
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa
File: 3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa (raw, json)
Hash identifier: DJ9gxRqui2Ex2T2dlx/a6JkETfh9e/NFkKydViYakIM=
Subject key identifier: 95:20:6E:1D:27:4F:86:52:11:B2:3C:01:98:56:27:5C:49:0D:D3:AF
Certificate issuer: /CN=904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79
Certificate serial: 55CFEB0CC57BB984A469F18DD2B9A952C61705CF
Authority key identifier: 75:30:F0:69:80:0B:DF:ED:65:48:7B:49:D2:4C:07:D7:DD:ED:9E:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa
Signing time: Mon 13 Jul 2026 17:36:09 +0000
ROA not before: Mon 13 Jul 2026 17:31:09 +0000
ROA not after: Mon 12 Jul 2027 17:36:09 +0000
asID: 211373
IP address blocks: 205.233.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.crl
rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 16:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:cf:eb:0c:c5:7b:b9:84:a4:69:f1:8d:d2:b9:a9:52:c6:17:05:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79
Validity
Not Before: Jul 13 17:31:09 2026 GMT
Not After : Jul 12 17:36:09 2027 GMT
Subject: CN=95206E1D274F865211B23C019856275C490DD3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:01:8d:78:1d:64:a4:89:51:4a:28:9c:ba:79:
f4:50:53:b4:6d:dc:b2:35:bb:77:88:7d:48:b1:38:
9d:c2:f7:da:1c:27:a2:87:6e:43:eb:b3:6d:27:0a:
ae:00:b0:d0:40:e2:9e:3d:cd:65:19:1b:00:81:b0:
85:69:8f:e9:87:d4:7f:de:f7:d4:0b:6e:59:da:fa:
5e:f4:50:8b:e2:14:68:8b:92:7b:86:29:be:9f:13:
e7:51:35:54:93:98:27:c5:71:e4:5d:ab:76:62:3c:
f0:26:31:87:27:86:de:47:ac:ee:e1:33:3f:33:c5:
2e:e6:00:5c:48:56:4c:60:02:ed:a4:26:ad:d3:47:
bb:0e:e6:ac:96:7a:e8:b7:36:7b:59:84:49:ae:92:
3c:ed:ab:3e:08:f3:17:0a:34:c3:fe:42:90:80:27:
8f:60:b7:6e:d2:16:6d:a7:aa:01:1f:b9:6e:29:2e:
74:c7:45:0a:1c:d7:63:99:34:74:d2:fc:a6:2e:94:
13:2e:70:da:d3:08:67:b1:04:e4:7d:11:4b:4e:1e:
3f:c0:ff:46:89:95:a9:34:07:28:3b:4f:49:e3:bd:
43:4d:2f:2c:64:7e:03:2f:c5:8d:10:5f:8c:30:2e:
ad:25:5e:ad:40:e9:bf:b7:b6:d3:4e:f3:66:20:21:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:20:6E:1D:27:4F:86:52:11:B2:3C:01:98:56:27:5C:49:0D:D3:AF
X509v3 Authority Key Identifier:
keyid:75:30:F0:69:80:0B:DF:ED:65:48:7B:49:D2:4C:07:D7:DD:ED:9E:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.233.201.0/24
Signature Algorithm: sha256WithRSAEncryption
94:cc:f6:17:8a:68:b7:aa:9a:f7:33:7d:98:40:fd:c1:b8:f9:
1a:f4:c0:ef:fa:9b:12:7f:80:3b:1f:1c:9a:4e:0d:2e:3a:df:
74:d2:12:a0:7f:d1:a9:59:2c:8c:03:91:36:2d:29:6b:08:ba:
6f:30:f9:32:43:49:90:4e:d4:24:2c:2f:77:75:78:af:f6:84:
32:49:18:72:b7:02:0f:88:8e:b0:ca:7d:ae:75:d2:32:aa:a2:
cd:15:aa:32:36:d1:39:17:d5:02:79:b5:58:8f:ac:65:81:dc:
44:03:a9:14:4c:5f:e5:a1:ae:4c:10:b7:7a:cc:a8:ed:3e:84:
e6:51:c0:d4:41:53:07:f1:66:92:86:c0:b2:f0:4f:37:1d:2a:
5f:12:94:2f:e8:72:01:0d:da:6c:9e:dc:41:57:3e:8c:7a:23:
a8:2d:a1:22:e1:4a:b5:1f:c9:eb:45:5e:d8:67:53:83:a8:38:
2a:1b:a1:d2:3e:69:b0:e3:b5:18:0b:3a:dd:b3:98:4e:dd:40:
e6:31:2b:ab:12:0f:b4:a9:8e:5c:38:a9:9a:04:4b:0c:d5:39:
94:da:35:8e:14:23:f5:49:b4:3c:0f:b7:c1:0a:76:ce:62:fc:
7e:71:8b:3c:d2:29:9c:f2:e9:b8:94:92:de:66:28:e8:b5:18:
2b:c0:55:12
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUVc/rDMV7uYSkafGN0rmpUsYXBc8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTA0ZDQ4OWEyZGJkMjc1NTNhMTY0OTI1Y2JiZGE1YjU1
MTkxNGM1Nzk3YjRiZGNmNzkwHhcNMjYwNzEzMTczMTA5WhcNMjcwNzEyMTczNjA5
WjAzMTEwLwYDVQQDEyg5NTIwNkUxRDI3NEY4NjUyMTFCMjNDMDE5ODU2Mjc1QzQ5
MEREM0FGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wGNeB1kpIlR
Siicunn0UFO0bdyyNbt3iH1IsTidwvfaHCeih25D67NtJwquALDQQOKePc1lGRsA
gbCFaY/ph9R/3vfUC25Z2vpe9FCL4hRoi5J7him+nxPnUTVUk5gnxXHkXat2Yjzw
JjGHJ4beR6zu4TM/M8Uu5gBcSFZMYALtpCat00e7DuaslnrotzZ7WYRJrpI87as+
CPMXCjTD/kKQgCePYLdu0hZtp6oBH7luKS50x0UKHNdjmTR00vymLpQTLnDa0whn
sQTkfRFLTh4/wP9GiZWpNAcoO09J471DTS8sZH4DL8WNEF+MMC6tJV6tQOm/t7bT
TvNmICHv1QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFJUgbh0nT4ZSEbI8AZhWJ1xJ
DdOvMB8GA1UdIwQYMBaAFHUw8GmAC9/tZUh7SdJMB9fd7Z5WMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGIxNTA3OGQwMThiMTUyOWRhMDIwMDRhLzAv
NzUzMEYwNjk4MDBCREZFRDY1NDg3QjQ5RDI0QzA3RDdEREVEOUU1Ni5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzZmNWYyM2FkLWJhOTItNDM0Mi05YzVmLTc2NDUzMTFhOTU4OS85MDRk
NDg5YTJkYmQyNzU1M2ExNjQ5MjVjYmJkYTViNTUxOTE0YzU3OTdiNGJkY2Y3OS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiMTUwNzhkMDE4YjE1
MjlkYTAyMDA0YS8wLzMyMzAzNTJlMzIzMzMzMmUzMjMwMzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzEzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADN6ckwDQYJKoZIhvcN
AQELBQADggEBAJTM9heKaLeqmvczfZhA/cG4+Rr0wO/6mxJ/gDsfHJpODS4633TS
EqB/0alZLIwDkTYtKWsIum8w+TJDSZBO1CQsL3d1eK/2hDJJGHK3Ag+IjrDKfa51
0jKqos0VqjI20TkX1QJ5tViPrGWB3EQDqRRMX+WhrkwQt3rMqO0+hOZRwNRBUwfx
ZpKGwLLwTzcdKl8SlC/ocgEN2mye3EFXPox6I6gtoSLhSrUfyetFXthnU4OoOCob
odI+abDjtRgLOt2zmE7dQOYxK6sSD7Spjlw4qZoESwzVOZTaNY4UI/VJtDwPt8EK
ds5i/H5xizzSKZzy6biUkt5mKOi1GCvAVRI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:05 2026 by rpki-client