
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20323034393636.roa
File: 3137322e39392e32322e302f32342d3234203d3e20323034393636.roa (raw, json)
Hash identifier: KKzZDVD8HRhl+Vynhw+TMAvR1o0cpGqJIVI7lYrQflw=
Subject key identifier: 09:61:29:B3:36:40:14:05:AD:14:D9:EE:89:7A:A9:E9:7D:9E:16:17
Certificate issuer: /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial: 1C277D56BCC237D605216327E29B67B949C25C3C
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20323034393636.roa
Signing time: Tue 08 Sep 2026 20:20:55 +0000
ROA not before: Tue 08 Sep 2026 20:15:55 +0000
ROA not after: Tue 07 Sep 2027 20:20:55 +0000
asID: 204966
IP address blocks: 172.99.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 03:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:27:7d:56:bc:c2:37:d6:05:21:63:27:e2:9b:67:b9:49:c2:5c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Validity
Not Before: Sep 8 20:15:55 2026 GMT
Not After : Sep 7 20:20:55 2027 GMT
Subject: CN=096129B336401405AD14D9EE897AA9E97D9E1617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:28:92:de:68:05:3c:93:9d:5a:30:fb:4f:
dd:ea:60:02:9e:3b:c4:40:37:6e:3b:08:5a:59:96:
cd:b2:f7:53:b8:6c:8d:75:81:be:3d:4b:b1:eb:4e:
8e:d6:6f:95:ce:be:3f:15:43:9f:ce:25:c8:e8:ad:
24:ad:99:9f:f0:79:e7:bb:3f:cb:78:2f:ea:65:6f:
04:f1:15:2d:b6:40:9f:f7:6c:17:ad:7f:47:33:59:
22:4a:2d:f3:a2:83:2e:7f:bf:da:af:33:ec:63:26:
de:b2:83:ca:25:f1:8e:f3:e7:b8:8d:50:a3:be:70:
d7:7d:4c:34:6c:89:20:d0:49:96:aa:6c:12:4b:85:
36:b8:9f:9c:7e:79:77:ff:24:db:07:24:cf:4f:1c:
3b:54:51:ff:5b:1b:42:25:9b:c5:0f:91:50:e1:40:
92:64:79:48:c6:51:96:5d:40:d9:ed:ab:54:0d:10:
9f:81:5f:aa:b0:a4:84:39:70:d6:43:c4:b2:fc:94:
e7:86:35:5f:f1:eb:48:97:48:7f:7a:e1:26:7b:41:
2c:4b:ba:15:03:c8:4f:f3:22:55:50:6c:8c:a2:aa:
77:37:6e:7e:57:66:35:c9:15:45:87:54:d9:db:3f:
e0:45:cf:1c:e4:df:6e:dd:c0:e6:90:1a:99:73:e1:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:61:29:B3:36:40:14:05:AD:14:D9:EE:89:7A:A9:E9:7D:9E:16:17
X509v3 Authority Key Identifier:
keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20323034393636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.99.22.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:98:1e:05:5e:01:71:64:f4:3a:a0:7c:6f:9f:f7:6f:6e:56:
e7:28:2e:f3:f0:3c:91:e8:d9:62:ea:17:5b:2e:99:1f:89:4f:
6a:cb:d5:d3:3f:52:12:83:12:c5:a7:99:94:c7:91:26:36:74:
e2:9b:54:78:df:ff:1c:ef:bf:68:1f:8b:a1:18:c2:96:07:79:
e1:2f:ea:43:16:90:a3:ac:76:18:bb:d9:e1:3b:cc:6c:c0:b4:
17:52:ed:a9:72:81:3e:62:4e:9a:52:38:e5:f6:48:04:02:aa:
33:11:9f:b9:08:1a:f3:97:e8:54:fe:05:d3:82:4b:0a:aa:e5:
0c:bc:43:a5:a3:d7:95:53:20:b7:12:1d:2f:9b:9e:0e:77:68:
33:df:e0:a3:21:eb:2a:44:f1:cb:8e:08:5e:75:6d:e7:d9:01:
5c:2d:de:90:eb:b3:b4:00:87:a7:85:c4:ee:00:f4:62:46:c2:
f9:e5:a9:94:46:e8:9e:97:c8:31:dc:37:c5:ef:53:d3:7c:fe:
6d:8b:d7:77:19:12:d0:e9:6c:ec:b5:c8:84:8a:ae:e1:bf:77:
3f:2b:91:64:a4:cb:89:8e:25:fb:18:88:91:bb:85:58:04:13:
01:ff:8b:7d:d9:d6:76:24:ff:03:1b:be:8a:8f:b5:07:e6:87:
a3:a9:a2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:10 2026 by rpki-client