
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137372e302f32342d3234203d3e20313436383932.roa
File: 38392e3230372e3137372e302f32342d3234203d3e20313436383932.roa (raw, json)
Hash identifier: Ne/tYhRBNRawtVaFawZ3sSHLdL87Ei8fxgqpNkz4k6A=
Subject key identifier: 5A:21:6C:FE:E6:35:EC:B1:3D:CF:06:A6:C7:99:70:24:97:9E:4E:FC
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 7EB495654A79D1C74B23965C06E21B5D7EBEC50B
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137372e302f32342d3234203d3e20313436383932.roa
Signing time: Mon 20 Jul 2026 17:45:29 +0000
ROA not before: Mon 20 Jul 2026 17:40:29 +0000
ROA not after: Mon 19 Jul 2027 17:45:29 +0000
asID: 146892
IP address blocks: 89.207.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 13:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b4:95:65:4a:79:d1:c7:4b:23:96:5c:06:e2:1b:5d:7e:be:c5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Jul 20 17:40:29 2026 GMT
Not After : Jul 19 17:45:29 2027 GMT
Subject: CN=5A216CFEE635ECB13DCF06A6C7997024979E4EFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f4:11:25:5c:66:d2:12:42:56:2a:86:e0:fb:
8d:54:ad:6d:63:d7:59:13:f2:ec:d8:d2:d2:a9:b8:
29:ae:de:81:e2:75:26:25:be:01:5c:78:6a:83:21:
b9:19:71:f7:5b:4c:87:86:7c:fc:8a:68:a4:ed:e4:
04:6f:3f:40:15:94:ca:2c:b9:76:39:26:37:41:89:
20:4c:5e:61:09:49:9f:cc:7a:b2:11:da:19:07:28:
25:17:fe:8c:4c:49:71:bb:cd:d3:90:e3:fd:c0:7b:
ad:4e:54:21:5f:21:af:9d:db:a8:0f:61:90:a8:a1:
6b:7f:91:d4:b2:60:22:7a:98:9e:16:8c:cb:93:75:
a1:c2:45:17:e8:91:3b:9f:56:65:76:e2:c8:77:8b:
c2:90:85:a4:70:7e:4a:e0:b8:f5:3d:2e:14:59:34:
9a:1f:b2:50:17:2f:e4:28:33:64:d0:52:c4:d4:27:
1c:bd:a7:96:86:b6:12:2b:ad:b3:9a:39:b7:bc:2e:
b9:d1:58:08:d1:74:00:08:5c:07:dd:2c:a3:36:65:
24:33:33:c1:5b:49:77:8c:dd:b5:7a:6a:a0:47:3c:
86:a1:3e:ec:7e:d6:2c:ce:59:6c:b5:28:68:87:a7:
36:87:bc:c5:79:8a:53:e7:15:5e:dc:71:0a:22:d1:
6a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:21:6C:FE:E6:35:EC:B1:3D:CF:06:A6:C7:99:70:24:97:9E:4E:FC
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137372e302f32342d3234203d3e20313436383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.177.0/24
Signature Algorithm: sha256WithRSAEncryption
04:57:72:9d:92:c0:f5:7b:63:91:8f:bc:90:cb:3e:06:bd:e9:
2c:7a:3b:57:35:0c:75:76:a2:2b:9a:b1:ca:f7:1e:03:e3:e0:
eb:cd:cf:d5:f4:4c:00:0c:cc:8e:21:a0:4e:62:09:0b:9e:21:
22:ed:e7:e4:8e:54:e3:3b:d7:b3:dd:38:fb:a7:53:ee:be:30:
f5:87:d5:06:4f:9a:d5:56:68:56:a8:d8:c0:f6:cb:03:97:07:
b8:0d:51:ed:58:ed:fe:cc:05:aa:c1:59:87:6d:a1:5c:f2:32:
1c:40:04:a9:ac:a3:53:9c:48:a2:b5:88:91:38:7e:54:5a:5a:
d2:9e:2a:66:ef:7c:53:d7:d4:ee:9d:27:3e:0c:e1:be:fa:b6:
d3:5a:12:cb:53:6e:57:ee:d1:d8:99:31:3b:90:4d:ec:a6:92:
03:53:f9:d1:ee:9f:c1:38:0b:50:4d:29:a7:7d:b0:ea:75:32:
ce:dd:12:f1:4a:22:70:75:09:48:fc:5a:f9:9f:1c:5a:d1:3f:
e8:fa:9e:c5:70:ba:e7:bb:c1:53:62:53:de:b1:50:26:c2:b6:
8e:59:f9:a6:f2:d2:e5:7a:12:4a:7b:7a:5f:08:f1:92:b0:65:
1e:5c:e3:4a:08:db:e0:0b:5c:56:01:2d:a2:75:ce:6c:56:31:
8b:6e:06:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:00:32 2026 by rpki-client