
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32332d3234203d3e20383334.roa
File: 38392e3230372e3137362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: wDf08dn8/tPrYwn8L/yvs5MK2Vp13tmduGEedn3HDO8=
Subject key identifier: 53:A2:BC:44:1E:BA:84:36:5B:D0:20:58:FD:97:AE:D9:AF:19:2B:24
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 5C8DDC0F7514871022033A5C2B5647DCAE3D711B
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32332d3234203d3e20383334.roa
Signing time: Sun 26 Apr 2026 09:57:42 +0000
ROA not before: Sun 26 Apr 2026 09:52:42 +0000
ROA not after: Sun 25 Apr 2027 09:57:42 +0000
asID: 834
IP address blocks: 89.207.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 07:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:8d:dc:0f:75:14:87:10:22:03:3a:5c:2b:56:47:dc:ae:3d:71:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Apr 26 09:52:42 2026 GMT
Not After : Apr 25 09:57:42 2027 GMT
Subject: CN=53A2BC441EBA84365BD02058FD97AED9AF192B24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:79:11:82:9e:fe:cd:85:97:d2:5d:7d:e5:
04:91:1c:d9:9d:56:32:4c:4c:f3:33:42:b8:c2:c0:
f3:44:05:92:bf:47:aa:8c:0e:0d:c7:b2:ad:2c:d6:
f1:3d:19:96:f8:68:63:6c:b2:47:a8:ec:3f:74:b4:
26:fb:a3:58:9d:6d:0a:56:e1:43:07:05:cd:be:2b:
4c:64:68:b9:e6:33:6f:a9:69:4b:f0:c4:8d:bd:37:
83:79:c8:b7:90:65:2a:d1:75:2c:29:57:45:a2:87:
ff:53:a9:0e:a9:b1:1e:66:70:96:29:c3:72:5d:9b:
2d:2b:7e:9f:b7:31:d0:d1:b9:c3:a6:8d:18:82:d6:
d6:dd:58:49:36:15:06:91:b5:a5:56:0b:71:ac:2b:
47:d7:43:4a:69:d6:77:3b:67:33:60:25:07:cb:c5:
4d:8f:ac:9f:f8:d2:9d:7d:67:4c:6b:58:77:e4:95:
9d:cc:49:b8:7b:d1:e6:98:51:eb:f1:7a:f3:70:1d:
65:25:5c:bf:bb:88:2c:0d:1d:dd:80:0b:44:81:36:
91:89:f1:df:00:21:66:6d:3e:96:78:2f:8a:38:96:
65:34:80:96:f0:51:16:da:58:f5:ca:a5:e4:70:00:
9b:3e:e6:92:2d:0c:f7:77:60:bc:d5:27:6e:fc:d8:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A2:BC:44:1E:BA:84:36:5B:D0:20:58:FD:97:AE:D9:AF:19:2B:24
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.176.0/23
Signature Algorithm: sha256WithRSAEncryption
73:da:70:50:cd:d9:05:4e:82:cc:a9:ff:2d:e9:20:bb:44:ff:
13:a0:d0:2b:91:6a:b9:42:4e:28:75:fe:15:b1:fe:1f:bb:c6:
8d:58:71:1b:e4:db:62:d8:5c:69:ae:bd:32:aa:9d:a7:a1:4b:
b6:58:14:2f:22:15:d1:47:cb:c2:fc:fa:20:0c:b3:8d:2f:9c:
7f:0f:c1:57:96:6b:36:18:8a:44:e0:bb:eb:57:a2:ac:c9:73:
78:e3:98:a4:f3:4d:e8:58:dc:99:e2:c1:0d:37:3e:27:14:b8:
d4:f5:20:e0:a0:08:99:92:8c:78:3b:a7:ef:49:2e:2f:db:4f:
e3:d7:d6:1a:f5:14:e7:e6:30:a4:b9:62:12:9d:03:53:f8:d7:
c8:81:01:87:de:bd:e1:a4:68:ab:3f:50:a0:24:2c:2f:b5:e6:
c2:60:21:7a:b2:82:42:bc:cb:64:cf:7a:22:8f:38:92:1f:a2:
f2:bf:d6:22:f0:44:a7:31:e8:85:24:f0:2d:a6:a4:47:85:e0:
c2:89:f7:7c:56:d3:53:07:33:96:c7:a7:04:e3:b1:14:b4:ef:
c0:e7:ff:6b:da:b6:3d:c9:8f:84:35:d4:69:cf:02:83:bf:c0:
eb:d0:8d:8d:c4:a0:32:82:b0:6f:89:6c:9f:d8:b9:a9:c3:b8:
5a:f4:7f:4a
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUXI3cD3UUhxAiAzpcK1ZH3K49cRswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwNDI2MDk1MjQyWhcNMjcwNDI1MDk1NzQy
WjAzMTEwLwYDVQQDEyg1M0EyQkM0NDFFQkE4NDM2NUJEMDIwNThGRDk3QUVEOUFG
MTkyQjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/l5EYKe/s2F
l9JdfeUEkRzZnVYyTEzzM0K4wsDzRAWSv0eqjA4Nx7KtLNbxPRmW+GhjbLJHqOw/
dLQm+6NYnW0KVuFDBwXNvitMZGi55jNvqWlL8MSNvTeDeci3kGUq0XUsKVdFoof/
U6kOqbEeZnCWKcNyXZstK36ftzHQ0bnDpo0YgtbW3VhJNhUGkbWlVgtxrCtH10NK
adZ3O2czYCUHy8VNj6yf+NKdfWdMa1h35JWdzEm4e9HmmFHr8XrzcB1lJVy/u4gs
DR3dgAtEgTaRifHfACFmbT6WeC+KOJZlNICW8FEW2lj1yqXkcACbPuaSLQz3d2C8
1Sdu/Ng/FQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFOivEQeuoQ2W9AgWP2Xrtmv
GSskMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNk
MzdkYWM3MmYxLzEvMzgzOTJlMzIzMDM3MmUzMTM3MzYyZTMwMmYzMjMzMmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFZz7AwDQYJKoZIhvcNAQELBQADggEB
AHPacFDN2QVOgsyp/y3pILtE/xOg0CuRarlCTih1/hWx/h+7xo1YcRvk22LYXGmu
vTKqnaehS7ZYFC8iFdFHy8L8+iAMs40vnH8PwVeWazYYikTgu+tXoqzJc3jjmKTz
TehY3JniwQ03PicUuNT1IOCgCJmSjHg7p+9JLi/bT+PX1hr1FOfmMKS5YhKdA1P4
18iBAYfeveGkaKs/UKAkLC+15sJgIXqygkK8y2TPeiKPOJIfovK/1iLwRKcx6IUk
8C2mpEeF4MKJ93xW01MHM5bHpwTjsRS078Dn/2vatj3Jj4Q11GnPAoO/wOvQjY3E
oDKCsG+JbJ/YuanDuFr0f0o=
-----END CERTIFICATE-----
Generated at Wed May 13 01:13:54 2026 by rpki-client