
$ rpki-client -vvvf rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3138392e302f32342d3234203d3e20333935383431.roa
File: 3230382e39312e3138392e302f32342d3234203d3e20333935383431.roa (raw, json)
Hash identifier: tLNPwe01DAKRuAk5niWivJVm9Bf/s/GXCVscvD1wD8c=
Subject key identifier: 46:51:DD:E3:04:26:73:5E:E4:DD:E1:89:34:CD:FD:08:3C:64:44:5C
Certificate issuer: /CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
Certificate serial: 2F607225D11904EA7B49B2458DCFD5FF8571AFAC
Authority key identifier: 27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3138392e302f32342d3234203d3e20333935383431.roa
Signing time: Wed 26 Aug 2026 06:15:17 +0000
ROA not before: Wed 26 Aug 2026 06:10:17 +0000
ROA not after: Wed 25 Aug 2027 06:15:17 +0000
asID: 395841
IP address blocks: 208.91.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl
rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 08:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:60:72:25:d1:19:04:ea:7b:49:b2:45:8d:cf:d5:ff:85:71:af:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
Validity
Not Before: Aug 26 06:10:17 2026 GMT
Not After : Aug 25 06:15:17 2027 GMT
Subject: CN=4651DDE30426735EE4DDE18934CDFD083C64445C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:ae:bc:9f:05:77:2b:f2:62:55:7a:78:09:
54:0b:24:b2:ad:15:9e:aa:09:37:22:a9:9d:2d:3b:
55:e1:8e:0b:1e:91:86:a0:a8:8e:01:db:ed:df:3c:
c6:00:c6:90:da:09:7b:e7:27:9c:9f:88:c3:47:aa:
23:d4:07:ee:58:b2:59:bb:39:df:3e:77:32:51:33:
13:f9:e1:57:38:ef:6b:0f:d8:99:e8:ba:1f:ae:b4:
a5:b7:92:1f:3d:d1:66:45:5d:9e:e4:5a:30:d8:0e:
bc:3a:93:4e:ff:8d:ac:3d:65:a2:2c:9a:75:17:75:
ab:2a:57:ca:ed:be:a1:96:4d:91:7d:2e:72:3d:9c:
ec:97:c5:16:76:6b:9a:d1:33:6d:31:29:f0:86:fd:
a1:7c:8e:e4:d1:5d:6a:af:92:4c:d2:07:8d:38:43:
dc:29:b0:1b:64:bc:fe:ed:d7:91:66:40:46:f5:f9:
80:bd:78:8c:b2:42:34:f2:07:4d:b1:49:4c:18:93:
ea:83:28:f0:4c:97:e4:a3:cf:62:57:52:43:21:ea:
00:14:67:62:f9:a1:54:a8:b9:10:da:d0:ca:20:78:
d9:d6:3f:ab:89:06:ec:b5:e8:95:3c:35:72:ae:ae:
ab:4d:45:00:37:5e:90:97:40:08:2e:65:dc:ae:0c:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:51:DD:E3:04:26:73:5E:E4:DD:E1:89:34:CD:FD:08:3C:64:44:5C
X509v3 Authority Key Identifier:
keyid:27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3138392e302f32342d3234203d3e20333935383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.189.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ee:34:1a:cc:0a:c3:f8:84:28:92:8e:33:2e:0c:48:06:13:
0b:01:61:6a:cf:52:96:4d:40:33:01:70:49:75:21:12:43:d5:
fa:ca:23:7f:70:a5:3d:1f:21:6d:79:c9:2c:a1:2a:84:33:0d:
c3:98:06:a0:16:a7:68:7c:40:63:0f:56:d4:52:8d:2a:82:99:
d9:d7:26:f8:02:8b:4c:28:c3:78:33:7d:8e:58:06:b8:ec:b0:
d4:f1:62:bb:64:64:ae:77:50:52:7e:72:e7:1e:12:20:4f:e0:
cd:f7:e1:a7:cb:03:50:66:3c:18:92:20:83:a9:75:3e:68:7b:
31:b6:23:6f:a5:3b:1c:73:c4:68:b1:28:0d:2f:c2:92:c1:25:
06:00:f0:fe:3c:b5:db:43:6a:6c:98:3e:50:25:ee:fe:02:ab:
36:63:83:71:bf:00:bd:b5:57:83:d5:05:36:0e:9e:01:11:0e:
14:3d:a6:af:32:cd:b8:30:47:e1:17:df:64:9d:a9:2c:a2:a3:
76:90:2e:93:91:be:49:38:40:83:25:d5:34:5b:92:c4:0a:d5:
2f:3f:6c:83:f8:43:de:81:41:50:9a:b6:63:fa:64:a9:81:47:
6e:15:da:ac:65:29:77:8c:db:17:60:8d:6f:33:7c:c9:ce:3d:
25:bd:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:55 2026 by rpki-client