
$ rpki-client -vvvf rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e32382e302f32332d3234203d3e20323132343737.roa
File: 36342e38342e32382e302f32332d3234203d3e20323132343737.roa (raw, json)
Hash identifier: DEIeyvDLoB1KPQUQ6sWHFQbEvQxwHKPNmxoISqwF0w4=
Subject key identifier: C4:27:54:98:62:72:70:4E:94:9D:AB:83:5C:66:F8:9D:12:6D:F4:7F
Certificate issuer: /CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
Certificate serial: 4AADBA23B3230B5F534460A8C33FF7E79754B00F
Authority key identifier: A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e32382e302f32332d3234203d3e20323132343737.roa
Signing time: Thu 15 Oct 2026 07:08:55 +0000
ROA not before: Thu 15 Oct 2026 07:03:55 +0000
ROA not after: Thu 14 Oct 2027 07:08:55 +0000
asID: 212477
IP address blocks: 64.84.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl
rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Oct 2026 00:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ad:ba:23:b3:23:0b:5f:53:44:60:a8:c3:3f:f7:e7:97:54:b0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
Validity
Not Before: Oct 15 07:03:55 2026 GMT
Not After : Oct 14 07:08:55 2027 GMT
Subject: CN=C42754986272704E949DAB835C66F89D126DF47F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:e6:9e:d9:cc:b2:99:fa:a2:1b:34:52:3b:
56:45:cf:25:d9:5d:95:3c:bb:84:b0:c4:13:c2:39:
40:10:85:fa:52:02:a3:fc:5a:48:7b:62:fc:53:1d:
c8:9d:39:74:33:fe:34:41:d3:15:fc:e2:92:27:d1:
2f:b3:29:3a:70:b0:de:82:54:07:b6:51:30:a0:d1:
11:92:62:e1:f2:f9:30:19:46:40:61:e4:1a:0f:bc:
c2:ba:03:b1:52:d7:96:0d:db:a7:b4:1d:ee:4d:e3:
9c:87:bf:d9:2c:ff:bb:64:30:da:35:87:c5:ac:75:
f3:57:c1:60:99:39:e2:1f:2f:7b:57:78:3f:56:cc:
62:3e:db:2b:9f:9d:c1:bb:a4:72:92:0b:ab:31:0b:
33:67:fc:56:6d:0a:d8:a9:9e:7a:f9:cd:02:75:c7:
70:f9:02:22:5d:3c:c8:2c:69:1f:97:e5:ae:41:c3:
14:89:2f:45:5e:bb:65:b6:ca:d7:81:43:16:16:b4:
69:2a:93:4b:b4:6a:d3:dc:aa:a2:f2:f0:f4:77:5f:
12:e7:d3:fe:72:ed:15:a0:f4:6c:99:c9:d1:68:a2:
99:3d:c8:87:bd:04:16:64:bb:b1:db:e0:0e:d2:f3:
76:46:af:04:6f:9f:03:ff:9a:e7:14:d3:b8:6a:b8:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:27:54:98:62:72:70:4E:94:9D:AB:83:5C:66:F8:9D:12:6D:F4:7F
X509v3 Authority Key Identifier:
keyid:A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e32382e302f32332d3234203d3e20323132343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.84.28.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:d4:2b:05:be:ab:70:91:3e:55:f8:74:ce:5e:71:f7:6c:5b:
74:85:c7:53:e6:87:dd:b8:14:85:12:f5:1a:07:27:ee:96:9e:
a5:b1:d6:95:1a:ed:5e:bc:66:6f:76:57:7b:8f:d4:41:84:63:
ce:c5:68:cd:f6:ed:9f:80:e9:e2:dd:31:41:52:1d:31:fa:45:
fa:a1:ef:e1:ce:d7:ab:8d:a6:6d:11:89:21:6a:83:e7:37:e3:
4f:0a:f6:69:3e:03:80:a0:81:bc:65:eb:4c:10:5f:26:f2:aa:
87:5a:2b:00:34:60:e7:b3:0c:32:04:6d:c8:90:0d:f5:38:ab:
76:b1:40:9b:ae:8a:86:3e:88:9f:27:2a:cf:b3:f1:25:91:7a:
c6:2a:c5:79:c9:dd:83:58:59:e3:74:ae:0e:f9:62:9a:70:46:
4b:ab:3e:8a:4f:f2:bc:69:2d:16:dd:a8:61:90:ab:66:15:f9:
25:12:45:3c:97:da:9a:a4:c5:31:1e:fa:7e:4e:c8:de:61:77:
e6:73:4c:c4:3f:5b:d8:d7:b5:f4:5c:50:69:2d:c9:1b:01:62:
b7:ea:d2:9e:68:7c:f6:36:e5:8d:e6:af:73:89:8e:eb:9a:b5:
12:fd:b6:ad:0f:e0:7d:c7:ce:ef:6f:d3:39:82:b7:26:5b:5a:
10:7b:dc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:52:26 2026 by rpki-client