
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32322d3232203d3e203539363738.roa
File: 3134302e3233352e3132382e302f32322d3232203d3e203539363738.roa (raw, json)
Hash identifier: mI8ysDxQ/Zo0UGznZm2qTtbMil33SeCpuIq95pv7Pvc=
Subject key identifier: 08:BD:BD:74:C6:69:C4:66:39:7D:0B:09:81:1C:5A:92:63:BC:97:4D
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 6655130C9A8DAE19125922C5335A21A70738A45E
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32322d3232203d3e203539363738.roa
Signing time: Thu 06 Aug 2026 20:39:58 +0000
ROA not before: Thu 06 Aug 2026 20:34:58 +0000
ROA not after: Thu 05 Aug 2027 20:39:58 +0000
asID: 59678
IP address blocks: 140.235.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 13 Aug 2026 20:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:55:13:0c:9a:8d:ae:19:12:59:22:c5:33:5a:21:a7:07:38:a4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: Aug 6 20:34:58 2026 GMT
Not After : Aug 5 20:39:58 2027 GMT
Subject: CN=08BDBD74C669C466397D0B09811C5A9263BC974D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:1c:31:75:e8:b6:eb:89:61:a2:81:50:3e:
16:ac:4f:1d:e1:54:a4:d3:2f:56:e5:92:4d:05:c5:
eb:16:87:a8:54:38:42:76:a4:ac:4e:96:4e:82:a7:
9a:8c:76:f2:65:b8:b2:10:c0:89:1c:8d:01:13:dc:
c2:0c:08:81:40:c7:20:d4:ab:eb:26:15:86:97:85:
aa:3b:9b:1e:cf:5d:06:08:a6:46:01:65:d6:72:d4:
62:4e:4c:4c:a3:75:45:b3:dd:3a:a9:8f:45:2e:c6:
9b:20:59:02:f6:d3:dc:bb:bb:27:90:b0:b4:bf:72:
fe:08:a4:aa:03:cb:8c:bc:8f:06:8d:b1:b1:32:bc:
8f:67:37:d9:c4:54:86:2e:b1:29:36:89:1b:40:05:
4d:41:7a:c5:69:56:ef:63:8e:00:e3:f9:57:42:89:
00:0c:c7:a1:28:ef:f1:70:e1:dd:7e:7d:9d:ee:ce:
ad:ca:c1:e4:ee:73:14:0f:0b:0a:36:da:40:1b:ee:
75:e5:b5:63:f6:d3:46:38:53:6a:5c:cd:ac:13:ab:
6b:bb:02:fc:50:05:20:eb:29:a3:df:01:a5:19:19:
72:26:65:8c:7d:2a:88:8a:7a:70:f2:1e:fe:34:16:
a4:36:08:6c:9f:cb:fe:7d:6e:7b:d8:31:0a:29:bf:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:BD:74:C6:69:C4:66:39:7D:0B:09:81:1C:5A:92:63:BC:97:4D
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32322d3232203d3e203539363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.235.128.0/22
Signature Algorithm: sha256WithRSAEncryption
58:52:db:a6:84:5b:9b:a5:b0:a3:7d:c9:a9:17:c4:3d:a3:3a:
24:43:97:ba:bd:a2:b3:f3:17:8f:6d:8e:ec:be:7b:79:5d:3b:
52:44:f8:34:1d:e1:ed:ce:d5:ff:b3:27:4c:93:94:33:a4:10:
41:47:d3:9e:a8:9a:05:8d:45:a1:79:d4:58:f0:da:3f:9e:11:
e2:93:c5:8a:37:ae:f2:b8:ba:31:5f:67:b5:78:10:64:55:5b:
3f:25:4a:d1:9e:67:53:0c:13:4a:96:9f:c3:f5:ad:81:ab:47:
43:42:c8:9c:44:06:62:45:49:29:c0:2c:3d:34:75:40:31:40:
e4:8e:de:8c:20:b9:cc:cf:e3:30:40:4c:ab:81:f3:93:bd:5d:
61:ca:a7:84:97:7a:3f:16:4d:a1:09:2f:65:1d:ee:02:27:84:
c1:4a:71:e8:8c:88:fe:ee:fe:9b:09:93:47:d6:d8:ff:0f:a3:
fa:a2:14:0a:66:4f:98:52:f0:b4:04:43:0c:be:a1:da:53:e7:
37:b0:17:e1:8b:e8:27:a9:01:e9:bb:69:b0:13:fe:59:ad:ee:
ea:62:95:fa:b5:76:f3:76:8e:36:77:5c:40:f7:db:e1:12:18:
b9:20:20:e9:59:bd:62:d6:4d:92:e1:4c:75:95:68:d9:ad:a5:
01:1a:34:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:02:10 2026 by rpki-client