
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32342d3234203d3e20313938353636.roa
File: 38392e3230372e3137382e302f32342d3234203d3e20313938353636.roa (raw, json)
Hash identifier: PazDQoEq2/Uj33SBI65onPlw++Usshxh3CLdQCR8/JI=
Subject key identifier: D9:63:93:97:4D:34:17:31:9B:01:A9:1C:0C:DE:96:D9:FE:5B:53:1C
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 13FA35AEB0181055609C3895CAF18F88ACF2D5D1
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32342d3234203d3e20313938353636.roa
Signing time: Thu 08 Oct 2026 14:21:10 +0000
ROA not before: Thu 08 Oct 2026 14:16:10 +0000
ROA not after: Thu 07 Oct 2027 14:21:10 +0000
asID: 198566
IP address blocks: 89.207.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Oct 2026 17:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:fa:35:ae:b0:18:10:55:60:9c:38:95:ca:f1:8f:88:ac:f2:d5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Oct 8 14:16:10 2026 GMT
Not After : Oct 7 14:21:10 2027 GMT
Subject: CN=D96393974D3417319B01A91C0CDE96D9FE5B531C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:00:71:03:fb:d9:6b:b0:09:b8:be:51:c7:
32:ad:55:57:c2:f8:6e:51:31:cf:6c:e4:9f:f6:66:
d5:5f:1d:05:9a:28:a6:ad:99:93:7a:da:f1:d8:0d:
a6:ea:a4:92:09:d5:b5:4c:11:d8:a0:23:f7:45:c2:
8d:4a:21:0c:89:34:2a:32:6f:2a:d0:d2:a5:38:44:
eb:e6:78:99:ba:6c:dd:24:20:a3:e0:99:6b:d3:f1:
d6:34:18:84:9b:42:5e:3d:0a:d6:2e:31:bf:c6:60:
69:d5:86:42:00:fa:9e:6e:e5:82:a0:1f:67:d5:77:
eb:74:7e:d1:d4:26:b3:d5:f4:4f:3a:bf:af:1a:d0:
3f:09:67:0a:27:fd:57:f1:c4:7a:28:f2:9e:93:90:
56:17:d1:ab:ad:67:39:ba:ef:8a:9a:c8:51:85:59:
d6:ea:c4:b0:e0:8a:15:48:ee:19:8b:77:74:a7:d6:
dd:59:57:c3:3f:b5:de:75:f3:fd:8b:7a:87:ac:ae:
99:fc:f1:77:e3:be:a1:ca:7f:c7:ac:59:19:39:b2:
ba:5f:bc:5d:7a:8c:b3:79:1d:87:5a:3e:d4:3b:0b:
25:ca:86:c5:15:1d:78:7a:47:f5:22:91:39:aa:b8:
a4:8c:73:79:7b:69:99:76:41:62:19:88:47:6f:38:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:63:93:97:4D:34:17:31:9B:01:A9:1C:0C:DE:96:D9:FE:5B:53:1C
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32342d3234203d3e20313938353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.178.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:4f:03:cb:6c:b5:86:15:97:4b:ac:85:a5:ad:53:10:75:98:
63:73:c3:05:0f:31:83:9a:54:0f:92:30:76:0e:b3:66:81:83:
ba:91:de:45:fe:50:12:7d:91:ed:84:7a:09:16:f2:92:6e:88:
de:8f:d0:2c:3e:c1:4f:b5:63:d2:f8:02:9c:e8:0d:90:0c:63:
57:60:98:d5:ca:45:ef:88:4f:d0:b4:9a:2d:1a:23:84:92:a7:
53:ff:82:e3:91:a5:b1:1a:92:73:73:5a:e7:f9:22:85:e1:5f:
49:7f:44:04:e4:50:3d:e0:40:6d:b7:3f:e4:e3:9a:13:0b:09:
40:3d:63:16:f2:24:cc:56:f9:d8:d4:7c:1e:61:81:e6:69:ca:
a8:db:a4:83:d3:ab:3a:4e:43:4b:d1:f3:e2:11:10:7a:36:5a:
e5:3b:ca:08:af:20:35:f0:ba:01:d6:7c:64:33:5b:07:df:87:
6b:67:6e:b2:fe:3d:c2:cb:92:11:42:b1:2c:08:23:02:ff:2d:
9a:d9:a2:88:3b:43:06:83:47:dd:da:e8:42:9a:91:ae:19:fd:
02:b0:c8:00:c0:99:37:b0:b0:8e:4e:84:6c:97:b2:da:24:11:
26:6f:d3:49:27:d2:6e:eb:f9:e7:42:37:4e:ef:d8:09:2f:9f:
8d:52:4a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:40 2026 by rpki-client