
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37332e302f32342d3234203d3e203332373830.roa
File: 3230342e31342e37332e302f32342d3234203d3e203332373830.roa (raw, json)
Hash identifier: qEkjTjZU5kNgH0yb7Ir2ipVQn/5LDjmOqx34z6JzrQc=
Subject key identifier: C7:C0:EC:1D:17:76:CB:2C:2F:6E:ED:F6:C5:CF:11:E6:36:58:15:65
Certificate issuer: /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial: 5A9311BC34C97460BF138575D44E5628B534E5EA
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37332e302f32342d3234203d3e203332373830.roa
Signing time: Thu 13 Aug 2026 08:36:20 +0000
ROA not before: Thu 13 Aug 2026 08:31:20 +0000
ROA not after: Thu 12 Aug 2027 08:36:20 +0000
asID: 32780
IP address blocks: 204.14.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:93:11:bc:34:c9:74:60:bf:13:85:75:d4:4e:56:28:b5:34:e5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Validity
Not Before: Aug 13 08:31:20 2026 GMT
Not After : Aug 12 08:36:20 2027 GMT
Subject: CN=C7C0EC1D1776CB2C2F6EEDF6C5CF11E636581565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:b9:33:76:8f:7d:6f:98:e0:5f:e2:e8:11:
04:e7:8b:c7:73:d2:53:c7:a4:c4:72:0f:92:3c:d8:
40:26:75:25:0d:d0:85:9d:c0:79:a9:74:5b:bf:5a:
8d:b1:59:5f:31:d0:b5:9e:94:32:7e:b6:86:c3:eb:
c0:9c:f7:37:43:36:0a:b9:55:7f:65:1d:b9:c7:76:
eb:c0:3e:4b:ff:54:a6:ad:57:d4:16:48:ca:ef:7d:
51:78:a4:c5:1e:27:d3:b2:d0:1b:66:48:2c:96:49:
34:a0:74:1b:f5:22:d6:ac:99:56:97:65:1c:79:2a:
8b:d2:27:1f:a0:24:ff:76:04:3e:ee:c0:70:fe:2f:
de:e9:43:68:39:fa:d9:43:64:90:73:0f:97:ed:00:
09:55:dd:4a:10:eb:3f:84:66:23:df:7a:3e:9c:c7:
54:b7:35:6b:ce:de:c7:d0:54:25:9b:c3:dd:43:be:
81:ce:e2:5b:25:b5:e1:81:8c:91:8f:ec:1f:c5:95:
06:8c:0f:97:53:2e:1c:42:db:61:b5:1d:e0:3f:6b:
7f:db:8d:dd:2e:81:56:3f:92:34:6d:a7:33:ce:6a:
f6:e4:50:30:6b:2c:6f:96:c0:70:83:f8:ef:27:f0:
85:8e:7e:7b:fc:d6:bf:1e:8a:78:98:0e:3e:cb:69:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C0:EC:1D:17:76:CB:2C:2F:6E:ED:F6:C5:CF:11:E6:36:58:15:65
X509v3 Authority Key Identifier:
keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37332e302f32342d3234203d3e203332373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.14.73.0/24
Signature Algorithm: sha256WithRSAEncryption
79:1a:9d:3a:a6:9c:d3:a5:0e:a9:55:8a:dc:d8:a7:00:e2:84:
e0:02:3d:22:9b:8c:19:9d:0d:a3:ee:9a:46:ac:08:a9:5d:b5:
ca:c0:da:8d:d3:f0:75:c8:9f:7a:18:65:b0:0e:86:b0:1c:ff:
c5:1f:00:fa:2b:fb:4e:a4:79:a6:87:97:20:88:66:54:9a:6a:
d1:bc:e5:48:da:24:ce:5e:9e:a9:ea:d6:92:d3:b6:fd:5a:e3:
be:cf:7d:f4:71:c8:3c:ec:9b:3a:0e:7b:ed:73:5a:9c:ee:fb:
9a:ef:e0:39:f4:56:be:a7:93:82:57:23:cf:88:91:e7:19:c6:
75:62:7e:fe:b4:49:c7:d2:ed:21:dd:dd:9e:aa:f9:45:f3:5a:
74:4d:01:fc:76:bd:7a:38:22:08:3a:44:60:59:59:7a:53:40:
a9:21:52:b6:97:4b:42:c7:cc:ed:2d:d2:0b:67:26:73:3e:63:
3d:ad:ce:0d:e2:20:60:22:f9:df:6e:18:fe:79:02:a5:6b:6e:
b6:1e:94:ac:78:12:b4:15:0d:0c:12:60:96:85:71:1f:a9:59:
e3:08:f7:16:e9:ea:ce:27:d5:0f:db:8f:1e:66:75:56:88:de:
f5:c3:ca:72:08:89:43:92:72:02:c8:68:16:76:be:6e:8b:a1:
5c:cd:e5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:29:59 2026 by rpki-client