
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234322e302f32342d3234203d3e203536363535.roa
File: 32332e38382e3234322e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier: 1SDL30q5agwWOdEu5LGi8UFpEFBg1XC3qW+bDcEZDCI=
Subject key identifier: 21:98:8D:81:E5:48:6F:47:D1:98:6F:DE:82:21:11:7C:5A:F0:3F:F7
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 66AC14E1617A6DCE4A2C549CAF4A0CD634AFAB95
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234322e302f32342d3234203d3e203536363535.roa
Signing time: Fri 23 Oct 2026 12:36:59 +0000
ROA not before: Fri 23 Oct 2026 12:31:59 +0000
ROA not after: Fri 22 Oct 2027 12:36:59 +0000
asID: 56655
IP address blocks: 23.88.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 15 Nov 2026 13:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ac:14:e1:61:7a:6d:ce:4a:2c:54:9c:af:4a:0c:d6:34:af:ab:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Oct 23 12:31:59 2026 GMT
Not After : Oct 22 12:36:59 2027 GMT
Subject: CN=21988D81E5486F47D1986FDE8221117C5AF03FF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:dd:8d:9c:3c:b9:16:b2:bb:41:05:c1:ff:8c:
1d:59:dd:eb:3a:73:56:ba:41:92:86:1a:14:f6:ad:
86:71:b5:ea:34:4b:10:a4:5f:e4:d3:b1:19:b6:c9:
c4:07:4c:2e:3b:c6:d4:6c:02:39:3a:72:f7:70:eb:
f8:ad:00:64:64:77:9f:a4:30:aa:6a:3e:b4:7f:0f:
c1:54:2b:51:c2:ad:e9:71:21:c0:57:7d:5c:7f:ce:
4d:3a:70:4a:28:9e:4a:bb:a6:8a:db:b4:45:c8:06:
ba:b9:8b:89:77:24:5c:09:af:ff:f6:0a:f2:5e:5f:
de:d9:45:7b:f1:ba:6a:7b:74:ae:3e:32:f7:fb:c9:
d7:3b:a9:3c:8a:9c:55:51:86:83:6a:97:a2:b3:7d:
3a:78:28:60:f6:2b:82:f9:db:31:a8:fe:30:b7:d0:
6a:fc:51:90:3a:20:21:10:31:8e:60:dd:df:72:86:
7e:a5:89:bb:e6:aa:57:74:27:38:bb:36:a8:8b:1d:
5f:6e:f4:43:40:de:50:e4:7c:06:05:55:c5:37:df:
ec:74:70:76:df:6c:a8:37:6f:42:5c:68:2a:65:9f:
30:ff:40:b7:68:ec:10:a3:81:15:d7:28:48:67:f1:
75:30:c5:47:59:4d:f9:1a:aa:d1:e6:78:a3:f4:00:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:98:8D:81:E5:48:6F:47:D1:98:6F:DE:82:21:11:7C:5A:F0:3F:F7
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234322e302f32342d3234203d3e203536363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.88.242.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:05:be:f6:23:ec:53:8f:d2:50:f7:35:19:37:58:06:0d:71:
b1:aa:7a:15:20:97:fa:c5:3a:09:65:93:c2:e7:ce:1d:9e:a0:
0c:1e:ba:ed:2e:2a:b9:ca:7b:35:4d:d5:04:2d:99:43:82:95:
f7:ae:f1:05:a0:65:94:47:85:73:44:02:c6:0e:d0:fc:8f:c8:
d9:a2:e7:6c:10:d3:15:14:68:f4:23:b2:2a:73:6f:a8:09:d2:
28:36:27:34:ae:4a:e1:f0:62:0c:53:c4:0d:d6:cc:2c:20:c4:
61:84:d2:37:97:d0:d3:5d:22:b9:d2:b5:55:24:af:06:ad:78:
62:a3:da:f4:b7:30:9f:4b:86:52:b8:be:5a:61:50:f5:81:52:
af:ef:3b:10:4b:b5:fa:f4:6d:b1:3f:2f:32:e7:72:3f:9d:0c:
2b:28:ef:b0:05:2a:36:ae:ac:b7:ed:82:a2:6c:67:2f:a0:23:
6e:15:33:9f:a8:85:1b:7c:11:64:6a:fd:63:e7:71:95:db:6d:
5d:a9:75:8c:8d:e8:5f:f3:a6:05:19:87:c8:6d:c7:18:4d:59:
a9:2a:65:c9:25:0f:c1:e8:47:56:5c:07:7c:b7:fc:79:6d:15:
0e:d9:20:56:a9:b0:f2:5e:e9:2f:f2:20:c1:e6:ee:2c:d5:30:
d5:70:0c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:04 2026 by rpki-client