Subject key identifier: 65:AD:FA:3E:CE:D2:DD:82:04:DB:EB:31:60:B0:60:C2:DB:7A:F2:43
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 481AE27DF8463E16F12F403164238867885E4FC8
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e2033323537.roa
Signing time: Wed 12 Aug 2026 20:19:28 +0000
ROA not before: Wed 12 Aug 2026 20:14:28 +0000
ROA not after: Wed 11 Aug 2027 20:19:28 +0000
asID: 3257
IP address blocks: 128.254.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 01 Sep 2026 20:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:1a:e2:7d:f8:46:3e:16:f1:2f:40:31:64:23:88:67:88:5e:4f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Aug 12 20:14:28 2026 GMT
Not After : Aug 11 20:19:28 2027 GMT
Subject: CN=65ADFA3ECED2DD8204DBEB3160B060C2DB7AF243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:c7:56:8b:22:69:e4:fa:f1:4c:7b:e5:61:
1a:d5:75:d0:5c:58:79:d2:d9:ae:0c:9e:a9:b9:97:
31:62:05:25:41:02:0a:30:b2:5e:86:f2:db:1b:e8:
2f:ab:69:e5:13:2f:1a:59:d6:27:77:b7:cf:7b:1c:
1b:da:de:2c:89:de:58:29:f2:ab:32:15:0b:10:52:
3c:8d:db:30:c7:d3:34:20:90:07:88:56:42:9a:49:
06:d7:07:ad:2c:bc:cb:7d:37:a8:4c:1a:9b:34:b6:
d0:34:c1:44:ad:65:5f:db:72:17:73:fc:ce:64:5a:
10:9c:e1:f3:d9:85:ef:22:81:2b:2b:cd:1c:f4:c2:
33:65:35:c2:94:47:68:8c:ac:22:9b:4a:ad:7e:38:
92:a8:2c:0d:73:6f:8a:3f:64:06:44:a0:43:c3:b3:
48:62:43:15:1a:6d:14:2f:25:4c:a6:17:18:30:1e:
27:ad:37:e8:01:a1:0b:8b:ef:54:75:f3:9c:80:f7:
51:ee:93:d0:e2:9d:ae:5d:fd:da:04:50:0a:b2:ab:
9f:53:87:29:f6:80:e7:42:54:94:d3:4d:54:3b:ea:
c9:bc:4a:44:03:b8:b7:f0:7e:04:f9:34:a3:16:ef:
d6:95:7b:15:2f:38:a5:b6:89:50:97:74:4f:9b:a5:
68:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AD:FA:3E:CE:D2:DD:82:04:DB:EB:31:60:B0:60:C2:DB:7A:F2:43
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.254.205.0/24
Signature Algorithm: sha256WithRSAEncryption
28:07:83:05:3f:2e:9c:d5:4e:9b:69:99:53:17:7d:63:c1:e9:
2f:14:47:eb:09:84:35:d0:80:9e:58:c8:33:7b:ee:cb:5a:5e:
4a:45:a2:cb:dd:55:fd:8a:99:be:55:63:f7:5c:fc:a8:08:54:
e2:6f:0b:46:99:3f:5e:93:26:65:bc:c0:19:0e:33:fa:a4:88:
04:ce:3a:e2:10:6e:00:61:99:f6:e2:7e:bb:64:7a:93:c0:1c:
30:09:8f:fb:ef:5b:1c:bc:98:47:d7:22:a8:ce:b0:fe:64:dd:
7b:8f:4f:9f:70:09:92:db:3f:db:5e:e8:e3:96:0d:b3:ee:d2:
02:05:f5:d0:c1:df:0a:8f:6e:2e:64:aa:16:48:b2:8c:1d:65:
d0:1f:b0:93:c9:c2:25:98:24:74:10:f3:9a:12:0a:dc:63:28:
a4:39:e4:90:9e:04:3e:2f:ea:2f:99:cf:a9:a3:5f:97:20:61:
56:9b:86:58:03:8e:3c:63:bd:9a:57:c4:89:59:d3:60:c4:29:
f7:7e:82:20:34:24:f7:42:52:1c:95:a7:96:18:19:79:f7:79:
b4:ae:d2:04:f2:38:bf:3a:8c:53:12:37:1c:b0:82:4c:2c:21:
41:1a:dc:03:cc:68:06:82:a9:68:47:0e:43:e7:f8:b5:65:b7:
39:96:b0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:46 2026 by rpki-client