
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20343031353538.roa
File: 3137322e39392e32322e302f32342d3234203d3e20343031353538.roa (raw, json)
Hash identifier: qWuqIWyz0eaWcniEj9DHItnydWGQ8L08bua0pmutH1k=
Subject key identifier: 13:1E:EA:67:CD:A0:94:73:EF:15:15:07:2A:1E:C9:C5:A0:A3:D3:5B
Certificate issuer: /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial: 70909AB598A139D610F68707CB983983E3ED45E7
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20343031353538.roa
Signing time: Sun 02 Nov 2025 23:35:02 +0000
ROA not before: Sun 02 Nov 2025 23:30:02 +0000
ROA not after: Sun 01 Nov 2026 23:35:02 +0000
asID: 401558
IP address blocks: 172.99.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 12:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:90:9a:b5:98:a1:39:d6:10:f6:87:07:cb:98:39:83:e3:ed:45:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Validity
Not Before: Nov 2 23:30:02 2025 GMT
Not After : Nov 1 23:35:02 2026 GMT
Subject: CN=131EEA67CDA09473EF1515072A1EC9C5A0A3D35B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:c5:ac:45:24:6b:15:e2:e9:8e:28:bc:2e:
29:d5:36:5a:3d:d5:4a:da:bb:fa:09:02:97:f3:0f:
cd:66:9e:4e:77:5b:b4:6c:5a:7b:6d:52:08:b2:ff:
97:33:0a:f1:ef:97:e2:ed:4d:47:eb:78:6a:94:10:
4c:6d:e7:8e:b3:0c:67:54:08:d4:4f:13:a3:3f:3c:
83:06:71:b2:d4:ea:89:f5:05:29:4e:e5:5f:37:ee:
c8:92:bd:b3:d3:4e:8a:f6:cd:8b:1c:ba:aa:91:0b:
71:c8:f9:a1:f2:82:6f:5d:8f:68:4d:27:2d:c5:29:
4c:63:5e:bb:02:a8:f7:5e:40:c5:79:3f:d3:8a:9f:
b4:0f:8e:c8:26:07:6d:66:29:d8:e0:fa:3c:6d:ab:
f6:ad:59:ca:9f:9a:dc:da:d9:20:c0:d9:b5:b6:2b:
2c:30:d4:01:16:d0:5a:c5:8f:dc:97:03:58:2b:1e:
05:8e:18:d3:89:e4:d1:06:12:ec:18:fc:c9:9e:2e:
65:b9:6a:19:40:15:83:f7:35:b5:2c:87:d3:af:8e:
ce:8c:f1:04:5c:34:e6:79:99:57:cc:fb:fa:b0:e9:
4e:22:88:5c:53:db:95:dc:e4:12:35:ee:80:86:14:
3a:6b:53:00:2f:f9:07:f8:f4:a6:98:0e:19:33:b7:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1E:EA:67:CD:A0:94:73:EF:15:15:07:2A:1E:C9:C5:A0:A3:D3:5B
X509v3 Authority Key Identifier:
keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20343031353538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.99.22.0/24
Signature Algorithm: sha256WithRSAEncryption
07:3a:c8:ad:f5:b4:a6:1e:a6:9e:22:9b:01:cd:0e:0c:df:34:
38:0d:ed:32:1b:4b:23:fc:de:8a:97:cf:32:32:a2:28:3a:b2:
36:9a:58:d0:64:62:ab:58:2d:79:98:ba:4e:1e:89:b8:0d:ba:
3e:df:eb:57:03:aa:3a:03:55:26:3b:9b:70:91:bf:4f:f2:0f:
b3:40:8b:51:c0:2c:65:8f:e5:c3:28:c2:18:e5:92:1b:a6:d2:
04:83:a3:27:0f:49:22:65:4f:2f:1b:48:55:de:61:a0:67:f7:
a3:89:f7:66:fa:1f:f1:7e:41:f6:ad:38:54:9d:7a:4a:2c:4f:
b3:40:c4:68:4d:d3:5b:7a:7a:1a:ae:70:5c:77:5b:0b:24:ed:
eb:30:f1:20:48:88:1b:14:84:ec:f6:bb:96:c4:d7:08:7c:ea:
55:cb:34:33:13:c8:84:b3:4e:ab:e4:da:ac:62:9c:c9:41:4f:
22:15:9e:69:4f:c8:ef:5a:b2:a9:8b:df:da:27:31:23:ff:b9:
05:13:6d:4e:65:ea:fe:b6:e3:74:ff:09:57:1e:5d:a3:1f:7d:
a7:45:f4:c5:59:40:d4:26:b2:33:97:00:f7:73:7d:2f:aa:28:
09:cd:3e:eb:9f:ec:eb:00:85:6b:d0:cc:85:2c:04:1b:53:94:
2b:18:93:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:06:38 2025 by rpki-client