
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa
File: 3230392e38372e3137322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 3aAXs2BcVa1qDD15ESauwQq4bqnzDQnj5YLSmDFVcvQ=
Subject key identifier: 80:A5:04:98:63:BB:8B:6B:40:FB:30:0D:80:1E:04:47:79:9E:69:86
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 73442CF3DC25B3681129CEC0E1ADF4062237D585
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa
Signing time: Sat 24 Oct 2026 15:32:59 +0000
ROA not before: Sat 24 Oct 2026 15:27:59 +0000
ROA not after: Sat 23 Oct 2027 15:32:59 +0000
asID: 834
IP address blocks: 209.87.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 02:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:44:2c:f3:dc:25:b3:68:11:29:ce:c0:e1:ad:f4:06:22:37:d5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: Oct 24 15:27:59 2026 GMT
Not After : Oct 23 15:32:59 2027 GMT
Subject: CN=80A5049863BB8B6B40FB300D801E0447799E6986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:1d:bc:be:fb:d9:a9:f4:59:bc:68:78:0a:
16:26:b9:d9:42:c7:6c:4e:86:21:42:ac:14:e3:e5:
47:3f:57:2b:c1:15:f8:08:d1:dd:f1:2d:80:9c:a3:
e6:74:0a:3d:30:b1:9c:18:03:1b:aa:6a:50:83:e7:
5b:2c:fa:76:0e:8b:5e:ae:c6:ff:19:c1:03:50:3e:
88:9a:7b:20:cd:88:ea:b8:08:c9:ef:ac:26:c7:36:
ca:0a:8c:30:43:4c:1c:4f:c0:66:64:cc:e9:a5:74:
bd:86:9a:21:2a:c8:8f:ec:87:76:26:fb:aa:fb:3e:
84:48:2f:6e:f1:4e:bd:61:06:a9:6e:02:78:ab:77:
77:40:12:05:17:da:01:26:f9:0d:ef:4d:fc:98:1b:
3d:b3:10:40:61:85:84:07:fb:f3:29:6d:4c:08:3b:
72:dc:95:cc:25:a6:eb:e0:3e:ca:c1:e7:59:0c:d1:
5a:e5:3a:62:37:e8:13:69:a5:09:ee:f6:e0:62:fc:
c0:fe:ff:44:87:55:ba:1d:8b:8e:c4:54:a2:87:05:
81:e7:e2:74:a0:60:6c:f7:d4:40:80:d5:c6:c9:5d:
28:cb:b5:78:e7:73:7c:21:da:17:f5:6b:5c:c5:12:
42:b8:65:7b:a8:fc:65:0c:66:52:91:e0:93:8d:46:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A5:04:98:63:BB:8B:6B:40:FB:30:0D:80:1E:04:47:79:9E:69:86
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.172.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f4:91:b7:f4:92:25:64:b9:35:a6:b5:99:b0:43:8f:fd:70:
5e:26:3d:38:80:f7:6c:0f:a6:5e:48:aa:f9:6f:1b:15:06:3e:
cd:1e:33:62:a0:f6:6e:99:d2:0e:b8:25:72:68:9d:27:c3:ce:
50:eb:29:0a:63:39:9d:f3:b6:19:26:a7:f9:51:08:3d:85:b7:
24:c4:dc:21:e7:47:aa:79:07:04:fe:79:09:5f:6b:fc:ab:11:
79:76:be:f4:2c:52:48:ef:ef:7d:24:e5:06:47:d5:81:25:f7:
9d:84:4c:89:35:f8:91:47:a5:e9:97:0f:df:43:04:25:43:05:
0c:18:ef:3e:22:c7:a3:91:0b:72:08:be:65:17:23:03:a5:a2:
f0:6c:2c:c5:58:77:a6:bd:0e:63:e6:6c:fa:f2:8b:05:e5:fb:
91:ff:39:13:a9:a3:ce:1d:ce:52:42:dd:89:f7:d6:cd:7b:fe:
9b:d7:73:eb:01:ee:63:a6:29:09:ee:8c:0b:61:7d:8f:0f:fc:
15:e4:f6:ad:e1:46:7b:84:fd:7a:1d:cd:a3:20:00:fa:e2:5a:
53:a8:fb:45:09:8a:b2:ae:28:4d:0b:6c:07:4b:96:71:49:55:
6e:60:79:56:6b:f7:bf:c8:91:ba:50:ae:13:de:5a:aa:03:96:
50:9d:f9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:33:54 2026 by rpki-client