
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e20383334.roa
File: 3230392e38372e3136372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Wue5fdsDpBRUqTsw+EmDWWDN0r82JdygiYM8tQlzbZc=
Subject key identifier: 4F:D5:17:B7:FF:18:4F:37:7D:64:85:42:FE:16:00:68:63:6B:03:03
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 21284B91BD23AE59CEBB0D7C9FEA9CFC68C5BE99
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e20383334.roa
Signing time: Mon 30 Mar 2026 12:32:51 +0000
ROA not before: Mon 30 Mar 2026 12:27:51 +0000
ROA not after: Mon 29 Mar 2027 12:32:51 +0000
asID: 834
IP address blocks: 209.87.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 31 Mar 2026 16:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:28:4b:91:bd:23:ae:59:ce:bb:0d:7c:9f:ea:9c:fc:68:c5:be:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: Mar 30 12:27:51 2026 GMT
Not After : Mar 29 12:32:51 2027 GMT
Subject: CN=4FD517B7FF184F377D648542FE160068636B0303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:7c:bb:89:c6:ee:95:b2:cb:b9:4f:03:05:
ef:a0:1e:83:a0:9d:5c:3f:32:0a:82:5c:8f:e0:73:
b6:a6:ab:01:bd:15:56:f3:64:97:4e:03:69:4f:ef:
f9:b7:3c:79:b3:61:53:dd:8f:6a:59:0d:cf:c3:47:
e8:d6:2d:3b:f8:4a:8e:30:39:4a:2a:54:34:c1:ed:
b0:ae:a9:72:8a:66:04:c2:37:41:48:0a:4f:4c:d8:
5b:32:c3:d6:aa:d0:b2:0d:8f:3c:68:d9:7d:73:60:
7f:1e:e8:61:b9:d3:40:7c:08:63:8e:ba:be:af:5d:
ab:1b:ff:b2:69:b2:ec:39:06:53:33:36:c4:4f:b5:
73:d5:9b:cd:86:e6:a4:9b:0d:99:88:06:12:8a:2c:
c2:11:47:87:9d:dc:62:d1:7a:5f:fc:d0:90:b8:e6:
88:82:4e:a5:c3:80:70:43:66:de:f8:6f:1d:e6:7d:
01:47:0b:29:6d:ef:ea:ab:7e:a1:67:0d:3d:ed:30:
40:67:72:cb:40:11:de:7c:f5:af:9c:77:26:e0:e2:
94:87:cc:2d:97:27:81:3f:34:53:e1:6c:00:38:9e:
b8:4b:2f:aa:27:2b:c8:d4:62:f2:8e:eb:99:b9:89:
4a:08:23:91:1c:d4:9b:3e:e4:55:e5:da:ca:67:da:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:17:B7:FF:18:4F:37:7D:64:85:42:FE:16:00:68:63:6B:03:03
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.167.0/24
Signature Algorithm: sha256WithRSAEncryption
64:dc:d7:10:f8:68:c8:3e:b3:ed:c2:ed:3b:0e:fe:95:b9:57:
e0:36:5a:0f:8e:82:1a:0b:e9:ab:e3:cb:19:f5:8b:28:6d:99:
83:33:be:0d:e4:d5:b9:2e:3d:b3:8d:dd:28:21:2c:a2:36:5e:
38:98:8d:d7:7f:18:07:bf:b3:d5:0a:44:99:ef:d4:da:7d:b8:
0b:3f:5f:ce:69:bd:c4:24:bd:18:51:92:46:00:63:a3:b0:07:
e8:68:36:12:42:9d:24:a5:20:1a:18:18:f7:87:ae:99:b5:3e:
79:08:6c:47:14:65:e8:d4:09:ea:4b:04:59:43:9e:8a:53:c5:
51:41:59:1b:70:0d:7d:67:50:84:d5:3f:73:38:80:54:01:71:
4f:b1:11:7e:08:91:fc:31:1b:ec:07:cb:ea:2b:d0:db:5d:5a:
be:a9:d2:80:e5:69:30:37:87:38:13:b3:22:ea:5e:90:2d:5c:
e2:dd:6b:9d:f4:e2:ab:20:18:06:43:b7:c7:d0:bd:d3:00:42:
fe:20:56:0d:e2:96:1a:01:a7:af:3f:32:d9:ff:9c:b4:67:07:
67:72:8c:9a:8e:26:f6:58:ea:d0:01:1a:69:ef:8e:e6:db:24:
da:33:7c:8a:76:ae:03:9b:c1:6f:d5:10:f0:81:f0:21:87:df:
82:38:9e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 23:20:21 2026 by rpki-client