
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32322d3234203d3e203631333137.roa
File: 38392e3230372e3137362e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier: BTsL0cq1Zz7zZ5ViOdfsXUhusa8ibKdBJKgJt6tLN0I=
Subject key identifier: 45:35:7E:9C:D5:66:F5:03:4D:CA:A1:42:86:36:F7:8A:96:92:DF:DA
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 372974133D0EB50C59AFED0C3B6626BE294E8C89
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32322d3234203d3e203631333137.roa
Signing time: Mon 24 Aug 2026 16:36:20 +0000
ROA not before: Mon 24 Aug 2026 16:31:20 +0000
ROA not after: Mon 23 Aug 2027 16:36:20 +0000
asID: 61317
IP address blocks: 89.207.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 13:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:29:74:13:3d:0e:b5:0c:59:af:ed:0c:3b:66:26:be:29:4e:8c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Aug 24 16:31:20 2026 GMT
Not After : Aug 23 16:36:20 2027 GMT
Subject: CN=45357E9CD566F5034DCAA1428636F78A9692DFDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:8f:41:cd:cc:82:cf:d3:56:a9:9f:84:dc:
3d:61:33:bb:c4:ec:f9:11:a6:29:f8:56:23:5d:65:
b5:47:0e:70:9b:a9:ca:76:c4:e2:18:36:ac:c9:61:
08:44:6b:3a:22:04:18:78:50:6d:b2:7d:f5:cc:db:
b2:ba:ae:76:68:48:94:15:6d:77:ea:39:92:f9:e7:
40:eb:0e:4a:8b:a4:a9:ef:f3:85:6b:26:ea:13:1b:
6c:ed:40:5b:4b:e7:e8:72:8f:42:87:6d:fb:4a:ee:
89:cf:96:c6:d8:b8:e5:21:9f:73:8b:36:a5:1c:f4:
f2:c5:05:30:c8:19:15:a1:2c:7b:e1:7f:2b:e8:73:
38:c4:58:b0:59:2f:70:38:81:f6:e5:3a:f1:ae:d6:
37:5c:08:f6:97:db:30:25:0b:5f:e0:87:9c:5b:22:
f1:29:47:68:9c:23:25:38:ec:a8:23:61:fb:47:d8:
92:dd:b3:37:f1:b8:6f:7e:3c:6a:89:27:b8:cb:61:
b2:93:fa:9f:6c:3e:4c:13:ac:46:43:7e:c0:ac:f6:
30:5b:4a:29:59:cc:8b:9e:53:c6:97:e2:b3:08:e5:
7e:36:27:5b:b5:d8:f4:b0:ea:20:6b:41:0d:8e:98:
61:11:16:4f:b9:ad:92:e4:b7:95:91:ad:d7:30:bf:
0b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:35:7E:9C:D5:66:F5:03:4D:CA:A1:42:86:36:F7:8A:96:92:DF:DA
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32322d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:7b:dd:1a:7c:c9:02:5f:28:96:16:27:bc:33:cd:e9:88:ca:
f7:57:64:9c:36:3f:59:49:93:7b:79:46:bc:bc:0c:0f:08:97:
04:e8:3e:93:1b:f6:a4:a4:22:f7:df:80:1b:8f:b5:09:af:d9:
26:4b:8c:c8:cf:3b:af:05:5b:7b:69:57:77:88:c2:1a:ec:9d:
a4:35:31:3c:e9:43:46:37:af:0a:fb:47:e5:90:f0:da:30:67:
69:06:ec:d1:52:5a:c7:ba:18:7d:ab:34:2c:0e:e1:b6:84:44:
b9:a6:80:6b:b0:f2:11:b8:15:4d:43:7d:87:48:0f:3c:a3:80:
d3:7a:88:45:4d:a7:31:bf:25:b9:7e:3a:9c:41:47:eb:a5:0b:
df:c3:ad:7b:23:c9:50:5a:3f:01:7d:80:6d:a4:3f:41:f1:ce:
f6:6c:16:78:40:e4:43:ef:e7:cc:00:92:49:2a:f0:46:7a:3d:
a1:33:f0:c5:3f:e0:2a:82:43:53:7a:7a:23:9f:74:6e:c4:d6:
16:0e:a0:40:b6:84:1a:46:47:2c:87:9e:6a:c7:eb:ff:38:b4:
fc:b3:a3:20:97:ce:27:c2:11:1a:90:11:98:97:f1:2c:35:98:
3c:49:9e:da:dc:6a:0f:84:ac:3b:0c:93:ed:51:23:19:f5:00:
13:ca:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:38:05 2026 by rpki-client