
$ rpki-client -vvf rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3139312e302f32342d3234203d3e203431303935.roa
File: 3230382e39312e3139312e302f32342d3234203d3e203431303935.roa (raw, json)
Hash identifier: MlFfxycDN9cXZY403tEWKtVrqwdt0mCFTflGDU1E5Gw=
Subject key identifier: 75:CC:C4:63:B7:7B:7E:1C:FE:0C:A2:55:4F:76:B2:CA:C2:4C:D8:A6
Certificate issuer: /CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
Certificate serial: 2B4C6C6345CA36BF46F9AC695A7A71B22DC573F3
Authority key identifier: 27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3139312e302f32342d3234203d3e203431303935.roa
Signing time: Tue 23 Jun 2026 12:14:23 +0000
ROA not before: Tue 23 Jun 2026 12:09:23 +0000
ROA not after: Tue 22 Jun 2027 12:14:23 +0000
asID: 41095
IP address blocks: 208.91.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl
rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Jul 2026 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:4c:6c:63:45:ca:36:bf:46:f9:ac:69:5a:7a:71:b2:2d:c5:73:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
Validity
Not Before: Jun 23 12:09:23 2026 GMT
Not After : Jun 22 12:14:23 2027 GMT
Subject: CN=75CCC463B77B7E1CFE0CA2554F76B2CAC24CD8A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:2c:7c:59:8c:1a:03:4c:05:ac:ed:14:d0:
9d:f1:ad:21:ce:aa:2b:ef:75:5a:a6:be:fe:a4:62:
b3:a1:cb:0f:e3:34:d1:58:a0:bb:d7:74:ea:e9:d2:
c6:06:64:d7:67:58:0b:5a:74:68:ff:c9:22:24:04:
be:32:70:82:59:3d:ba:44:0b:d5:dc:9b:94:ad:a5:
70:1d:95:61:5e:f9:e1:8e:95:df:97:96:3b:28:1b:
4c:3e:dc:bc:7e:02:72:7f:74:91:86:29:02:f8:87:
a1:f4:a1:01:88:5c:7c:17:d9:c0:2b:6a:19:20:36:
da:b9:ed:46:42:2f:c9:fb:b4:a8:a7:b5:b0:54:23:
76:6b:8b:4d:9b:bd:bb:98:3a:fe:f6:c1:b4:c3:f6:
c4:e2:51:42:99:89:12:55:74:2f:89:53:20:37:50:
b5:51:09:4e:93:f0:f9:f7:de:98:75:8f:25:3d:e7:
7a:79:9f:57:2e:28:b3:ac:0c:38:2a:ef:a0:ba:9f:
be:b6:77:6f:4d:97:c6:f3:0f:bd:41:b3:60:81:71:
23:dc:09:b0:6e:46:37:76:2a:4e:6c:1b:38:18:f1:
ae:3c:4c:8d:d5:02:3e:bf:25:64:93:06:db:12:cc:
15:75:0f:1a:8f:04:5d:97:f7:bc:b1:d1:c7:29:11:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CC:C4:63:B7:7B:7E:1C:FE:0C:A2:55:4F:76:B2:CA:C2:4C:D8:A6
X509v3 Authority Key Identifier:
keyid:27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3139312e302f32342d3234203d3e203431303935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.191.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c0:64:b8:5c:df:a4:c0:f0:77:c4:37:b5:f4:46:4c:d4:0a:
d1:f9:5a:5f:88:a7:e9:f8:d8:ab:59:39:76:8c:13:41:98:8f:
fe:d3:fe:58:89:e6:d6:41:8a:5a:83:2f:ad:83:f3:24:97:24:
56:1f:7f:ef:2c:fb:e0:0e:12:8b:df:db:af:33:10:20:d8:7d:
2e:3e:3a:df:7b:31:5e:36:79:c4:38:20:66:39:37:38:08:a7:
e6:6c:58:0c:a4:14:31:7f:8a:07:9c:7e:44:ac:81:db:19:dd:
be:bd:e4:4d:ac:4f:4c:82:e2:7a:d6:5f:1a:3b:d6:ef:b2:cf:
95:31:88:5a:10:ba:62:52:9f:37:d3:4e:c6:98:f1:21:67:ef:
73:82:f9:d8:2f:a4:13:0f:e8:44:bc:b0:c7:d4:2d:65:b4:f4:
c3:82:5c:cb:81:db:2c:5e:7c:96:a6:d2:30:86:41:4b:00:63:
79:6c:e1:12:14:66:0f:33:9a:17:8e:f9:cb:94:eb:0f:42:f5:
a6:04:1d:ae:2e:a2:06:9b:c0:bc:11:2b:39:79:60:20:63:37:
8b:d9:ca:d2:8b:5f:2d:6a:87:bb:0a:72:84:bd:0d:bb:47:f5:
a5:aa:67:75:f6:0b:d0:bd:07:c0:6f:27:c1:a3:13:b4:a4:18:
b8:a5:d9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:17:59 2026 by rpki-client