
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20383334.roa
File: 3230382e39312e3138392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: /0zXqdnsPkF93hl1kbmSMlV6We2IJXZrZr64DblHmQs=
Subject key identifier: 12:2F:46:AD:56:55:AF:C7:26:B0:FC:49:1E:C0:E1:3E:32:B2:B7:40
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 2A7BF5F245625366E586A632DADD5CF1370206C0
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20383334.roa
Signing time: Sat 21 Mar 2026 00:01:55 +0000
ROA not before: Fri 20 Mar 2026 23:56:55 +0000
ROA not after: Sat 20 Mar 2027 00:01:55 +0000
asID: 834
IP address blocks: 208.91.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 18:26:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7b:f5:f2:45:62:53:66:e5:86:a6:32:da:dd:5c:f1:37:02:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Mar 20 23:56:55 2026 GMT
Not After : Mar 20 00:01:55 2027 GMT
Subject: CN=122F46AD5655AFC726B0FC491EC0E13E32B2B740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5e:ef:e5:9f:f1:90:fa:ee:49:04:64:83:bd:
b8:e9:35:36:a3:97:e0:b2:d8:98:bc:46:c7:db:2b:
0d:9b:0e:5e:25:50:b7:13:31:41:62:21:13:a2:8a:
b6:07:5e:fb:b1:03:85:43:f5:fc:90:92:c2:c6:95:
0c:4f:37:ea:84:de:87:54:12:50:4a:d3:82:87:28:
f1:a0:19:2d:1a:9c:73:5b:0a:63:b4:b7:40:62:b7:
72:df:cb:e7:99:42:5e:b2:13:52:6c:5f:5e:21:e7:
d6:49:c6:3b:8f:70:b5:bc:a1:9e:69:b8:7e:83:2c:
ed:06:f2:d3:88:e8:61:a9:b2:f7:df:11:86:83:e3:
b0:3e:aa:a3:5c:42:b9:3a:97:d4:c1:bb:cf:fc:99:
01:cf:7f:f4:28:55:ad:be:ab:11:d3:58:de:65:92:
f3:d8:b2:4d:be:3e:16:84:65:d3:22:94:4f:ec:f6:
79:e6:66:c0:fd:89:05:0c:a6:5d:be:19:1b:9d:33:
51:8b:1c:95:eb:22:ca:01:56:07:b3:25:a3:ae:e5:
4d:a5:ff:57:5d:28:0f:f5:cd:87:64:ce:b7:e1:9e:
f6:a8:d2:70:cc:02:13:b4:98:30:56:38:02:4a:e8:
f4:b4:fa:db:e4:7e:8b:1d:5a:22:ee:b4:dd:07:be:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:46:AD:56:55:AF:C7:26:B0:FC:49:1E:C0:E1:3E:32:B2:B7:40
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.189.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ee:8d:48:51:6c:07:1d:36:67:39:8d:35:59:23:d2:4f:6d:
f9:29:1f:bb:cf:08:ae:64:34:21:bf:6a:8c:92:8a:b0:01:9b:
e7:65:23:86:bb:d9:49:17:02:39:44:04:90:88:58:1f:04:96:
91:8e:61:f9:55:9b:e0:72:ad:37:bf:ea:cd:c1:36:b8:37:dc:
69:79:02:6c:7a:fd:4f:6a:9e:d4:44:a3:22:9a:eb:a6:b6:43:
51:35:17:27:b5:76:93:44:00:2e:74:30:60:06:94:fe:38:69:
91:0a:4d:32:fd:97:1d:d6:a9:fe:59:51:d8:13:18:19:93:a8:
8c:2a:e4:b6:02:1a:a1:99:4c:e5:e3:0e:ab:66:65:1c:d8:f4:
1c:f3:67:9e:ba:43:03:6c:3e:c0:d8:9d:e5:31:91:53:9e:01:
49:cd:0f:fc:57:3b:30:9e:de:25:7c:14:fc:18:01:9a:90:42:
c0:ab:a2:81:f2:5e:0b:20:3e:5a:e6:5f:a9:90:b7:14:50:25:
6b:04:55:32:02:d3:7b:44:03:0d:9b:6f:9b:f3:3d:60:5f:e8:
a0:93:96:00:5d:c3:f2:0e:21:37:06:66:eb:6f:0d:88:51:96:
30:f2:b6:41:00:c7:b8:9c:87:77:b0:dc:50:54:3f:38:cd:52:
87:b1:5a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:20 2026 by rpki-client