
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20313432323430.roa
File: 3230392e38372e3137322e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier: BHlnNT9yya+58mm+VynEZRAc/KVFWJXrW4TamLYiwdc=
Subject key identifier: 5E:B2:24:3A:65:15:F0:B2:9C:E6:0D:8A:73:8A:7E:C9:3E:F3:07:8A
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 2762698A868E420E492AB0BB5DD3809877FEF836
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20313432323430.roa
Signing time: Sat 22 Aug 2026 03:11:31 +0000
ROA not before: Sat 22 Aug 2026 03:06:31 +0000
ROA not after: Sat 21 Aug 2027 03:11:31 +0000
asID: 142240
IP address blocks: 209.87.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 05:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:62:69:8a:86:8e:42:0e:49:2a:b0:bb:5d:d3:80:98:77:fe:f8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: Aug 22 03:06:31 2026 GMT
Not After : Aug 21 03:11:31 2027 GMT
Subject: CN=5EB2243A6515F0B29CE60D8A738A7EC93EF3078A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:a2:ea:d8:92:b9:60:c9:cd:86:2e:af:cd:
35:66:c8:32:ac:6e:9e:5b:62:84:24:19:cb:07:17:
74:fa:b4:4c:30:f2:d5:ae:04:00:08:5c:03:18:48:
e5:3a:e8:14:9f:9e:c2:0e:84:1d:5c:7a:9a:f4:b4:
0b:b5:2c:60:8e:5a:01:9a:45:8f:8d:d2:a4:54:db:
7a:1b:5c:32:bc:43:73:28:76:47:52:57:a6:10:62:
7f:8a:7c:4a:11:7e:82:7b:11:a2:fe:09:89:76:e0:
fb:b5:49:f5:e8:77:ad:0b:d7:ea:8c:ff:f0:39:fe:
8d:67:c3:b7:45:c9:05:d8:e8:8d:b6:22:4c:17:21:
18:64:0c:73:fc:24:7b:5c:29:d1:42:b6:d9:21:5c:
46:be:c9:e8:99:23:c4:e0:ed:ff:16:13:9e:3c:ee:
97:ac:0f:f6:ea:20:b1:fb:a0:ec:5d:d2:a2:c8:d5:
4f:18:f3:cd:9e:30:be:7a:3e:a9:58:6b:07:fc:35:
4a:4b:42:e9:35:d0:d9:17:48:fd:bc:52:c0:46:35:
1a:81:b8:3d:4c:4e:93:59:df:25:3e:35:10:7b:87:
da:b4:f2:cb:77:ae:a3:91:4f:e3:2f:e3:48:5e:8c:
bf:d6:94:86:f6:03:7f:ed:e1:66:88:6a:8f:1c:ea:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B2:24:3A:65:15:F0:B2:9C:E6:0D:8A:73:8A:7E:C9:3E:F3:07:8A
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20313432323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.172.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:1a:ff:d9:52:c9:2b:0d:12:62:4a:95:f9:a7:23:3d:39:e8:
a1:3e:85:79:5d:85:ad:19:72:51:34:12:32:0d:57:9f:1b:7d:
24:d9:3f:d5:52:aa:5c:45:24:89:bc:8d:7a:c0:eb:b7:ac:c7:
5b:1f:2e:39:10:2c:fb:f9:19:69:f9:41:00:89:0a:3d:2a:8e:
42:5e:d1:32:df:12:8a:0c:9a:57:7b:ea:6f:d0:60:2e:ca:22:
a6:10:86:4e:eb:8f:88:92:3c:41:f3:8d:55:d3:c3:3e:d9:af:
ed:5c:f0:4a:a4:88:84:04:b6:20:0f:0b:07:e2:12:08:fe:da:
77:17:13:d4:26:54:9d:92:95:8b:ea:50:a6:3a:9a:e7:2d:ca:
81:56:f8:8c:3e:67:eb:e2:f0:5b:63:64:fb:50:d9:1a:f6:e4:
34:0c:d3:88:04:37:4c:c6:e4:75:06:40:cf:85:66:88:f6:80:
c2:88:03:ee:68:6b:20:f5:0a:7d:fa:4e:8d:ba:25:99:5f:e6:
6a:39:10:6d:58:6e:87:91:2f:ca:14:99:d9:e4:e6:04:19:a0:
a1:96:f4:3d:ec:37:aa:58:01:4b:64:72:c7:06:ce:1e:06:cd:
2e:91:78:ca:69:54:d3:37:6c:31:de:94:df:04:d0:27:59:bc:
80:8f:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:07:48 2026 by rpki-client