
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234392e302f32342d3234203d3e20313532363036.roa
File: 32332e38382e3234392e302f32342d3234203d3e20313532363036.roa (raw, json)
Hash identifier: BTgOK9f2PYF1SVwRsx1WKuIsgCEnrMtob3mSG9jSUBY=
Subject key identifier: AA:12:90:B6:BA:4D:6F:32:39:AF:FC:A2:93:14:3B:C6:68:44:EF:A4
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 377E00A8B98035702F56269161D050D3CDDD2D91
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234392e302f32342d3234203d3e20313532363036.roa
Signing time: Sat 31 Oct 2026 17:27:53 +0000
ROA not before: Sat 31 Oct 2026 17:22:53 +0000
ROA not after: Sat 30 Oct 2027 17:27:53 +0000
asID: 152606
IP address blocks: 23.88.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 09:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:7e:00:a8:b9:80:35:70:2f:56:26:91:61:d0:50:d3:cd:dd:2d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Oct 31 17:22:53 2026 GMT
Not After : Oct 30 17:27:53 2027 GMT
Subject: CN=AA1290B6BA4D6F3239AFFCA293143BC66844EFA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:00:1a:e8:60:e3:4b:3d:71:ff:5d:27:c3:
2c:b6:53:ce:c7:e0:64:1c:e7:d2:b2:56:4a:1c:92:
d3:70:85:41:e2:c3:29:1b:35:87:15:72:51:0c:15:
79:95:ed:f0:20:82:80:d8:c9:e5:58:1a:3c:f4:7f:
cf:49:46:ef:77:8a:6c:70:a2:f1:16:c0:67:3b:f7:
61:19:c0:f0:2f:1b:84:e7:8e:2d:07:0a:e9:20:4e:
b4:89:b9:e3:66:2c:7f:7b:35:f6:9b:ea:26:48:db:
c7:e6:23:86:19:50:7f:4c:56:6a:09:c9:38:11:5d:
62:13:d0:38:2b:8c:7e:c1:49:b7:ef:5f:fa:e4:a1:
43:8c:0e:89:78:a1:69:ee:1b:20:e0:47:9e:b5:9c:
05:75:e6:e0:54:e4:28:af:1d:b6:e8:cb:07:18:a9:
8c:82:33:43:ce:a8:25:0a:f8:5e:c3:be:5c:2d:79:
74:a7:cb:40:c3:c5:3a:29:a7:91:e3:89:be:a9:c0:
85:66:6c:c3:7c:b1:a9:20:77:99:4e:a0:83:2c:df:
b5:b7:c6:fd:e1:21:51:04:d8:32:e3:a3:3c:16:d7:
b7:06:78:06:4c:81:d6:7b:fa:de:83:12:94:8b:03:
cd:76:2e:b5:65:a9:43:00:0d:1c:83:e1:64:46:2a:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:12:90:B6:BA:4D:6F:32:39:AF:FC:A2:93:14:3B:C6:68:44:EF:A4
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234392e302f32342d3234203d3e20313532363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.88.249.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ef:f5:98:e5:8f:55:e5:70:9f:e2:0c:31:89:1b:db:88:b1:
8b:60:9f:64:e8:0a:a6:0e:59:c7:54:f0:a0:72:44:fe:a7:f1:
66:f3:21:6a:37:55:90:3d:84:90:7e:46:77:30:16:32:94:60:
6a:54:5a:66:e5:bc:3d:18:44:2a:12:84:aa:2a:8b:89:c4:13:
c9:f4:d5:9b:ae:93:73:ee:ff:c3:c0:06:1d:a9:52:3c:04:65:
0f:ce:a6:e3:e2:70:c6:60:25:bb:64:44:88:a3:19:dd:6e:12:
85:da:77:2c:64:3c:3e:41:96:c0:60:c8:c8:76:a6:d3:4f:2d:
a0:a7:bd:3d:8e:60:f6:a8:a6:b3:5a:dc:71:11:ed:3d:3f:a1:
39:b8:8d:5b:cf:1b:c1:24:8c:12:79:75:1e:8a:2b:fc:1e:db:
70:5f:11:75:0b:70:3a:12:d3:1a:2d:91:86:48:33:76:ac:75:
26:30:4b:de:a7:e9:1c:16:11:ed:da:07:84:e4:61:ba:ae:11:
ed:ce:22:62:05:b3:08:51:f9:c1:73:74:7c:1e:10:47:d9:7c:
53:09:25:1a:bc:d7:aa:66:47:33:50:7d:2f:17:a5:3a:f1:47:
27:8e:cc:6b:13:60:ee:16:21:61:38:97:9d:c3:11:d1:02:4a:
c0:e7:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:12:18 2026 by rpki-client