
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20333939303733.roa
File: 3230342e36392e3231372e302f32342d3234203d3e20333939303733.roa (raw, json)
Hash identifier: Hu+F89govhHsQNoTbCX1Kl4pmveymIOysN6JzpaHTYM=
Subject key identifier: A5:13:FA:68:4D:0A:C3:E4:E8:C5:7F:5D:A0:B3:C4:92:82:D6:08:A1
Certificate issuer: /CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220
Certificate serial: 3086DB91C06C2481E18553380019CF2075EFAFEC
Authority key identifier: A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20333939303733.roa
Signing time: Tue 30 Jun 2026 07:36:09 +0000
ROA not before: Tue 30 Jun 2026 07:31:09 +0000
ROA not after: Tue 29 Jun 2027 07:36:09 +0000
asID: 399073
IP address blocks: 204.69.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.crl
rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 07:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:86:db:91:c0:6c:24:81:e1:85:53:38:00:19:cf:20:75:ef:af:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220
Validity
Not Before: Jun 30 07:31:09 2026 GMT
Not After : Jun 29 07:36:09 2027 GMT
Subject: CN=A513FA684D0AC3E4E8C57F5DA0B3C49282D608A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:66:d4:3d:63:7a:aa:bf:ad:df:65:95:be:
e5:d0:cb:72:b4:8b:b1:89:03:b8:5f:6c:73:a7:0e:
14:28:ac:22:40:9c:bc:c7:3a:2b:0c:2f:ee:ab:2f:
35:3e:74:0e:1a:4a:b0:40:e6:a1:cb:0b:e2:81:5a:
c0:62:66:34:7e:5b:05:4e:d0:99:bc:b9:bb:9f:06:
77:84:9f:f0:43:fa:0d:04:72:6f:df:62:55:96:6e:
de:c9:04:cd:cc:4b:a8:67:d2:5c:a0:58:c1:ce:db:
97:0b:ca:0b:e7:2f:f8:b4:d5:9f:e3:3b:85:65:16:
53:1d:d9:03:03:58:55:20:26:03:3c:a3:3d:3b:94:
0b:d1:fc:70:19:cc:46:17:df:e9:3f:81:f3:d7:b2:
cb:d3:e0:7b:9c:f8:e6:37:56:57:7f:d5:13:8c:30:
1d:44:8c:ae:68:dd:4c:47:02:54:8e:ab:a0:4e:ee:
ab:41:95:4a:2f:98:65:4e:14:ef:0b:46:b8:29:02:
6e:5e:84:be:00:c0:07:fb:02:d4:a1:c5:1f:65:0e:
3b:eb:14:ad:0e:9f:8f:27:91:c2:d6:f9:90:e1:ca:
8a:ee:d6:6a:62:3c:99:7d:7d:94:1c:73:d8:09:9d:
2d:d2:34:24:8b:7a:57:87:9a:70:11:6c:8d:f9:4d:
30:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:13:FA:68:4D:0A:C3:E4:E8:C5:7F:5D:A0:B3:C4:92:82:D6:08:A1
X509v3 Authority Key Identifier:
keyid:A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20333939303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.69.217.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:0a:bd:6f:2b:20:c4:2e:a4:52:2c:04:f5:33:36:9c:52:03:
08:dd:fd:4b:d9:34:62:8e:d1:9a:40:41:58:a2:7c:c5:92:ab:
79:19:5c:b1:b2:87:92:0c:7d:2a:0c:7b:95:ea:bf:d9:a0:bd:
67:68:9d:a4:4a:e7:b2:16:2f:a7:88:dc:41:05:d0:0c:27:d1:
87:2a:54:12:c2:a2:ca:47:fb:04:22:67:16:ed:11:2b:00:1b:
cd:a2:6d:72:4f:4f:f3:a4:73:42:3e:97:c5:98:36:24:52:94:
a6:79:c9:09:ab:0f:8f:88:1b:2e:da:e0:f9:d8:99:80:c1:1f:
df:5c:05:1e:5b:3d:78:fa:d9:15:4a:5c:c9:5f:72:0c:f0:10:
3a:b1:bd:ec:48:98:3b:4e:0d:81:05:9c:83:8f:47:24:4d:06:
4f:50:ce:49:3f:fb:fa:01:89:2d:98:f6:3b:6c:49:17:67:85:
35:5f:d2:87:55:33:f3:d9:d7:63:04:de:85:b7:56:64:36:b6:
04:b1:45:1e:10:0b:cc:34:94:80:6b:0e:a5:c5:da:1c:d9:3f:
3d:14:8d:56:e9:be:fa:20:38:1e:2b:bf:0c:0f:ed:d4:f7:84:
0e:97:71:5c:9a:7d:2d:f5:e3:0c:7a:c3:45:8f:8f:46:4f:f3:
c5:cc:c3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:28:30 2026 by rpki-client