
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/32332e3138362e3138342e302f32342d3234203d3e203131333538.roa
File: 32332e3138362e3138342e302f32342d3234203d3e203131333538.roa (raw, json)
Hash identifier: NCn3+MfQHf9Y40FqopJbxoTsJTiXsc63kgCKF2d4Ngo=
Subject key identifier: 17:4B:C3:AE:C7:77:CC:1D:67:D6:8C:EC:8B:39:67:85:0B:46:30:27
Certificate issuer: /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial: 4C680372F07ABC5E824BABB2107F4D87E4C5B716
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/32332e3138362e3138342e302f32342d3234203d3e203131333538.roa
Signing time: Sun 20 Sep 2026 01:43:44 +0000
ROA not before: Sun 20 Sep 2026 01:38:44 +0000
ROA not after: Sun 19 Sep 2027 01:43:44 +0000
asID: 11358
IP address blocks: 23.186.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 05:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:68:03:72:f0:7a:bc:5e:82:4b:ab:b2:10:7f:4d:87:e4:c5:b7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Validity
Not Before: Sep 20 01:38:44 2026 GMT
Not After : Sep 19 01:43:44 2027 GMT
Subject: CN=174BC3AEC777CC1D67D68CEC8B3967850B463027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:17:c6:35:5c:6e:7e:cd:c1:40:b5:78:38:
89:11:fe:c5:8e:d7:91:2b:f4:f8:2b:3a:d9:48:65:
61:60:a4:da:8f:8a:2e:4d:f9:99:c6:91:29:14:4c:
01:49:c0:b5:6f:9f:68:49:8f:4a:4d:61:64:f6:84:
f7:86:d5:b9:22:d6:35:71:3a:5a:60:8b:27:48:a9:
cb:09:48:66:71:44:58:5c:41:3d:fb:38:1b:71:41:
a2:59:b8:c4:38:1e:87:1d:58:12:3b:00:77:a4:48:
f7:05:a7:d9:60:7e:7f:d5:48:5f:4b:39:8d:e8:b1:
ab:79:5d:72:aa:1c:7b:ec:49:db:0e:30:1b:88:30:
41:93:04:6b:c4:7b:73:79:ec:dc:54:50:d4:91:28:
e2:5d:b1:7b:97:70:6f:7a:e0:5d:ff:26:07:1b:83:
76:93:d5:34:e7:ef:ab:b9:45:63:66:bb:67:50:cc:
87:c3:cd:ae:6d:68:43:22:62:ed:44:8a:fc:8a:6e:
5c:fd:dc:f3:b5:6b:4a:5c:7d:78:fe:a2:4a:c3:18:
e3:d8:49:4b:13:e6:f1:42:ce:82:21:54:78:67:5a:
30:1d:48:27:6f:af:d9:2b:f5:70:bd:88:19:1b:8f:
65:ad:0e:b9:e0:38:4f:08:6c:34:7e:19:0a:8e:d8:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4B:C3:AE:C7:77:CC:1D:67:D6:8C:EC:8B:39:67:85:0B:46:30:27
X509v3 Authority Key Identifier:
keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/32332e3138362e3138342e302f32342d3234203d3e203131333538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.186.184.0/24
Signature Algorithm: sha256WithRSAEncryption
77:23:33:c4:95:aa:68:f1:9d:a9:20:41:fa:57:8e:85:50:32:
63:c1:c0:a0:21:d2:12:2f:69:5e:d0:b1:e1:11:73:80:67:d2:
01:4d:bb:bc:13:07:02:48:4a:f1:a6:25:fe:71:a7:12:fa:0b:
32:3f:e6:22:1a:31:aa:bc:ec:ef:7a:4c:71:d6:99:25:53:c7:
76:ce:b7:06:22:7c:94:86:77:b4:5a:44:3d:a7:0c:c1:7d:d6:
9f:95:aa:dc:fa:d5:2d:c7:85:c0:46:a2:c1:d5:a6:24:f4:0e:
32:c1:30:ad:94:d5:19:ef:12:d6:51:f1:1c:04:5c:8a:ad:74:
17:f6:88:e6:4a:98:51:29:c3:61:3f:14:c8:87:07:a4:4f:6e:
c1:49:69:67:46:9e:55:90:68:6f:0e:dc:19:a3:af:39:8b:ad:
78:cb:64:e2:62:d9:b3:d4:47:11:88:f8:b3:4d:08:8d:ec:ed:
c0:1b:80:02:ec:bb:55:8f:cc:af:49:f8:6b:d1:8d:37:e8:d3:
f8:62:c1:37:b5:0a:b4:bd:ab:69:f6:f4:66:db:1c:97:bc:df:
6f:64:e6:46:f5:55:33:ac:47:cf:f2:ee:b4:ed:18:e3:b8:f9:
cc:e7:db:87:ff:ae:2f:6c:63:39:82:54:f4:7c:c4:22:29:3f:
c0:21:a2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:29:29 2026 by rpki-client