
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20383334.roa
File: 3137322e39392e32322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: L+NCEprzyffUuThexKqOCT2oNiMg5nX7Uxn3pN+b2qk=
Subject key identifier: 8E:1D:DE:F9:40:95:29:A9:AB:8C:3B:92:EE:89:84:6E:5B:F0:F3:2C
Certificate issuer: /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial: 79094D42431834F6197D80A7FFA475AB92D111EC
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20383334.roa
Signing time: Thu 30 Apr 2026 15:21:25 +0000
ROA not before: Thu 30 Apr 2026 15:16:25 +0000
ROA not after: Thu 29 Apr 2027 15:21:25 +0000
asID: 834
IP address blocks: 172.99.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 02:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:09:4d:42:43:18:34:f6:19:7d:80:a7:ff:a4:75:ab:92:d1:11:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Validity
Not Before: Apr 30 15:16:25 2026 GMT
Not After : Apr 29 15:21:25 2027 GMT
Subject: CN=8E1DDEF9409529A9AB8C3B92EE89846E5BF0F32C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:b8:00:2c:6d:c3:8e:31:79:df:69:89:3e:
71:11:ac:61:4f:40:30:27:b2:e7:30:c8:18:49:6b:
3a:7e:e7:ca:b3:20:d6:f4:32:06:1c:ec:d7:34:cc:
9d:d8:b4:8a:0b:dc:08:1f:8b:7b:a6:4b:4f:84:51:
54:f3:5d:f9:69:03:d4:c8:90:c1:1e:1d:54:a6:ef:
a3:58:4c:51:3e:a0:ea:f4:21:2e:7a:5f:8e:04:8f:
61:59:08:b2:37:39:b8:cd:6d:68:4d:0a:de:c2:34:
c3:9f:b4:c7:fe:15:50:c3:ab:e9:c8:a8:43:e6:fe:
bb:79:3e:01:cd:07:79:76:0a:1e:e5:5d:7a:df:41:
4b:7a:53:2f:37:21:fc:0d:6d:11:da:31:5a:02:92:
51:f2:82:ad:99:9e:ad:4f:2b:79:30:be:e2:03:5f:
25:eb:99:2f:19:b4:60:d3:c5:62:d6:39:0d:72:48:
95:3f:ea:15:d1:ff:3d:d5:74:b1:0e:01:48:76:cf:
ff:d5:db:09:3e:b7:8f:94:f3:74:62:9e:5f:1e:32:
88:25:30:d8:67:0a:7b:a7:52:82:72:0b:56:b6:d6:
6f:4a:e0:2c:4f:44:8c:ce:b9:2f:60:fe:dc:83:73:
ca:37:21:36:a3:29:48:eb:7d:e0:31:9b:44:cd:e1:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1D:DE:F9:40:95:29:A9:AB:8C:3B:92:EE:89:84:6E:5B:F0:F3:2C
X509v3 Authority Key Identifier:
keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.99.22.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d3:c3:13:ce:9f:02:44:45:8c:69:9b:ca:bb:36:e6:f3:28:
64:bc:43:4c:26:5b:9c:27:5b:c7:60:ef:24:2d:21:3b:79:6a:
21:ab:4d:15:f2:ce:a4:ec:0a:6e:6a:c7:d4:2c:d1:99:a9:1a:
7d:6f:60:bf:67:d2:3f:73:09:55:f7:54:8c:ea:7b:22:57:b6:
53:ca:6d:7e:8e:54:78:2f:20:19:10:f7:43:b4:b4:b0:11:ca:
23:b9:30:e6:e6:c4:22:96:5c:7d:e8:7d:0b:4a:45:a6:9e:8a:
5e:08:1f:2b:38:84:a6:5e:a6:43:d7:4d:c6:a6:ea:92:f0:ae:
7b:9f:68:b1:2f:ed:cd:20:ef:9f:4a:73:76:50:1a:bb:0f:c4:
00:c1:da:b6:18:5c:f3:26:cc:45:bf:44:cb:51:fc:30:a4:dd:
11:be:8f:20:03:28:ff:df:77:d4:81:19:59:e5:3e:40:8d:55:
f4:df:e6:96:c4:db:7c:28:39:f7:2e:68:34:4b:30:76:fa:7a:
98:3b:9b:fc:53:f0:61:d9:0f:b1:88:05:10:c6:9d:9a:f6:85:
7c:61:a8:37:ac:a4:34:de:89:45:2e:d9:73:1c:27:d1:3f:21:
27:25:f1:67:f5:62:18:fe:2e:9f:33:f7:49:12:0a:5b:b3:e0:
f9:9b:8d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:30:02 2026 by rpki-client