
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32342d3234203d3e203233343730.roa
File: 38392e3230372e3137382e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: W9KRVPK6DmT60+zD9oNpxf1NohJAn82VVJydntpRi58=
Subject key identifier: B4:BA:6D:68:CA:DD:62:AD:4A:5A:BD:72:24:ED:97:1C:11:9C:17:2A
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 1AA0499C301A5EFAE99A63A3791CBBF4A8CEDA25
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32342d3234203d3e203233343730.roa
Signing time: Sat 29 Aug 2026 17:44:43 +0000
ROA not before: Sat 29 Aug 2026 17:39:43 +0000
ROA not after: Sat 28 Aug 2027 17:44:43 +0000
asID: 23470
IP address blocks: 89.207.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 13:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a0:49:9c:30:1a:5e:fa:e9:9a:63:a3:79:1c:bb:f4:a8:ce:da:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Aug 29 17:39:43 2026 GMT
Not After : Aug 28 17:44:43 2027 GMT
Subject: CN=B4BA6D68CADD62AD4A5ABD7224ED971C119C172A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:c1:e6:3f:a2:7a:8a:67:84:51:68:b9:1e:
88:90:d8:16:6f:81:a7:5a:00:d5:d5:da:54:4d:90:
8a:43:92:04:c1:dd:98:8a:05:60:4d:ba:a1:92:b4:
81:de:20:b2:93:3f:12:18:f7:d3:30:db:e6:44:5d:
f0:08:c4:f0:e1:82:8a:1f:e9:be:52:04:54:34:78:
9b:fc:ed:18:f6:fe:5b:95:e1:26:0d:79:f2:34:0c:
af:8d:dc:39:ab:88:54:97:3c:87:fc:57:89:21:b7:
fe:34:35:6a:01:77:4b:15:5d:d3:28:e5:e8:f2:bd:
cb:ee:bd:61:15:ee:56:6d:46:70:ac:aa:35:70:1b:
ff:96:c9:f3:fe:10:6b:19:85:50:f4:61:e5:83:63:
eb:1c:c2:db:e8:a8:0c:d7:39:e3:33:d4:91:5c:a9:
e0:b4:fb:27:a1:f2:da:2d:7e:8a:1d:dd:a7:84:5c:
b7:2e:05:21:1c:b5:9e:fa:d4:8c:72:1e:5d:13:a5:
9c:cb:47:83:6f:51:5f:c3:8c:18:4e:97:c4:33:0f:
f0:34:fe:8e:b4:cc:82:a6:6c:7f:8d:7a:02:09:98:
3e:de:d2:af:cf:77:87:65:43:9c:e6:82:14:d6:a3:
36:d5:1b:88:13:c5:ba:72:c8:4a:44:64:2d:71:93:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BA:6D:68:CA:DD:62:AD:4A:5A:BD:72:24:ED:97:1C:11:9C:17:2A
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.178.0/24
Signature Algorithm: sha256WithRSAEncryption
06:fc:5c:2a:53:c9:77:a8:d6:95:fd:29:0a:26:51:28:68:ef:
3d:9f:8b:c5:71:05:97:00:91:34:e2:2e:e1:ca:6d:06:86:73:
1a:3f:15:6b:06:b6:01:f7:c4:65:dd:f2:d8:20:55:c3:4a:fb:
04:01:6d:9a:ba:ff:5c:df:5d:20:6f:de:88:2d:be:09:d2:a6:
1d:28:33:63:88:ff:4b:0a:49:0e:8f:28:8c:c5:72:13:99:3e:
a7:b8:d9:fb:fd:e8:c5:9f:a5:e7:07:a6:53:0d:2f:c5:05:68:
72:03:75:c7:ae:ae:fc:98:db:c5:be:44:23:f0:92:e1:43:53:
36:2e:ae:b5:49:22:c4:15:3d:6f:bd:3e:a2:24:89:72:4b:2b:
95:53:9c:f1:47:6c:72:43:e2:fe:fc:15:ea:46:d5:ef:a0:89:
1d:ab:93:8d:39:7e:28:72:45:42:5e:a0:56:f4:85:44:5d:ed:
05:69:ce:f7:9d:1d:ab:4c:9b:e9:2d:6c:44:40:23:6d:c5:e8:
1c:f3:ab:2e:4b:3d:99:d6:8f:66:08:9d:dd:ff:c4:a4:a3:b3:
f8:08:e1:29:e4:3c:68:69:0e:28:d6:4c:ac:78:66:c9:51:95:
7b:36:f4:7d:53:9d:c4:3d:8a:11:c6:40:bf:7e:f8:1f:97:fd:
93:6f:f4:36
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUGqBJnDAaXvrpmmOjeRy79KjO2iUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwODI5MTczOTQzWhcNMjcwODI4MTc0NDQz
WjAzMTEwLwYDVQQDEyhCNEJBNkQ2OENBREQ2MkFENEE1QUJENzIyNEVEOTcxQzEx
OUMxNzJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGPB5j+ieopn
hFFouR6IkNgWb4GnWgDV1dpUTZCKQ5IEwd2YigVgTbqhkrSB3iCykz8SGPfTMNvm
RF3wCMTw4YKKH+m+UgRUNHib/O0Y9v5bleEmDXnyNAyvjdw5q4hUlzyH/FeJIbf+
NDVqAXdLFV3TKOXo8r3L7r1hFe5WbUZwrKo1cBv/lsnz/hBrGYVQ9GHlg2PrHMLb
6KgM1znjM9SRXKngtPsnofLaLX6KHd2nhFy3LgUhHLWe+tSMch5dE6Wcy0eDb1Ff
w4wYTpfEMw/wNP6OtMyCpmx/jXoCCZg+3tKvz3eHZUOc5oIU1qM21RuIE8W6cshK
RGQtcZMdVwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFLS6bWjK3WKtSlq9ciTtlxwR
nBcqMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzM4MzkyZTMyMzAzNzJlMzEzNzM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMzM0MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFnPsjANBgkqhkiG9w0BAQsF
AAOCAQEABvxcKlPJd6jWlf0pCiZRKGjvPZ+LxXEFlwCRNOIu4cptBoZzGj8Vawa2
AffEZd3y2CBVw0r7BAFtmrr/XN9dIG/eiC2+CdKmHSgzY4j/SwpJDo8ojMVyE5k+
p7jZ+/3oxZ+l5wemUw0vxQVocgN1x66u/Jjbxb5EI/CS4UNTNi6utUkixBU9b70+
oiSJcksrlVOc8UdsckPi/vwV6kbV76CJHauTjTl+KHJFQl6gVvSFRF3tBWnO950d
q0yb6S1sREAjbcXoHPOrLks9mdaPZgid3f/EpKOz+AjhKeQ8aGkOKNZMrHhmyVGV
ezb0fVOdxD2KEcZAv374H5f9k2/0Ng==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:25 2026 by rpki-client