
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e203632323430.roa
File: 3230392e38372e3136392e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: hwt7hEoaO4lwDQN/QUlyhl/RHEuOSVtWRAhLwmFBLJQ=
Subject key identifier: 8F:E4:67:A9:6F:85:52:D7:BC:58:AD:1F:6D:74:75:91:61:50:7B:4A
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 2C4E3AC24D02612E40C2B18E82A4AA8065F7BAD2
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e203632323430.roa
Signing time: Tue 10 Jun 2025 04:29:20 +0000
ROA not before: Tue 10 Jun 2025 04:24:20 +0000
ROA not after: Tue 09 Jun 2026 04:29:20 +0000
asID: 62240
IP address blocks: 209.87.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 03 Nov 2025 21:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:4e:3a:c2:4d:02:61:2e:40:c2:b1:8e:82:a4:aa:80:65:f7:ba:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: Jun 10 04:24:20 2025 GMT
Not After : Jun 9 04:29:20 2026 GMT
Subject: CN=8FE467A96F8552D7BC58AD1F6D74759161507B4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:1c:f9:0a:09:ce:7c:17:28:95:1c:6a:75:
1d:a9:ae:b2:81:86:6b:6d:c9:f4:1d:a7:cc:e6:74:
7c:82:f0:ec:b9:a0:c2:c3:d9:be:99:dd:9a:bd:a9:
9b:f1:ef:a6:7d:56:69:89:c8:db:5f:5e:44:ec:ed:
f8:ff:0d:9a:c2:08:ce:c4:3e:8e:84:4e:c9:1d:e1:
15:a4:b0:44:52:0d:ea:89:73:23:d6:fd:e0:8b:9f:
14:96:3a:7d:d7:9d:25:8c:48:0a:3c:26:b5:fe:74:
77:2f:dd:ea:d7:d7:2f:47:f3:fb:e3:d5:b0:a7:09:
17:64:68:c7:6c:b9:12:7c:ca:45:d3:cd:f1:25:74:
71:1d:24:1b:ec:6a:b3:bc:18:ba:7d:57:5b:f0:68:
68:ce:d0:0f:7e:43:a4:0f:7e:42:32:95:e9:d0:f9:
82:36:57:34:35:bd:d0:c9:1d:dd:cb:91:70:bc:23:
c5:b5:13:16:3a:40:b5:61:27:bc:f1:e1:ed:08:52:
ab:4a:e2:40:8d:53:8a:ee:e1:a9:b9:23:e4:a0:3e:
93:fb:1e:2a:94:74:2a:25:b8:ca:cc:80:f4:a2:c7:
e0:80:5e:dc:31:37:25:51:3a:c2:b3:fd:54:43:b9:
b2:ea:62:a2:eb:d9:4f:81:dd:ac:f0:d5:24:a3:24:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E4:67:A9:6F:85:52:D7:BC:58:AD:1F:6D:74:75:91:61:50:7B:4A
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.169.0/24
Signature Algorithm: sha256WithRSAEncryption
30:48:15:94:5d:e4:b5:79:ab:74:bb:85:79:cd:59:ec:04:a0:
25:2c:d8:d9:5b:63:59:1b:ab:23:62:79:7b:42:a3:75:a3:ca:
9e:b7:f7:2d:23:43:05:f6:16:b5:66:4b:52:30:f1:30:e3:be:
b3:69:ef:6d:ad:ba:ec:60:ff:f0:e6:65:d3:a2:fd:23:59:84:
2b:10:0a:7a:dc:9f:7b:bf:e8:63:ca:64:62:22:2b:02:ef:67:
45:ff:1b:d9:92:23:58:bc:b0:76:fa:99:c1:ae:93:6e:2e:bf:
75:79:c9:de:65:4b:80:f1:03:c7:74:64:52:b6:ec:da:c0:79:
14:c2:11:60:a9:78:1d:0e:4d:5c:8d:58:c5:7a:b9:e0:a7:1f:
0c:ca:0d:cc:3f:ce:b6:c6:60:2d:aa:d8:de:7e:f0:bb:2c:d9:
95:14:2d:ef:af:24:4e:a9:8f:33:39:27:7d:ac:4d:3e:65:c2:
a7:d8:f8:1e:11:b7:58:93:53:f2:93:a9:af:1d:e9:e8:6d:3b:
9e:6d:b2:5c:01:59:3b:9c:64:0c:3d:93:9b:58:c5:7d:8e:11:
83:56:ea:2e:62:72:7d:3f:3a:45:0b:b7:ec:ff:68:fa:b0:5f:
db:6b:d9:cd:18:08:30:62:56:05:3c:3f:66:d7:29:d7:95:c6:
b4:41:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 02:50:41 2025 by rpki-client