
$ rpki-client -vvvf rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3139302e302f32342d3234203d3e20333935383431.roa
File: 3230382e39312e3139302e302f32342d3234203d3e20333935383431.roa (raw, json)
Hash identifier: tzXRD+KeCCFdfW6122pnk+HvtVRQhVG/IMvJwxX+BdU=
Subject key identifier: E8:2F:D7:20:59:E4:A1:12:28:AB:D0:C7:20:16:BC:FF:A2:04:0F:24
Certificate issuer: /CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
Certificate serial: 50D4920213212A8F01A8DDB43B1E839AA1FD8A22
Authority key identifier: 27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3139302e302f32342d3234203d3e20333935383431.roa
Signing time: Wed 26 Aug 2026 06:15:57 +0000
ROA not before: Wed 26 Aug 2026 06:10:57 +0000
ROA not after: Wed 25 Aug 2027 06:15:57 +0000
asID: 395841
IP address blocks: 208.91.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl
rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 08:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d4:92:02:13:21:2a:8f:01:a8:dd:b4:3b:1e:83:9a:a1:fd:8a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
Validity
Not Before: Aug 26 06:10:57 2026 GMT
Not After : Aug 25 06:15:57 2027 GMT
Subject: CN=E82FD72059E4A11228ABD0C72016BCFFA2040F24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:52:fa:6c:cc:aa:0d:7a:fc:03:df:12:03:75:
ef:fc:6f:b2:af:f3:c5:dd:02:53:6c:f3:6f:46:cf:
59:44:5c:72:7d:84:45:de:96:ad:1c:82:02:fd:b1:
22:26:fb:50:44:23:0a:3f:56:0a:df:bb:fa:16:dd:
58:30:4e:f7:69:ad:0e:73:28:31:fb:2c:fa:2b:01:
93:40:66:f7:e4:98:24:20:94:c5:10:cf:22:b2:04:
da:78:2a:d5:24:e1:73:e7:92:27:b9:ba:52:1a:cf:
c4:01:53:2f:ad:8f:fb:21:43:4a:da:6f:ff:86:21:
62:5d:25:7a:c1:69:e2:ed:c3:1d:56:4b:34:06:3c:
0a:75:68:5d:36:7e:a1:e2:7f:5e:d8:34:af:4d:8c:
6e:c4:57:95:f9:4c:11:f6:3a:b6:ab:ff:5f:14:cc:
37:c7:9d:78:88:a4:e5:54:e3:14:73:3d:bc:5a:64:
64:22:b4:1e:cd:15:41:27:87:d6:e5:e5:f8:96:b8:
fa:dd:c0:c3:71:6d:c8:79:3a:64:23:e8:9c:c8:57:
7c:94:4b:b3:23:c0:0c:7a:91:f7:3b:80:56:e1:d4:
07:00:4f:d0:e8:03:2c:d3:3c:eb:88:5c:05:5d:c4:
49:1b:7c:37:7f:ab:77:74:a7:43:62:1a:69:21:97:
91:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2F:D7:20:59:E4:A1:12:28:AB:D0:C7:20:16:BC:FF:A2:04:0F:24
X509v3 Authority Key Identifier:
keyid:27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3139302e302f32342d3234203d3e20333935383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.190.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:34:f8:ba:df:95:30:d3:be:d2:eb:b6:22:e5:bd:f2:a5:e6:
3b:0c:fd:0e:b7:45:a2:92:2c:9c:6c:d6:09:72:25:3c:69:5b:
7d:e9:4a:0a:8e:9c:9d:8c:fd:52:c5:01:7c:90:ec:0e:3f:32:
af:0a:db:69:43:00:81:fe:40:10:52:a8:d5:16:fd:86:20:9a:
0b:9e:25:58:a4:78:8c:c5:ed:08:23:b6:69:ef:76:3c:f1:c7:
33:34:1b:16:4d:c7:57:e5:79:16:7b:f1:51:3b:76:6a:2d:cb:
4f:c1:64:c6:d5:e1:0c:ec:6a:c8:3c:0c:9f:a2:d9:01:c5:83:
6a:90:00:0c:f4:48:c3:b2:4a:89:2c:cc:50:6d:97:7e:f1:58:
34:3e:e3:02:a0:09:65:ee:50:b8:21:83:7a:cb:f8:67:ab:02:
86:73:ad:11:ea:0e:f5:18:46:d5:75:a8:e9:4a:19:54:df:a6:
e9:89:5e:92:4e:60:b7:de:6e:df:e0:4f:6b:ba:35:97:3b:21:
36:55:76:ba:71:5f:52:ab:1a:9a:5d:ce:c8:81:7e:4f:fa:19:
81:ea:79:07:12:ad:a1:4f:98:5d:45:67:be:a2:19:a1:c4:17:
7d:9b:87:82:06:34:fd:23:7a:c0:34:04:58:8a:54:cc:5e:09:
10:94:39:69
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUUNSSAhMhKo8BqN20Ox6DmqH9iiIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmRkZDdhOGQwNTUxOGE4NmQzMTQzMzAyMTJiNTJlZjdm
MWZkZmFiMDliMGY0ODI0ZGQwHhcNMjYwODI2MDYxMDU3WhcNMjcwODI1MDYxNTU3
WjAzMTEwLwYDVQQDEyhFODJGRDcyMDU5RTRBMTEyMjhBQkQwQzcyMDE2QkNGRkEy
MDQwRjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lL6bMyqDXr8
A98SA3Xv/G+yr/PF3QJTbPNvRs9ZRFxyfYRF3patHIIC/bEiJvtQRCMKP1YK37v6
Ft1YME73aa0Ocygx+yz6KwGTQGb35JgkIJTFEM8isgTaeCrVJOFz55InubpSGs/E
AVMvrY/7IUNK2m//hiFiXSV6wWni7cMdVks0BjwKdWhdNn6h4n9e2DSvTYxuxFeV
+UwR9jq2q/9fFMw3x514iKTlVOMUcz28WmRkIrQezRVBJ4fW5eX4lrj63cDDcW3I
eTpkI+icyFd8lEuzI8AMepH3O4BW4dQHAE/Q6AMs0zzriFwFXcRJG3w3f6t3dKdD
YhppIZeREwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFOgv1yBZ5KESKKvQxyAWvP+i
BA8kMB8GA1UdIwQYMBaAFCdnn8I6BuRfr7/cGLI7l5iRHBnXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5Lzc4MzA5YzVhYWEzZTQxNjhhZjJjOWY3YzJjMDQyNjQxLzAv
Mjc2NzlGQzIzQTA2RTQ1RkFGQkZEQzE4QjIzQjk3OTg5MTFDMTlENy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyLzQ4ZjYxMjFhLTk0M2MtNGMwZC04Yjg3LTNmZWNiZTcxMDY3ZC8yZGRk
N2E4ZDA1NTE4YTg2ZDMxNDMzMDIxMmI1MmVmN2YxZmRmYWIwOWIwZjQ4MjRkZC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS83ODMwOWM1YWFhM2U0MTY4YWYyYzlm
N2MyYzA0MjY0MS8wLzMyMzAzODJlMzkzMTJlMzEzOTMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzOTM1MzgzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fu+MA0GCSqGSIb3DQEB
CwUAA4IBAQCmNPi635Uw077S67Yi5b3ypeY7DP0Ot0WikiycbNYJciU8aVt96UoK
jpydjP1SxQF8kOwOPzKvCttpQwCB/kAQUqjVFv2GIJoLniVYpHiMxe0II7Zp73Y8
8cczNBsWTcdX5XkWe/FRO3ZqLctPwWTG1eEM7GrIPAyfotkBxYNqkAAM9EjDskqJ
LMxQbZd+8Vg0PuMCoAll7lC4IYN6y/hnqwKGc60R6g71GEbVdajpShlU36bpiV6S
TmC33m7f4E9rujWXOyE2VXa6cV9SqxqaXc7IgX5P+hmB6nkHEq2hT5hdRWe+ohmh
xBd9m4eCBjT9I3rANARYilTMXgkQlDlp
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:55 2026 by rpki-client